This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa File: 9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa (raw, json) Hash identifier: Mfq/lxCy1aAf7wDZJbTH77CiZ3S+HyDtZCdmdVFl8Ys= Subject key identifier: 80:A3:C5:09:76:79:D3:9D:2E:B9:50:D2:DF:42:85:6D:F8:B8:42:50 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BF34B2A4585F07147ED8F0A40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:2a:45:85:f0:71:47:ed:8f:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=2fb75cf8-a299-4f0f-a24c-476e79958cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:77:a7:09:22:8a:6c:26:a9:2b:27:da:c4: d3:ee:d1:19:1d:5e:3d:23:22:19:19:ad:8d:57:0d: ea:0b:b5:66:ae:2a:fb:ee:9d:4f:92:2b:ab:22:9c: be:f4:22:20:ae:23:ef:bf:22:bb:36:d9:12:d5:0f: 28:df:d1:e6:29:88:60:98:02:71:b0:91:ac:be:26: 7f:ac:31:90:d0:69:2c:5a:c9:5b:1b:69:18:8d:1e: 68:7a:a4:64:97:57:d9:ae:12:32:48:ea:e6:99:67: 66:62:74:3d:97:65:f2:54:4e:79:7b:3c:df:cc:67: b1:7a:cd:ad:dd:ba:58:27:6d:93:9e:fb:43:8e:57: 02:49:3a:fd:db:5e:b8:3b:91:ad:8b:3e:d3:cd:58: 53:52:1c:47:0e:26:f9:21:68:56:52:ca:29:6c:21: 1e:da:79:b4:ae:31:fe:ea:1a:24:3c:23:b1:22:e7: 24:4f:a2:0a:5f:68:60:9d:5c:08:26:83:65:9b:6b: df:a1:18:37:f3:0c:72:e9:b6:6c:90:98:da:cd:c7: 97:5d:34:62:30:58:98:b7:88:fa:54:ab:a8:9c:91: a5:7d:28:f2:69:d9:c6:df:4d:53:af:14:a8:4e:61: 00:f0:fa:56:80:ce:4b:14:0f:4c:d1:de:85:d4:f2: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A3:C5:09:76:79:D3:9D:2E:B9:50:D2:DF:42:85:6D:F8:B8:42:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0e:9f:30:22:0a:32:21:4a:94:cd:0c:d5:ad:9a:42:92:75: e9:6d:66:5b:1a:56:2f:0c:d4:d3:73:8d:9a:b3:52:e0:7e:cb: b0:a9:3e:91:62:7a:83:34:61:f8:1f:15:ab:95:32:8e:e9:f1: b6:84:38:1c:75:f3:a4:e0:0c:6e:de:b8:e1:8f:0b:7a:92:f0: 03:a9:67:fc:d9:fc:81:b2:b3:2b:9c:c4:2e:4e:b3:12:05:81: 03:f9:79:3c:62:16:25:87:bc:f6:e5:ba:dc:e0:db:f9:83:67: dd:6f:01:70:a0:5c:72:33:13:a8:14:00:2f:18:af:6d:86:5c: 0c:b3:0d:e3:5f:ae:0f:22:05:03:4b:d5:21:12:87:93:3f:8a: b7:af:2c:6b:ba:24:2b:39:45:a0:16:aa:ac:68:b2:30:75:c7: 51:2f:56:1c:6b:6d:98:31:49:c8:7c:5d:af:ae:08:90:58:6d: a3:0f:2a:5d:53:ca:33:e1:41:5d:d7:bb:72:b1:12:63:e8:92: 0c:8b:38:9c:28:01:ea:d4:0b:99:93:45:f1:b9:a9:57:59:4c: 92:e9:21:9e:d5:ee:f7:44:cd:a4:dc:63:c1:5d:72:e8:7e:1e: 6c:23:7a:8a:33:13:96:ec:96:58:be:0c:6f:0a:03:92:7f:22: 6f:2b:c6:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSypFhfBxR+2PCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk MmZiNzVjZjgtYTI5OS00ZjBmLWEyNGMtNDc2ZTc5OTU4Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilt3pwkiimwmqSsn2sTT7tEZHV49IyIZGa2N Vw3qC7Vmrir77p1PkiurIpy+9CIgriPvvyK7NtkS1Q8o39HmKYhgmAJxsJGsviZ/ rDGQ0GksWslbG2kYjR5oeqRkl1fZrhIySOrmmWdmYnQ9l2XyVE55ezzfzGexes2t 3bpYJ22TnvtDjlcCSTr92164O5Gtiz7TzVhTUhxHDib5IWhWUsopbCEe2nm0rjH+ 6hokPCOxIuckT6IKX2hgnVwIJoNlm2vfoRg38wxy6bZskJjazceXXTRiMFiYt4j6 VKuonJGlfSjyadnG301TrxSoTmEA8PpWgM5LFA9M0d6F1PKNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICjxQl2edOdLrlQ0t9ChW34uEJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWZiOTVkYjctY2NhNC0z YjBkLTkxOTctNTE3MmUzOTUyYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoOnzAiCjIhSpTNDNWtmkKSdeltZlsaVi8M1NNzjZqzUuB+y7CpPpFi eoM0YfgfFauVMo7p8baEOBx186TgDG7euOGPC3qS8AOpZ/zZ/IGysyucxC5OsxIF gQP5eTxiFiWHvPblutzg2/mDZ91vAXCgXHIzE6gUAC8Yr22GXAyzDeNfrg8iBQNL 1SESh5M/irevLGu6JCs5RaAWqqxosjB1x1EvVhxrbZgxSch8Xa+uCJBYbaMPKl1T yjPhQV3Xu3KxEmPokgyLOJwoAerUC5mTRfG5qVdZTJLpIZ7V7vdEzaTcY8Fdcuh+ HmwjeoozE5bslli+DG8KA5J/Im8rxh8= -----END CERTIFICATE-----Generated at Tue Nov 25 10:35:00 2025 by rpki-client