This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa File: a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa (raw, json) Hash identifier: dFzb3PwxMpII37ub+Q5nA08tJiWyqSBL7gROESaFpqU= Subject key identifier: C7:DD:77:68:F7:30:27:36:B3:9B:3C:44:DB:AC:F9:E3:B2:F6:8C:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A81EC95FEEF83CFFED2080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.24.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:1e:c9:5f:ee:f8:3c:ff:ed:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3ee11786-15da-4b68-ad87-51372f1a614b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:d1:b4:fd:08:9c:c1:9d:77:22:2a:75:8c: c4:56:d8:88:29:25:4c:57:44:c5:59:66:c9:24:05: bf:04:c9:71:94:45:c7:8d:f4:e7:78:91:a5:52:50: 6a:17:08:d9:7c:ef:02:8c:0d:23:20:6b:2f:c4:e8: cd:6a:38:23:d2:9d:ed:b7:40:54:b7:ae:01:91:a3: e3:f2:b4:3d:11:11:43:dc:9e:70:7b:f8:40:a5:5b: d5:43:f7:7e:4c:8c:7f:77:da:97:96:8d:21:e0:60: c0:65:c2:fc:08:2e:79:f8:9a:97:4c:b2:bc:3b:10: b6:40:6d:e3:b9:95:fb:d7:56:0a:a3:85:a7:c9:82: b0:26:be:9f:1d:52:de:2f:8d:ae:f2:7a:b0:86:6b: e6:9c:59:de:59:bc:b0:5b:ca:12:95:30:a9:e2:d1: d4:b0:1b:45:47:53:aa:bb:82:c5:e8:8d:46:3e:54: 7f:49:f6:d5:64:9d:a5:c2:27:38:6a:1a:a3:64:42: ed:ac:02:31:6d:12:7a:e4:0e:f3:2a:ea:d1:df:e2: 6f:f3:69:42:1f:fe:bf:a6:01:1f:e8:a2:c8:54:05: 7c:2d:3a:a6:2f:3c:1e:ac:8d:f3:d1:17:ba:10:3b: aa:56:0c:af:16:93:2d:65:ea:b6:39:ce:0c:94:d5: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DD:77:68:F7:30:27:36:B3:9B:3C:44:DB:AC:F9:E3:B2:F6:8C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:29:6d:31:fe:05:45:98:54:9e:b2:ed:9f:1d:b1:66:0b:07: 1f:d1:ea:0d:c6:36:16:50:63:1d:ed:d8:bc:20:12:a3:b8:06: a3:49:57:4a:66:e4:67:c3:ba:36:ac:8b:36:d3:48:71:f0:00: e7:8e:ea:39:55:6d:66:1e:97:94:31:56:ba:52:44:49:77:5c: 6d:11:fb:37:89:89:69:79:41:e6:e1:1c:89:07:0a:89:18:e8: cb:cc:cb:80:bb:0a:66:67:32:07:e1:ab:f2:94:9f:a0:5e:a3: 10:12:a7:03:79:7d:dc:0e:35:0d:a5:80:9e:41:bc:c7:2b:e2: 2d:e0:ea:9f:b2:45:a0:3c:36:7d:f6:ce:5b:e2:db:7f:33:0e: fe:fc:92:23:09:cd:74:74:d0:6c:45:10:41:47:ae:3f:06:2a: 95:e1:ec:f0:f3:61:45:f2:eb:87:8c:b0:a4:a1:67:a6:aa:38: 5f:d5:7a:aa:34:43:af:0a:77:e4:b8:8b:ba:b5:ca:3a:d6:c7: 8e:dc:1b:53:b7:a0:a6:55:e6:6f:25:75:fc:71:16:44:30:49: a4:b1:25:c4:c6:de:aa:49:67:c0:5d:0a:0e:92:13:9c:e7:06: b5:20:1f:b6:24:fc:a4:69:20:65:73:0c:7a:7a:46:67:b6:71: 6f:23:26:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqB7JX+74PP/tIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2VlMTE3ODYtMTVkYS00YjY4LWFkODctNTEzNzJmMWE2MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibXRtP0InMGddyIqdYzEVtiIKSVMV0TFWWbJ JAW/BMlxlEXHjfTneJGlUlBqFwjZfO8CjA0jIGsvxOjNajgj0p3tt0BUt64BkaPj 8rQ9ERFD3J5we/hApVvVQ/d+TIx/d9qXlo0h4GDAZcL8CC55+JqXTLK8OxC2QG3j uZX711YKo4WnyYKwJr6fHVLeL42u8nqwhmvmnFneWbywW8oSlTCp4tHUsBtFR1Oq u4LF6I1GPlR/SfbVZJ2lwic4ahqjZELtrAIxbRJ65A7zKurR3+Jv82lCH/6/pgEf 6KLIVAV8LTqmLzwerI3z0Re6EDuqVgyvFpMtZeq2Oc4MlNX8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfdd2j3MCc2s5s8RNus+eOy9owVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhM2VmYTQtNGY0ZC0z Yjk3LTk4MjAtYjBhNWE3YjI0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIpbTH+BUWYVJ6y7Z8dsWYLBx/R6g3GNhZQYx3t2LwgEqO4BqNJV0pm 5GfDujasizbTSHHwAOeO6jlVbWYel5QxVrpSREl3XG0R+zeJiWl5QebhHIkHCokY 6MvMy4C7CmZnMgfhq/KUn6BeoxASpwN5fdwONQ2lgJ5BvMcr4i3g6p+yRaA8Nn32 zlvi238zDv78kiMJzXR00GxFEEFHrj8GKpXh7PDzYUXy64eMsKShZ6aqOF/Veqo0 Q68Kd+S4i7q1yjrWx47cG1O3oKZV5m8ldfxxFkQwSaSxJcTG3qpJZ8BdCg6SE5zn BrUgH7Yk/KRpIGVzDHp6Rme2cW8jJrE= -----END CERTIFICATE-----Generated at Sun Jan 11 15:42:16 2026 by rpki-client