This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa File: a23c0de1-1441-3458-bc00-40d7cbcba868.roa (raw, json) Hash identifier: GNRt5j6zu+H1cOuf0DBVglObbBGmMNaVd4Itc5gKzGo= Subject key identifier: B8:6B:D7:CA:6F:9F:D2:78:9A:CA:20:75:82:75:FB:B6:AD:6B:18:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBC19FFC36660879B4A0A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.25.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c1:9f:fc:36:66:08:79:b4:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=ea7f46cf-e0ef-41de-bc32-255cd8ed07f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:f8:3d:38:3b:fa:07:34:9a:5a:e4:32:8f: e6:30:62:95:8b:ae:67:7e:aa:7e:9c:92:68:f3:1a: 85:70:28:70:ec:a3:96:be:e6:2b:72:e8:a2:d9:60: 94:a9:dd:e6:d5:5d:d5:16:09:23:e0:b6:d7:86:0c: bb:9e:94:b9:b5:c9:e6:85:81:67:3a:5f:17:21:6b: 88:c1:33:7c:15:78:c2:14:92:1f:ff:32:aa:b9:6c: d3:42:2a:f2:3a:5f:20:b0:71:c0:f8:94:39:2f:be: 43:80:9d:12:c7:9c:c9:cd:ae:c9:0b:a5:33:a3:a9: d0:16:00:67:28:56:b0:f4:b5:da:43:f2:28:ce:95: d7:3e:3d:45:c6:a1:ad:ce:5a:89:8c:d5:71:bd:97: 76:63:15:b4:e4:c1:b1:fa:f9:42:8a:ef:d2:c3:68: 7d:5b:9c:a9:cf:60:00:90:26:7d:5d:6d:a8:be:86: 93:86:b5:22:ce:bb:29:4b:ab:55:50:2d:0c:06:58: 28:96:5d:0e:eb:b0:48:70:3a:84:47:29:f4:36:56: cb:bc:78:e5:6d:c9:d3:a4:fc:4f:b2:21:ec:97:5a: 0e:19:7e:9f:b2:5a:d6:ee:c9:4f:12:78:68:64:2d: df:ac:69:b2:b0:a7:49:53:af:ef:6a:30:be:57:47: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6B:D7:CA:6F:9F:D2:78:9A:CA:20:75:82:75:FB:B6:AD:6B:18:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9b:17:2a:89:04:fb:55:5f:48:b6:fa:b7:14:7a:a9:9c:c5: 63:80:88:03:b0:42:5e:6e:1a:a1:b0:3a:a1:ac:33:b1:f8:60: e0:14:27:f2:4c:c7:78:39:a2:22:9e:76:ce:82:56:80:a1:62: 46:3f:71:fc:2a:d7:2e:dd:56:bf:c5:e2:cd:29:67:42:6c:18: a7:89:b6:5a:8a:94:d9:d2:db:ca:81:cf:bd:fe:d8:8e:84:db: e4:1c:f3:f6:6b:fd:98:78:09:ea:41:54:cd:b7:7b:6b:ed:46: f8:1d:ea:7b:69:2f:60:4e:e5:02:f0:2f:88:b2:79:a5:fb:43: 77:56:6a:f3:05:74:21:9d:08:b3:5f:d3:7c:a3:29:eb:5f:39: db:e6:d4:fa:3c:79:4e:53:8f:e4:d8:b9:e4:f8:00:25:f1:1d: 0b:6e:b6:db:c6:6d:b3:98:f6:10:32:38:0d:c3:fb:9b:a0:c6: 45:03:06:b5:81:3b:bc:ba:c4:fb:25:b8:93:d4:02:51:2d:94: 9d:1a:32:cb:53:dc:a5:29:a5:e1:09:5c:2c:f8:51:88:22:f7: 59:bd:b3:8f:9f:e1:88:60:03:7b:51:8c:b6:49:4c:18:89:e2: 6a:2e:66:48:6b:d8:1b:6c:25:ba:64:a5:0b:8a:49:5e:f4:da: c6:b6:1c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28Gf/DZmCHm0oKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWE3ZjQ2Y2YtZTBlZi00MWRlLWJjMzItMjU1Y2Q4ZWQwN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRv4PTg7+gc0mlrkMo/mMGKVi65nfqp+nJJo 8xqFcChw7KOWvuYrcuii2WCUqd3m1V3VFgkj4LbXhgy7npS5tcnmhYFnOl8XIWuI wTN8FXjCFJIf/zKquWzTQiryOl8gsHHA+JQ5L75DgJ0Sx5zJza7JC6Uzo6nQFgBn KFaw9LXaQ/IozpXXPj1FxqGtzlqJjNVxvZd2YxW05MGx+vlCiu/Sw2h9W5ypz2AA kCZ9XW2ovoaThrUizrspS6tVUC0MBlgoll0O67BIcDqERyn0NlbLvHjlbcnTpPxP siHsl1oOGX6fslrW7slPEnhoZC3frGmysKdJU6/vajC+V0eD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhr18pvn9J4msogdYJ1+7ataxgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIzYzBkZTEtMTQ0MS0z NDU4LWJjMDAtNDBkN2NiY2JhODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAubFyqJBPtVX0i2+rcUeqmcxWOAiAOwQl5uGqGwOqGsM7H4YOAUJ/JM x3g5oiKeds6CVoChYkY/cfwq1y7dVr/F4s0pZ0JsGKeJtlqKlNnS28qBz73+2I6E 2+Qc8/Zr/Zh4CepBVM23e2vtRvgd6ntpL2BO5QLwL4iyeaX7Q3dWavMFdCGdCLNf 03yjKetfOdvm1Po8eU5Tj+TYueT4ACXxHQtuttvGbbOY9hAyOA3D+5ugxkUDBrWB O7y6xPsluJPUAlEtlJ0aMstT3KUppeEJXCz4UYgi91m9s4+f4YhgA3tRjLZJTBiJ 4mouZkhr2BtsJbpkpQuKSV702sa2HP4= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:56 2026 by rpki-client