This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a015e18b-ebff-3b7a-8b02-ab28764a9900.roa File: a015e18b-ebff-3b7a-8b02-ab28764a9900.roa (raw, json) Hash identifier: 8ljvMoTPRAHOd4vXaIZSavIp4jJlp3fkBxJvH+uF9h4= Subject key identifier: DB:66:55:58:64:8E:AF:7B:4B:64:25:B7:23:84:5B:2B:6E:AF:1F:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBE4C319631BF484F42000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a015e18b-ebff-3b7a-8b02-ab28764a9900.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e4:c3:19:63:1b:f4:84:f4:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=804aacd2-4b01-42ac-b7d2-50dfb2cfddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:91:26:0f:e2:24:92:b8:ac:61:15:1e:d7: 25:a4:67:3e:17:4b:e6:94:d9:0e:2f:65:5c:4c:3e: 71:33:fd:c4:46:4c:f7:1a:c1:80:a5:3a:f5:63:80: 07:ef:5c:a9:19:7d:70:24:db:1d:c8:3e:16:d2:45: ea:30:48:52:59:4e:d2:92:73:ac:7b:ee:e9:63:f7: 87:53:69:d1:2d:fa:75:7b:8f:59:72:91:28:d9:ed: a9:20:ce:7b:ab:30:45:74:88:20:0b:26:01:98:52: f2:7a:49:cb:af:f0:22:7f:9e:64:09:ea:6d:c5:31: f5:e2:9c:97:d6:29:94:11:4d:69:65:d2:23:6d:68: 48:b5:f3:33:58:21:09:0e:87:24:79:e5:d8:fa:dd: 0a:0c:59:eb:92:01:cb:1d:a4:5b:95:78:eb:8a:45: 57:66:06:c0:13:6b:2e:97:ac:d5:3c:c2:31:ca:e6: 68:e3:a9:12:b1:19:56:f1:9f:b0:b0:48:45:67:4c: fc:3d:d5:27:72:9d:da:2b:d2:b5:a3:73:9c:3b:3d: 49:93:f0:4d:52:b9:1e:8e:98:fe:1a:64:8a:28:0a: cc:19:6a:06:b9:17:19:d9:02:ef:1c:cc:33:38:be: 98:c5:65:7a:07:34:52:d4:68:be:24:a7:b9:7a:d6: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:66:55:58:64:8E:AF:7B:4B:64:25:B7:23:84:5B:2B:6E:AF:1F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a015e18b-ebff-3b7a-8b02-ab28764a9900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cd:0a:ef:2a:35:be:64:2b:e6:ad:95:12:5a:88:4f:e9:03: 24:5b:7d:3a:09:bf:1a:2b:14:d0:7e:02:b6:aa:03:a2:d7:10: 32:e8:f0:5f:95:36:65:54:a0:0c:cf:53:c7:cf:0a:5d:6f:4f: eb:f9:d2:e7:59:4b:78:82:ea:11:d8:89:e0:f4:97:14:6e:89: 8e:04:0e:b8:36:ab:41:78:7e:df:e8:59:8a:be:59:cd:a6:75: 16:85:1a:96:b3:64:4d:03:d6:b7:3f:9e:54:fd:9e:d4:2f:fa: 4d:c7:03:23:55:d1:d3:23:4b:b3:df:51:4c:a2:6c:82:b4:d4: 33:ab:90:6e:42:a9:a1:63:4c:4e:d2:22:48:b1:f0:b4:47:fc: 17:de:72:2c:10:0d:20:e5:38:eb:4b:23:d8:a9:6f:b2:a9:6e: 57:e8:6b:d0:2f:88:3d:4e:a3:cd:03:bb:1b:f7:29:f1:bb:97: 0d:14:6c:b9:c4:a0:43:7d:a1:f8:23:9c:60:69:24:04:c3:f5: 8b:79:44:a2:0a:11:76:c6:a9:77:e6:27:d5:f6:fe:14:30:a8: 4f:71:a6:67:0c:ff:a8:08:42:58:cc:10:d8:48:80:cc:ae:55: 6d:dc:49:a7:78:fe:16:70:39:5a:d8:e2:a2:f1:11:ae:32:58: 61:5d:fa:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+TDGWMb9IT0IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ODA0YWFjZDItNGIwMS00MmFjLWI3ZDItNTBkZmIyY2ZkZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4CRJg/iJJK4rGEVHtclpGc+F0vmlNkOL2Vc TD5xM/3ERkz3GsGApTr1Y4AH71ypGX1wJNsdyD4W0kXqMEhSWU7SknOse+7pY/eH U2nRLfp1e49ZcpEo2e2pIM57qzBFdIggCyYBmFLyeknLr/Aif55kCeptxTH14pyX 1imUEU1pZdIjbWhItfMzWCEJDockeeXY+t0KDFnrkgHLHaRblXjrikVXZgbAE2su l6zVPMIxyuZo46kSsRlW8Z+wsEhFZ0z8PdUncp3aK9K1o3OcOz1Jk/BNUrkejpj+ GmSKKArMGWoGuRcZ2QLvHMwzOL6YxWV6BzRS1Gi+JKe5etZAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtmVVhkjq97S2QltyOEWyturx8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTAxNWUxOGItZWJmZi0z YjdhLThiMDItYWIyODc2NGE5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHNCu8qNb5kK+atlRJaiE/pAyRbfToJvxorFNB+AraqA6LXEDLo8F+V NmVUoAzPU8fPCl1vT+v50udZS3iC6hHYieD0lxRuiY4EDrg2q0F4ft/oWYq+Wc2m dRaFGpazZE0D1rc/nlT9ntQv+k3HAyNV0dMjS7PfUUyibIK01DOrkG5CqaFjTE7S Ikix8LRH/BfeciwQDSDlOOtLI9ipb7Kpblfoa9AviD1Oo80Duxv3KfG7lw0UbLnE oEN9ofgjnGBpJATD9Yt5RKIKEXbGqXfmJ9X2/hQwqE9xpmcM/6gIQljMENhIgMyu VW3cSad4/hZwOVrY4qLxEa4yWGFd+sg= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:36 2026 by rpki-client