This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa File: 914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa (raw, json) Hash identifier: rhq4JRB2f/8FaiS6VuM3jJ5J6yxLIcqd6Zir+sAVzFw= Subject key identifier: 79:23:8A:B2:71:E4:AB:0D:A1:BB:01:D8:B9:B6:7B:82:70:23:13:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BCF006F902BADE047676B3B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.28.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:6f:90:2b:ad:e0:47:67:6b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=9d4d5252-c5c9-431e-984e-e47096ef315a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:42:3c:03:e6:83:77:a3:c3:06:6c:77:94: cf:7f:44:c3:e4:d7:cc:7a:50:74:81:c9:2b:02:10: ff:38:d7:8e:02:b9:49:e3:c7:3a:eb:49:dc:67:ed: 5d:7b:29:be:47:14:7d:6d:70:29:c3:88:a5:e8:0b: c0:a8:d7:eb:93:4b:90:ee:d3:b2:6d:a2:4e:a7:cd: a0:d6:df:a0:d4:af:10:fa:40:41:88:b1:d7:c5:77: 0e:6f:94:e5:ec:9c:60:75:0f:be:d1:fe:ce:74:8e: 8d:85:28:7d:9b:20:6c:0b:38:3d:bd:f3:fa:de:b7: ec:9f:de:2c:42:1b:fc:1c:27:75:e1:c6:9c:87:e5: 84:0e:69:0e:f8:f1:c0:ba:e1:a1:a6:dd:fc:20:9a: fa:59:bd:3a:06:e3:56:6d:fd:48:a4:d8:58:cc:93: e7:8b:ee:dc:cb:9e:0e:3b:61:28:57:f1:74:33:03: b3:dd:40:7d:31:13:4f:1e:b4:2e:dc:93:8c:76:9c: a7:c2:89:5e:29:88:58:35:70:01:43:4f:57:0c:ec: d3:77:f7:d4:0a:80:70:12:73:d2:11:e1:9a:04:59: 96:76:92:eb:a7:55:83:e8:6b:7f:c9:af:d6:22:15: a0:ce:00:ab:33:e3:c4:f4:5b:63:32:ac:b3:e7:b1: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:23:8A:B2:71:E4:AB:0D:A1:BB:01:D8:B9:B6:7B:82:70:23:13:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:28:1b:1f:0a:2f:db:6b:37:7c:2d:7f:41:1f:ea:34:0d:0b: cb:2d:b9:18:4f:33:bf:25:5d:47:28:16:18:5a:db:b5:36:77: ef:7e:45:a9:0e:48:98:24:08:45:99:40:1a:66:ce:5f:e8:e4: 81:9b:8f:d3:d0:ff:62:71:1b:c3:99:f8:dd:27:9d:e7:a5:c4: f0:b5:e3:3a:55:62:7c:b4:39:70:d1:8d:3a:7b:8a:64:a8:22: 3d:28:81:ad:29:e3:cc:b1:77:53:eb:02:6a:ce:ae:f2:20:35: 6e:60:e2:51:aa:9c:ee:b7:1c:fd:fa:05:3e:35:2b:e1:ee:22: f7:96:9a:cf:be:21:28:18:22:d0:7a:d0:45:48:ec:cd:fc:94: fb:e2:f7:d5:8c:50:de:8d:8a:e5:14:40:7c:a2:26:d3:7d:c4: b8:e3:ba:90:f6:76:9c:30:76:59:13:bd:61:71:ae:e1:e7:0b: 09:99:24:95:4e:25:01:11:07:3d:ba:ab:46:73:f7:f9:a6:41: 37:1e:dc:ef:0c:19:e2:65:f3:61:50:a9:8a:78:f7:16:02:c5: 28:a6:37:88:db:2c:e1:ac:81:1c:72:10:40:cb:d3:db:42:8b: 18:a6:08:b1:03:54:70:fb:8d:5a:5f:d8:b1:2c:16:8b:84:f1: 7e:cd:ed:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAG+QK63gR2drO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk OWQ0ZDUyNTItYzVjOS00MzFlLTk4NGUtZTQ3MDk2ZWYzMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFRCPAPmg3ejwwZsd5TPf0TD5NfMelB0gckr AhD/ONeOArlJ48c660ncZ+1deym+RxR9bXApw4il6AvAqNfrk0uQ7tOybaJOp82g 1t+g1K8Q+kBBiLHXxXcOb5Tl7JxgdQ++0f7OdI6NhSh9myBsCzg9vfP63rfsn94s Qhv8HCd14cach+WEDmkO+PHAuuGhpt38IJr6Wb06BuNWbf1IpNhYzJPni+7cy54O O2EoV/F0MwOz3UB9MRNPHrQu3JOMdpynwoleKYhYNXABQ09XDOzTd/fUCoBwEnPS EeGaBFmWdpLrp1WD6Gt/ya/WIhWgzgCrM+PE9FtjMqyz57ER9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkjirJx5KsNobsB2Lm2e4JwIxOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTE0ZjhkYmUtZTI2OS0z YWMwLWI2NjgtMmQ4M2NhOWIxMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYoGx8KL9trN3wtf0Ef6jQNC8stuRhPM78lXUcoFhha27U2d+9+RakO SJgkCEWZQBpmzl/o5IGbj9PQ/2JxG8OZ+N0nneelxPC14zpVYny0OXDRjTp7imSo Ij0oga0p48yxd1PrAmrOrvIgNW5g4lGqnO63HP36BT41K+HuIveWms++ISgYItB6 0EVI7M38lPvi99WMUN6NiuUUQHyiJtN9xLjjupD2dpwwdlkTvWFxruHnCwmZJJVO JQERBz26q0Zz9/mmQTce3O8MGeJl82FQqYp49xYCxSimN4jbLOGsgRxyEEDL09tC iximCLEDVHD7jVpf2LEsFouE8X7N7cU= -----END CERTIFICATE-----Generated at Tue Nov 25 10:35:03 2025 by rpki-client