This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fe94a07-2daa-32a6-92ea-dbeed4cf2f2b.roa File: 8fe94a07-2daa-32a6-92ea-dbeed4cf2f2b.roa (raw, json) Hash identifier: cu4FpmT0ruTvmZX0iJAzWq6TexwaRr3KJ7f8DV3BxOk= Subject key identifier: 83:87:45:CC:37:05:AA:37:B6:65:A0:85:21:B5:52:BE:AE:7F:B0:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C48711CAFA12E4C19A7578AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fe94a07-2daa-32a6-92ea-dbeed4cf2f2b.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.28.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:1c:af:a1:2e:4c:19:a7:57:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=1aea4a63-942a-40fa-8291-d4c88a91ed01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:84:aa:7c:58:7b:83:1a:38:e8:65:83:ff: 5b:91:2b:fc:60:36:ed:f3:33:a1:68:37:ed:9f:f9: 7b:a7:6e:5b:7d:39:18:ed:ac:11:03:2d:23:4d:0a: df:58:48:6a:ab:fa:85:56:00:68:00:7d:3f:33:aa: d9:b3:2d:6f:86:52:bb:de:e7:0e:bd:b7:de:d0:19: 35:72:48:07:28:6e:a3:00:53:0a:0d:92:7b:04:f9: 4d:41:8b:31:a2:76:be:37:a5:50:28:05:ce:b1:b8: 1b:4f:d8:3a:5b:13:77:56:f2:b0:81:89:90:65:13: bc:35:79:af:ff:f3:5a:de:cc:30:c1:29:2e:d4:c3: f8:71:bf:5f:7a:a0:10:cf:32:c9:fa:c3:1f:c5:6c: c9:54:c7:20:f6:93:36:d9:f5:3a:db:e9:97:3b:75: a8:50:aa:7f:6d:7a:6a:44:8a:18:8a:6a:af:a8:f8: 8d:2c:70:69:1b:9e:a2:ea:00:6c:72:9e:0b:bd:18: 4e:fe:09:bb:81:d7:0b:99:82:4c:59:31:0e:f5:d4: 59:a0:33:d0:c0:38:90:e6:88:fa:54:f2:6f:2f:cb: 2f:a4:97:39:c9:aa:00:b9:c9:12:9a:c4:b9:f2:24: 0a:b4:33:b5:57:46:aa:93:bf:bb:7e:73:20:0e:e1: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:87:45:CC:37:05:AA:37:B6:65:A0:85:21:B5:52:BE:AE:7F:B0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fe94a07-2daa-32a6-92ea-dbeed4cf2f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c6:66:c0:ea:98:61:fb:58:fe:58:d5:e2:80:fa:a1:b8:a9: c1:d1:24:1a:be:c9:24:17:a9:4e:88:ca:2b:51:22:ef:3d:6b: c2:9c:7e:a7:de:9c:63:e2:0f:c9:67:cc:72:b3:c4:db:d3:71: d9:e8:af:94:78:53:51:e6:88:87:71:a3:f2:9c:a8:99:1a:b3: 3f:2b:48:ec:04:16:06:99:3e:71:36:72:3c:f6:ad:69:fc:01: 15:33:22:c8:da:40:2a:09:17:9d:89:69:77:f1:46:8c:ed:e5: b5:74:b3:67:e5:18:fe:ee:a0:1d:d5:38:04:c4:20:73:f7:b4: 04:b4:a7:a5:7f:6b:73:f7:f8:3a:6f:5f:2f:27:69:28:5d:06: 3c:63:25:6b:b7:60:93:5a:65:fa:02:73:9e:55:d5:d5:32:d6: a6:13:7d:7c:7f:4d:bb:bf:7a:61:26:03:68:44:c1:ee:78:c4: 6d:40:23:c5:55:fe:b6:43:1f:5e:e9:6d:4e:4b:9b:ee:9e:4d: 6e:a3:96:99:71:db:53:b4:19:6e:0f:cb:97:17:a9:fb:4d:04: 5c:60:5e:11:6e:26:b9:32:35:95:81:e9:63:e5:2a:53:10:54: 8f:3c:85:88:01:59:44:eb:9a:b0:a2:78:21:31:df:ff:66:f4: 98:49:e3:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcRyvoS5MGadXisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MWFlYTRhNjMtOTQyYS00MGZhLTgyOTEtZDRjODhhOTFlZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS2EqnxYe4MaOOhlg/9bkSv8YDbt8zOhaDft n/l7p25bfTkY7awRAy0jTQrfWEhqq/qFVgBoAH0/M6rZsy1vhlK73ucOvbfe0Bk1 ckgHKG6jAFMKDZJ7BPlNQYsxona+N6VQKAXOsbgbT9g6WxN3VvKwgYmQZRO8NXmv //Na3swwwSku1MP4cb9feqAQzzLJ+sMfxWzJVMcg9pM22fU62+mXO3WoUKp/bXpq RIoYimqvqPiNLHBpG56i6gBscp4LvRhO/gm7gdcLmYJMWTEO9dRZoDPQwDiQ5oj6 VPJvL8svpJc5yaoAuckSmsS58iQKtDO1V0aqk7+7fnMgDuG4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOHRcw3Bao3tmWghSG1Ur6uf7D6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGZlOTRhMDctMmRhYS0z MmE2LTkyZWEtZGJlZWQ0Y2YyZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3GZsDqmGH7WP5Y1eKA+qG4qcHRJBq+ySQXqU6IyitRIu89a8Kcfqfe nGPiD8lnzHKzxNvTcdnor5R4U1HmiIdxo/KcqJkasz8rSOwEFgaZPnE2cjz2rWn8 ARUzIsjaQCoJF52JaXfxRozt5bV0s2flGP7uoB3VOATEIHP3tAS0p6V/a3P3+Dpv Xy8naShdBjxjJWu3YJNaZfoCc55V1dUy1qYTfXx/Tbu/emEmA2hEwe54xG1AI8VV /rZDH17pbU5Lm+6eTW6jlplx21O0GW4Py5cXqftNBFxgXhFuJrkyNZWB6WPlKlMQ VI88hYgBWUTrmrCieCEx3/9m9JhJ4xA= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:36 2026 by rpki-client