This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a070ca61-53d7-3e9e-bffd-d2a9f3e8a1a6.roa File: a070ca61-53d7-3e9e-bffd-d2a9f3e8a1a6.roa (raw, json) Hash identifier: KEwxstQdW8Jjfv+AiPRcY9Q/Pok3vnPKUGIGygOc/Hc= Subject key identifier: 90:E0:2C:4B:4F:2A:25:EF:20:4A:94:17:BB:D7:27:71:A9:E3:30:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BDCF5E6C9E8647179DB451040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a070ca61-53d7-3e9e-bffd-d2a9f3e8a1a6.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e6:c9:e8:64:71:79:db:45:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=5952d8a4-d4eb-48e0-9c04-fe035a228841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:66:04:83:c2:d5:53:6e:f4:6b:cc:16:85: 82:10:4d:4a:d3:0e:10:c5:f2:fe:81:0b:f1:60:24: 53:74:e3:a4:3e:e6:8f:a2:7b:d0:9d:63:16:f4:83: 73:f9:09:97:1e:5d:fd:fe:eb:2d:58:c5:ae:91:7e: 61:48:db:16:5f:25:c4:e4:af:33:f4:9d:fd:e6:60: 81:58:a3:cc:31:8c:5e:ff:37:1b:e0:09:91:d6:48: ab:e5:51:c5:36:67:d9:7e:4d:98:28:58:54:de:11: 6c:6e:43:4d:fe:f9:fb:b0:e8:9e:98:af:2a:c0:07: b4:6c:b1:af:4f:10:bf:bb:c9:6a:7c:0a:5d:90:93: c1:07:cf:85:1f:4d:9d:66:1b:be:4c:00:76:1e:2a: 21:fa:5b:a0:cf:b1:44:c8:db:c3:71:f2:b8:4a:b0: 88:2d:37:50:64:a3:e6:6b:37:b3:dd:6d:ae:03:50: e5:a5:24:1d:9d:da:82:c9:f9:f7:d7:01:90:2f:59: 11:5d:d4:4e:75:2e:e3:5e:58:8d:1f:20:09:ef:7c: 94:87:90:e3:18:89:44:b9:04:b1:4d:58:4e:4e:f5: 06:47:a8:c9:cb:08:e8:db:f2:ac:26:a9:42:11:48: e8:19:f7:3b:21:9b:d2:2a:38:a2:cc:cc:a4:0b:b8: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E0:2C:4B:4F:2A:25:EF:20:4A:94:17:BB:D7:27:71:A9:E3:30:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a070ca61-53d7-3e9e-bffd-d2a9f3e8a1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3f:5f:43:75:4d:cc:f1:4c:b7:6b:52:3b:bb:d9:d5:46:02: 44:ed:9e:b7:6f:64:d4:71:91:f5:12:80:a2:2c:e8:65:b5:1c: 76:d1:9a:e4:c9:15:b1:f3:bc:67:3f:8f:95:6b:13:a2:62:34: 08:cf:f1:e3:db:57:10:e9:40:a2:5c:55:40:3b:43:4d:47:3c: a1:31:a9:b2:9d:66:14:7d:a3:22:af:2b:2c:95:83:b1:3f:b5: ea:74:18:6e:ae:0e:23:9e:f9:59:53:55:ff:01:a5:79:99:1f: 23:7a:f2:da:4a:20:0e:23:ff:77:10:2b:ff:26:ca:da:3f:5c: 41:ed:b7:48:72:ea:4a:b9:15:34:b1:d5:07:98:1f:6a:c4:5b: 97:33:2d:66:21:32:69:b6:0a:38:52:54:59:9b:8c:4b:e0:d0: 08:0f:ad:a5:b8:c6:6b:81:88:44:6c:80:93:d6:bd:9c:7c:67: d6:24:50:aa:1a:dd:46:4b:de:a2:d7:bb:cc:c4:29:1a:39:fd: 6a:f9:a5:a1:00:89:8d:cf:1e:54:cd:8c:30:de:d6:e3:2a:86: 9e:3f:5d:bf:e4:5f:cd:99:f7:22:ee:8e:47:2f:10:6e:e1:86: ca:00:f5:de:2f:6a:34:08:52:48:e5:31:78:dd:e8:ae:53:ea: c7:46:91:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9ebJ6GRxedtFEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk NTk1MmQ4YTQtZDRlYi00OGUwLTljMDQtZmUwMzVhMjI4ODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTNmBIPC1VNu9GvMFoWCEE1K0w4QxfL+gQvx YCRTdOOkPuaPonvQnWMW9INz+QmXHl39/ustWMWukX5hSNsWXyXE5K8z9J395mCB WKPMMYxe/zcb4AmR1kir5VHFNmfZfk2YKFhU3hFsbkNN/vn7sOiemK8qwAe0bLGv TxC/u8lqfApdkJPBB8+FH02dZhu+TAB2Hioh+lugz7FEyNvDcfK4SrCILTdQZKPm azez3W2uA1DlpSQdndqCyfn31wGQL1kRXdROdS7jXliNHyAJ73yUh5DjGIlEuQSx TVhOTvUGR6jJywjo2/KsJqlCEUjoGfc7IZvSKjiizMykC7iUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDgLEtPKiXvIEqUF7vXJ3Gp4zAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTA3MGNhNjEtNTNkNy0z ZTllLWJmZmQtZDJhOWYzZThhMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8/X0N1TczxTLdrUju72dVGAkTtnrdvZNRxkfUSgKIs6GW1HHbRmuTJ FbHzvGc/j5VrE6JiNAjP8ePbVxDpQKJcVUA7Q01HPKExqbKdZhR9oyKvKyyVg7E/ tep0GG6uDiOe+VlTVf8BpXmZHyN68tpKIA4j/3cQK/8myto/XEHtt0hy6kq5FTSx 1QeYH2rEW5czLWYhMmm2CjhSVFmbjEvg0AgPraW4xmuBiERsgJPWvZx8Z9YkUKoa 3UZL3qLXu8zEKRo5/Wr5paEAiY3PHlTNjDDe1uMqhp4/Xb/kX82Z9yLujkcvEG7h hsoA9d4vajQIUkjlMXjd6K5T6sdGkQc= -----END CERTIFICATE-----Generated at Tue Nov 25 12:11:30 2025 by rpki-client