This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa File: 8c2898a9-cad9-308f-9cf2-148979fb3943.roa (raw, json) Hash identifier: Rn3Q5fHvNa4tFVgCdjhyAtxtMpgNFVudOhfwilK86h8= Subject key identifier: FA:FF:35:95:FB:FD:41:AC:1E:A0:2B:30:4B:23:C5:A0:72:79:AA:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5A967451DBC60CAADEF34F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:74:51:db:c6:0c:aa:de:f3:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=7a00248b-b2c0-4c20-8fff-a0546da94186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f9:91:aa:ef:e3:12:72:1c:02:dc:e2:57:57: 7d:10:89:ad:52:fd:6e:0e:9c:58:22:aa:3f:55:bc: e6:61:50:6c:57:dd:7e:f1:b7:4e:8f:de:00:85:99: 3c:a9:2f:a5:80:1d:2b:cd:6e:b3:4d:a0:d5:66:e4: 8e:1e:13:97:e2:fb:b9:21:d8:74:ad:61:c4:e6:23: dd:e5:a3:4d:b7:1b:e3:a6:e4:c4:15:ea:41:c6:02: 21:a3:75:7f:0f:55:5d:df:49:fd:30:2e:38:1b:c0: 6c:62:9d:28:62:29:6e:96:d5:0b:bb:c4:b9:5a:ab: f4:d0:6a:62:5e:c6:e9:82:a8:9a:59:94:38:b9:a2: 84:2b:b7:45:81:0b:e6:a2:fa:2a:3d:d3:ad:06:e2: 7e:95:f7:96:50:73:d9:b1:da:41:73:83:a5:65:95: 2a:2b:cc:39:36:dd:ba:df:00:bb:a6:b0:b5:87:2c: 27:96:cd:ca:4b:a3:b8:a6:59:b4:9e:2e:12:58:9a: 60:32:9c:9a:67:0e:43:62:3b:28:71:85:52:37:b3: 8b:d4:a6:7f:de:cc:ff:0c:a8:1c:0e:81:af:0d:0c: c0:fd:5f:24:3c:65:9c:5a:23:b2:dc:4d:8c:bc:ba: bb:7e:e1:6b:10:e6:23:6c:2f:98:1d:84:a5:05:af: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:35:95:FB:FD:41:AC:1E:A0:2B:30:4B:23:C5:A0:72:79:AA:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b3:fc:66:b7:2f:46:65:0f:0b:61:7f:9e:40:c1:7d:07:6c: f0:e9:c7:aa:a2:49:d8:63:d6:5c:15:d5:00:31:51:b6:4f:90: 60:78:03:e5:68:8a:9f:ed:fd:58:eb:a2:8d:98:bf:48:8c:0d: f4:4b:44:40:cc:d1:b2:8d:f4:47:55:2e:88:d2:40:9c:da:a1: aa:b7:de:cb:ac:9d:9a:88:be:12:48:7a:f8:e2:31:69:fb:be: e7:72:a2:af:c0:0d:5c:54:9f:19:ba:d0:85:7f:ca:dc:87:86: 61:88:04:a6:f5:bf:9f:aa:7b:1e:26:0c:93:0f:8a:85:06:2b: 85:8d:b2:ed:2d:f0:09:64:89:16:8a:d1:f9:01:86:5e:3a:a1: d4:6c:b1:a4:96:16:79:c2:77:3c:71:a9:b1:fb:fb:5d:de:aa: 5b:b5:a3:52:b5:b4:1b:ca:1b:15:61:e7:34:34:ed:ab:06:76: 81:46:f2:59:18:03:23:0c:5c:b1:2e:9b:65:f2:c4:7e:a9:9a: 7d:ce:10:2e:69:24:cb:25:35:25:d7:2b:4c:7d:d9:9b:8f:86: 3d:98:7e:86:fd:6c:48:06:d5:99:a9:36:8b:07:cf:e4:2a:d2: ad:fd:71:ef:23:83:d3:43:fe:cb:2e:19:a2:c3:21:bc:08:b3: a3:df:62:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExalnRR28YMqt7zT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk N2EwMDI0OGItYjJjMC00YzIwLThmZmYtYTA1NDZkYTk0MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/mRqu/jEnIcAtziV1d9EImtUv1uDpxYIqo/ VbzmYVBsV91+8bdOj94AhZk8qS+lgB0rzW6zTaDVZuSOHhOX4vu5Idh0rWHE5iPd 5aNNtxvjpuTEFepBxgIho3V/D1Vd30n9MC44G8BsYp0oYilultULu8S5Wqv00Gpi XsbpgqiaWZQ4uaKEK7dFgQvmovoqPdOtBuJ+lfeWUHPZsdpBc4OlZZUqK8w5Nt26 3wC7prC1hywnls3KS6O4plm0ni4SWJpgMpyaZw5DYjsocYVSN7OL1KZ/3sz/DKgc DoGvDQzA/V8kPGWcWiOy3E2MvLq7fuFrEOYjbC+YHYSlBa9TeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr/NZX7/UGsHqArMEsjxaByeaqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGMyODk4YTktY2FkOS0z MDhmLTljZjItMTQ4OTc5ZmIzOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOz/Ga3L0ZlDwthf55AwX0HbPDpx6qiSdhj1lwV1QAxUbZPkGB4A+Vo ip/t/Vjroo2Yv0iMDfRLREDM0bKN9EdVLojSQJzaoaq33susnZqIvhJIevjiMWn7 vudyoq/ADVxUnxm60IV/ytyHhmGIBKb1v5+qex4mDJMPioUGK4WNsu0t8AlkiRaK 0fkBhl46odRssaSWFnnCdzxxqbH7+13eqlu1o1K1tBvKGxVh5zQ07asGdoFG8lkY AyMMXLEum2XyxH6pmn3OEC5pJMslNSXXK0x92ZuPhj2Yfob9bEgG1ZmpNosHz+Qq 0q39ce8jg9ND/ssuGaLDIbwIs6PfYn0= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:25 2026 by rpki-client