This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa File: a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa (raw, json) Hash identifier: 7Nk3/EeLPlUdxjfXvEPwMW+jNz+fDhzJqYhYy+pReaI= Subject key identifier: 85:9E:C1:1E:02:24:A7:52:DF:8B:8B:7C:E5:48:1A:78:16:B8:5F:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A66F94CF381FED93487280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.25.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:6f:94:cf:38:1f:ed:93:48:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=bea783b0-398f-482f-bcac-254553234963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:f4:db:ae:ff:4d:e6:a9:35:9b:6d:83:7a: 0a:3b:f6:23:3e:b3:88:fd:79:8a:c0:af:5e:63:c8: bd:37:02:2b:28:2c:01:8d:f2:c3:51:3e:32:a3:5a: 3b:df:f4:f2:02:c7:b5:99:49:34:c6:a1:87:ac:f4: 04:eb:0f:a4:6b:46:ed:e9:72:0f:3a:92:9c:2f:c2: f8:7b:80:53:e4:97:99:40:fe:f9:e8:ab:24:47:15: a1:9b:66:58:84:19:d9:92:a0:ff:4e:59:44:5f:e9: ac:74:3a:3c:b3:ca:dc:5a:b6:dc:99:fb:17:bd:68: e3:43:0a:da:a6:a5:2a:06:9c:04:17:c8:aa:76:fb: 7d:33:eb:f3:c6:78:f9:29:b9:1a:34:a7:4e:12:d2: ab:06:bb:46:77:82:d6:5f:71:a5:b0:8f:f4:1d:a2: 1d:d5:48:5e:3d:09:05:df:11:97:df:dd:2f:b2:20: b1:bc:d5:58:23:34:d3:a8:53:d6:fd:57:82:f5:a6: e5:90:a7:58:d9:bc:8f:ca:09:fd:1f:f0:63:9f:3d: 53:9a:6b:e9:dd:ec:63:45:6f:b1:e2:0f:10:59:15: 56:07:b6:ac:2a:a2:d8:29:70:67:b5:73:f0:a8:3c: af:ea:a3:1a:ba:71:aa:68:9b:0c:22:76:67:9b:80: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:C1:1E:02:24:A7:52:DF:8B:8B:7C:E5:48:1A:78:16:B8:5F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6c:ab:95:e9:c4:fd:4c:c3:7b:94:84:c3:30:b3:37:c0:1c: ea:99:25:38:db:9d:b1:e4:a9:ec:81:73:89:b7:ad:af:c1:05: 84:36:fb:44:e6:c6:ca:88:58:b6:41:b1:44:b1:9f:3a:b5:ab: e1:a4:2d:9e:b7:9c:19:1d:08:b5:cb:aa:fe:9d:33:af:f9:66: 0b:d0:e9:84:6f:d2:2e:8e:3b:41:2a:eb:1d:dc:11:f1:c5:4f: 68:c3:d9:1c:91:84:dc:36:60:61:41:2e:2e:3c:8a:5f:f2:8c: 64:44:cf:48:28:b2:3f:5e:98:be:54:b9:b8:e0:e9:45:6d:ca: 4e:72:06:a4:ca:e8:41:07:e7:97:01:f0:7a:fa:22:fe:6e:ed: 7b:69:f8:b2:2b:29:b4:28:f1:45:57:65:24:81:b0:d7:ef:a0: e5:5d:e2:ac:92:21:91:de:e7:77:e9:af:11:d4:34:82:1e:bf: 40:5d:23:6c:07:a9:57:d3:5c:98:7a:4d:2d:8c:c8:ff:8d:1a: 36:a3:bc:63:a1:ae:ad:bf:f1:ca:c0:3c:26:57:f3:ee:21:c5: f0:de:0d:15:a8:7b:3c:72:e5:b2:d2:a4:3d:1c:7d:af:3b:4c: 38:11:f1:02:32:9c:05:33:00:ac:53:86:f3:dd:c5:9c:3c:58: 77:aa:ea:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpm+Uzzgf7ZNIcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YmVhNzgzYjAtMzk4Zi00ODJmLWJjYWMtMjU0NTUzMjM0OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtof0267/TeapNZttg3oKO/YjPrOI/XmKwK9e Y8i9NwIrKCwBjfLDUT4yo1o73/TyAse1mUk0xqGHrPQE6w+ka0bt6XIPOpKcL8L4 e4BT5JeZQP756KskRxWhm2ZYhBnZkqD/TllEX+msdDo8s8rcWrbcmfsXvWjjQwra pqUqBpwEF8iqdvt9M+vzxnj5KbkaNKdOEtKrBrtGd4LWX3GlsI/0HaId1UhePQkF 3xGX390vsiCxvNVYIzTTqFPW/VeC9ablkKdY2byPygn9H/Bjnz1Tmmvp3exjRW+x 4g8QWRVWB7asKqLYKXBntXPwqDyv6qMaunGqaJsMInZnm4AfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWewR4CJKdS34uLfOVIGngWuF9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTJjNjU2NzAtNTE1Ny0z NmMxLTkyYmQtNzliYWMzZTZjYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxsq5XpxP1Mw3uUhMMwszfAHOqZJTjbnbHkqeyBc4m3ra/BBYQ2+0Tm xsqIWLZBsUSxnzq1q+GkLZ63nBkdCLXLqv6dM6/5ZgvQ6YRv0i6OO0Eq6x3cEfHF T2jD2RyRhNw2YGFBLi48il/yjGREz0gosj9emL5Uubjg6UVtyk5yBqTK6EEH55cB 8Hr6Iv5u7Xtp+LIrKbQo8UVXZSSBsNfvoOVd4qySIZHe53fprxHUNIIev0BdI2wH qVfTXJh6TS2MyP+NGjajvGOhrq2/8crAPCZX8+4hxfDeDRWoezxy5bLSpD0cfa87 TDgR8QIynAUzAKxThvPdxZw8WHeq6uo= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:22 2026 by rpki-client