This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa File: a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa (raw, json) Hash identifier: xwB/5skaKGfYmfBcg3qB3evoJ2IjS70Qzgqu+qqKc7M= Subject key identifier: 6F:72:66:BF:15:C8:BC:77:07:4D:25:B3:C8:BB:FE:FD:81:86:81:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BF34B2C58C6A534D0DB84E110 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.29.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:2c:58:c6:a5:34:d0:db:84:e1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=d4f4ae3d-28b2-4d04-bba3-8610675e7ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:65:67:d6:3a:cf:e8:de:9f:9f:2c:8d:02: 31:b4:a8:48:a0:66:d8:ce:25:7a:81:a8:96:e9:b3: d9:1b:8c:e8:22:da:9e:b4:8c:40:34:d0:ac:66:61: 98:97:0c:75:61:64:bb:cd:ac:bf:f7:25:4a:93:f7: c5:82:77:eb:5b:e3:68:ef:e1:38:fc:dc:24:e6:cd: cf:3b:7f:fb:a3:8b:26:52:a5:94:34:91:00:f8:29: d5:7e:64:a5:92:5c:b3:97:dd:29:3a:9e:c0:11:3a: 45:fc:5a:78:db:4a:eb:06:07:d2:5d:76:4c:8e:fd: ba:1e:25:7d:e6:c0:dc:24:ff:8f:d4:84:d1:2b:cb: a7:03:3d:ac:23:1b:e8:55:fe:a1:d1:7b:d1:8b:3d: 5e:82:fb:1a:ec:96:ad:d7:45:34:af:dc:ff:81:f2: 53:40:e3:72:a4:9a:9c:f5:21:c2:10:d4:65:4d:5c: 49:74:85:c9:2b:c8:f4:47:85:0e:79:9d:cc:e4:62: 65:88:0e:97:35:d4:0c:f5:20:b8:6c:66:7a:3f:71: d3:ef:cd:1b:b9:b3:97:99:cb:8e:87:00:83:dd:66: 6c:4e:91:15:ca:43:13:ca:90:44:ef:0d:fd:1b:0a: c0:ef:5d:d9:bf:38:5f:ea:e8:33:0c:14:d4:2c:33: 46:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:72:66:BF:15:C8:BC:77:07:4D:25:B3:C8:BB:FE:FD:81:86:81:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1c:65:dc:c0:2e:33:24:4e:05:f0:7a:98:f9:80:e1:fd:c0: 44:ed:f1:66:99:73:b3:95:44:3e:b2:ee:fb:06:93:37:d5:4f: c6:9d:b5:08:20:81:4c:60:e5:24:e6:81:1b:59:09:3c:15:1a: d9:d8:0a:63:d6:a7:a2:4e:2c:c9:23:c2:b3:df:24:9e:9d:c3: 72:d2:cf:20:6b:c2:66:09:d0:1d:32:95:8a:d7:e0:15:f0:ba: 97:45:f0:a5:47:fe:41:a7:0a:d0:a9:6c:31:e4:90:fe:66:aa: 4f:02:ba:c6:da:83:ee:67:40:68:19:4a:08:e1:ed:a9:eb:c4: e4:2f:4f:62:3d:cc:0d:58:d8:16:01:ee:4a:da:97:68:a5:de: 6c:98:01:b3:31:81:87:93:b3:ee:58:f6:70:55:b7:9d:3e:bb: a9:83:45:24:fe:12:fd:08:ce:54:49:f5:ec:1c:e5:d3:58:ed: e1:0f:f1:25:97:b2:c1:ca:a7:a6:5e:eb:77:dd:f0:72:62:38: 3d:21:a4:9b:fd:84:d1:4c:6a:ec:2d:96:0c:66:ff:b3:21:d9: a4:37:22:84:b8:d7:ac:25:a7:a0:ec:6d:2d:9a:0b:e6:3d:a6: 03:16:68:38:4c:1a:0f:90:7d:85:fc:80:46:6f:93:f5:31:b7: 26:c9:ff:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSyxYxqU00NuE4RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDRmNGFlM2QtMjhiMi00ZDA0LWJiYTMtODYxMDY3NWU3YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjphlZ9Y6z+jen58sjQIxtKhIoGbYziV6gaiW 6bPZG4zoItqetIxANNCsZmGYlwx1YWS7zay/9yVKk/fFgnfrW+No7+E4/Nwk5s3P O3/7o4smUqWUNJEA+CnVfmSlklyzl90pOp7AETpF/Fp420rrBgfSXXZMjv26HiV9 5sDcJP+P1ITRK8unAz2sIxvoVf6h0XvRiz1egvsa7Jat10U0r9z/gfJTQONypJqc 9SHCENRlTVxJdIXJK8j0R4UOeZ3M5GJliA6XNdQM9SC4bGZ6P3HT780bubOXmcuO hwCD3WZsTpEVykMTypBE7w39GwrA713Zvzhf6ugzDBTULDNGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9yZr8VyLx3B00ls8i7/v2BhoF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTBkY2NiOTAtYTY5ZS0z NzBmLWFlZWQtZGI2N2FlYzRiZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGocZdzALjMkTgXwepj5gOH9wETt8WaZc7OVRD6y7vsGkzfVT8adtQgg gUxg5STmgRtZCTwVGtnYCmPWp6JOLMkjwrPfJJ6dw3LSzyBrwmYJ0B0ylYrX4BXw updF8KVH/kGnCtCpbDHkkP5mqk8Cusbag+5nQGgZSgjh7anrxOQvT2I9zA1Y2BYB 7kral2il3myYAbMxgYeTs+5Y9nBVt50+u6mDRST+Ev0IzlRJ9ewc5dNY7eEP8SWX ssHKp6Ze63fd8HJiOD0hpJv9hNFMauwtlgxm/7Mh2aQ3IoS416wlp6DsbS2aC+Y9 pgMWaDhMGg+QfYX8gEZvk/UxtybJ/6Y= -----END CERTIFICATE-----Generated at Tue Nov 25 12:11:34 2025 by rpki-client