This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa File: 9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa (raw, json) Hash identifier: av5c4/l1JwprPlA8iz7ncJGcKnb+RYkWwhnGludJuP0= Subject key identifier: 01:32:4F:87:D9:52:14:8B:3D:41:2D:18:3C:17:D3:2C:5F:C2:01:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BC53AF1CB7141559B713D8C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 30036 IP address blocks: 173.17.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f1:cb:71:41:55:9b:71:3d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=6fa8c523-f43a-4656-9136-2cbf46ba2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2d:9f:1b:cb:f3:d9:9c:7d:a3:ac:9c:a2:e4: ec:2b:37:1d:3e:31:a2:56:54:7a:b1:88:49:ee:f2: 5c:ed:e5:8e:fe:2a:f8:75:68:a2:07:bf:45:01:d2: a5:ed:ab:c0:85:00:09:d9:78:0c:b7:2e:3f:28:c5: f0:42:14:73:59:c1:2a:e3:6a:b5:8a:b4:f9:15:12: 57:be:aa:ab:9b:2a:12:d6:71:60:81:53:ce:ca:54: 16:6e:0a:a6:ac:cf:e7:fd:b1:74:e8:80:85:cd:30: bd:b3:0c:c5:6a:c6:f1:4a:e0:16:8c:bd:3c:31:61: fa:be:96:48:5e:98:e9:db:31:67:22:b3:1a:3d:1c: 7f:55:46:2c:b4:83:c4:1b:73:eb:6f:ff:73:08:09: 0a:b7:62:f8:dd:54:f1:84:db:c9:e9:2e:3d:bd:42: 9e:66:b2:ce:3e:f2:c5:e7:4c:d2:f3:6a:e6:18:d3: 3e:07:e4:40:05:80:aa:cc:de:eb:b9:f1:dd:bf:e8: c4:e7:f8:37:57:b5:1a:d5:01:38:5b:94:64:d2:c9: 75:72:ba:64:4f:e7:63:d6:76:aa:a6:1e:bb:5e:51: 8b:f8:28:d6:35:b5:53:5d:1c:b8:6e:9b:b2:8d:94: 89:c8:70:1d:d8:6e:1f:61:28:6d:60:99:67:3e:c8: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:32:4F:87:D9:52:14:8B:3D:41:2D:18:3C:17:D3:2C:5F:C2:01:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b7:2a:8d:d9:e6:10:1c:05:70:94:e2:77:d4:d7:0b:d9:64: 8c:1f:9a:d6:64:da:8c:85:d6:43:de:58:7b:85:9a:9a:da:70: 82:d9:25:8d:10:38:02:0f:b0:c2:00:35:9e:ab:ec:a3:6c:a5: fb:0d:1c:73:84:a5:ee:b6:e0:5a:1c:89:16:65:ec:fb:89:f7: 5c:5f:11:b0:7a:45:40:5a:ff:e8:92:f2:e3:dc:e4:e9:e7:fc: 19:86:ce:15:bb:59:65:fc:5f:98:60:e9:07:5c:ba:93:5d:0f: 6d:85:5f:d3:ca:79:bd:77:35:1e:20:e0:5d:08:aa:06:26:73: b4:f5:ee:62:14:39:b6:99:17:d7:c1:9e:d1:30:76:80:e1:3d: 48:47:cb:67:92:35:4a:54:13:ae:46:b6:df:f0:54:08:47:78: 54:4d:64:b1:7f:7b:2c:04:ba:00:c2:b0:73:b3:1e:24:7b:b1: 0d:d3:d5:7b:76:c1:9a:60:60:a4:f9:e7:c1:d6:53:54:ad:e4: 31:39:06:e6:5e:d9:2f:55:11:13:6b:fa:c8:af:a2:b8:d7:2b: ed:7a:42:42:e9:c5:64:3e:23:6b:23:26:6e:7d:e1:70:ff:b0: 80:ad:d5:fb:8a:10:5f:a1:c1:02:91:a3:25:33:49:45:b5:a2: 26:47:34:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvHLcUFVm3E9jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NmZhOGM1MjMtZjQzYS00NjU2LTkxMzYtMmNiZjQ2YmEyZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii2fG8vz2Zx9o6ycouTsKzcdPjGiVlR6sYhJ 7vJc7eWO/ir4dWiiB79FAdKl7avAhQAJ2XgMty4/KMXwQhRzWcEq42q1irT5FRJX vqqrmyoS1nFggVPOylQWbgqmrM/n/bF06ICFzTC9swzFasbxSuAWjL08MWH6vpZI Xpjp2zFnIrMaPRx/VUYstIPEG3Prb/9zCAkKt2L43VTxhNvJ6S49vUKeZrLOPvLF 50zS82rmGNM+B+RABYCqzN7rufHdv+jE5/g3V7Ua1QE4W5Rk0sl1crpkT+dj1naq ph67XlGL+CjWNbVTXRy4bpuyjZSJyHAd2G4fYShtYJlnPshhxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEyT4fZUhSLPUEtGDwX0yxfwgHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWExMjljMDItMWU2Zi0z ZDA0LWJjODktM2E5YzlkNjcyYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy3Ko3Z5hAcBXCU4nfU1wvZZIwfmtZk2oyF1kPeWHuFmpracILZJY0Q OAIPsMIANZ6r7KNspfsNHHOEpe624FociRZl7PuJ91xfEbB6RUBa/+iS8uPc5Onn /BmGzhW7WWX8X5hg6QdcupNdD22FX9PKeb13NR4g4F0IqgYmc7T17mIUObaZF9fB ntEwdoDhPUhHy2eSNUpUE65Gtt/wVAhHeFRNZLF/eywEugDCsHOzHiR7sQ3T1Xt2 wZpgYKT558HWU1St5DE5BuZe2S9VERNr+sivorjXK+16QkLpxWQ+I2sjJm594XD/ sICt1fuKEF+hwQKRoyUzSUW1oiZHNBI= -----END CERTIFICATE-----Generated at Tue Nov 25 12:13:41 2025 by rpki-client