This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa File: 8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa (raw, json) Hash identifier: anBf0N/3EvMLhi5QdEKDwY+ro4QVVInb1131OfclIzw= Subject key identifier: 15:55:79:B1:3D:D4:D4:B4:7B:03:AD:D2:00:32:B2:34:85:06:23:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BDCF5E5C8637CFE8BAED5B020 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e5:c8:63:7c:fe:8b:ae:d5:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=b73306f8-4796-4c53-b481-324b1f70b276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:49:08:a9:a6:c1:23:d3:2e:83:5f:fe:97:68: 04:00:36:0f:4a:08:b0:9f:c2:ef:cf:30:5c:ab:33: d6:7d:a8:92:ff:aa:64:86:c1:24:8b:59:c0:72:3f: 88:08:be:49:b1:7e:7f:80:00:7d:52:0e:25:b6:2b: d8:38:ae:d6:93:f6:2d:dd:76:76:4a:b4:94:6e:2f: b1:1e:68:4f:7f:93:05:56:91:14:43:ca:b4:90:79: bd:2c:e2:55:6e:2b:15:e2:55:7f:1b:71:78:86:48: 6a:bf:cc:2f:1f:95:6e:cd:5b:17:a9:81:82:25:1d: a2:b0:0b:7d:4b:e1:79:10:14:9d:2d:ca:29:4c:1f: 17:54:5c:09:72:ba:8e:6a:ca:3d:47:c5:a0:da:f0: 66:48:ca:6e:49:72:8a:79:e5:6b:87:8c:cf:f7:cd: 5e:df:4c:ea:da:5c:47:43:11:c9:84:ea:a0:8c:34: 40:3a:e6:cf:46:3c:53:d7:ba:f4:82:0e:c9:13:64: ac:b5:3f:74:74:95:68:20:98:e0:a1:27:a8:7b:9d: 06:53:41:23:5d:6b:5e:ef:07:ba:d3:11:06:38:5c: 28:7f:4d:f0:b8:a4:0b:c8:74:58:b1:ec:17:71:51: 16:89:51:48:c9:52:36:cb:11:06:50:9c:d8:73:3d: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:55:79:B1:3D:D4:D4:B4:7B:03:AD:D2:00:32:B2:34:85:06:23:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a0:82:31:22:2a:28:99:04:5c:ee:ed:3b:1c:7f:cc:44:49: e5:ff:bf:59:57:7d:1e:09:09:5c:4c:c4:81:92:c8:4a:d8:b5: 38:c1:dc:bc:63:fd:e6:3e:ba:a2:4e:02:be:6f:4d:fc:62:41: 73:f0:3d:67:2d:7e:99:55:d1:36:06:37:a2:e8:1b:e5:a3:58: 4f:b2:0e:c1:fc:4e:b6:be:a7:98:bc:72:c5:3f:c8:7a:4c:48: 77:1a:4c:26:85:9b:41:23:24:68:a7:eb:56:7b:59:c1:0f:87: e4:6e:4f:88:a0:bd:63:00:8c:59:92:be:9c:8a:21:ca:ea:88: 2a:67:3c:b3:2c:d6:0d:2c:e7:28:57:67:06:b7:40:f6:eb:e1: 9e:b0:69:41:87:68:b8:eb:46:a6:43:59:f8:28:14:ad:c1:7e: 94:9a:e1:9e:c8:b2:3b:96:36:4e:d1:21:b4:70:fd:05:13:44: bc:11:21:cc:05:c0:69:b5:03:1f:e7:72:3e:49:1b:d6:ff:68: 53:46:0d:97:30:ad:b7:06:e2:e3:b6:20:6e:9d:4c:45:3f:83: 3d:34:50:0f:dd:90:5e:d3:89:cd:e2:1a:57:55:3c:0b:31:b8: bc:00:e9:ed:fc:75:68:98:d1:60:b6:e8:5b:c2:b0:36:e5:0c: ba:cb:da:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9eXIY3z+i67VsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YjczMzA2ZjgtNDc5Ni00YzUzLWI0ODEtMzI0YjFmNzBiMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0kIqabBI9Mug1/+l2gEADYPSgiwn8LvzzBc qzPWfaiS/6pkhsEki1nAcj+ICL5JsX5/gAB9Ug4ltivYOK7Wk/Yt3XZ2SrSUbi+x HmhPf5MFVpEUQ8q0kHm9LOJVbisV4lV/G3F4hkhqv8wvH5VuzVsXqYGCJR2isAt9 S+F5EBSdLcopTB8XVFwJcrqOaso9R8Wg2vBmSMpuSXKKeeVrh4zP981e30zq2lxH QxHJhOqgjDRAOubPRjxT17r0gg7JE2SstT90dJVoIJjgoSeoe50GU0EjXWte7we6 0xEGOFwof03wuKQLyHRYsewXcVEWiVFIyVI2yxEGUJzYcz20YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVVebE91NS0ewOt0gAysjSFBiMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmMjFhZTMtNDVhZC0z YmViLTlmMzgtYzMwYzZlYTM1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+ggjEiKiiZBFzu7Tscf8xESeX/v1lXfR4JCVxMxIGSyErYtTjB3Lxj /eY+uqJOAr5vTfxiQXPwPWctfplV0TYGN6LoG+WjWE+yDsH8Tra+p5i8csU/yHpM SHcaTCaFm0EjJGin61Z7WcEPh+RuT4igvWMAjFmSvpyKIcrqiCpnPLMs1g0s5yhX Zwa3QPbr4Z6waUGHaLjrRqZDWfgoFK3BfpSa4Z7IsjuWNk7RIbRw/QUTRLwRIcwF wGm1Ax/ncj5JG9b/aFNGDZcwrbcG4uO2IG6dTEU/gz00UA/dkF7Tic3iGldVPAsx uLwA6e38dWiY0WC26FvCsDblDLrL2uw= -----END CERTIFICATE-----Generated at Tue Nov 25 13:55:35 2025 by rpki-client