This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa File: a525a691-83ca-3334-8085-c21e4f6b991c.roa (raw, json) Hash identifier: 1Ws0Qodu8NzHjZw8i4c/vucp+ILsurqlCGCbu4qNxIg= Subject key identifier: 9D:9D:9C:07:B7:F7:68:DD:2D:05:DC:17:D4:F6:66:7B:2F:5D:8E:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A68D7D71BD2CD5B87D5E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:8d:7d:71:bd:2c:d5:b8:7d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=2bf917bf-7a0d-403d-9593-1b23c6dc7bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:9e:5e:1a:7c:f5:39:7c:88:43:8f:4f:67: 2b:cf:90:a8:85:d8:db:aa:a5:af:34:a5:8b:c6:d0: 74:14:67:60:be:77:dc:b8:c5:af:15:f8:d3:30:33: 1c:6b:35:cd:91:ab:ba:54:b9:48:81:6b:0a:fa:a8: 69:73:bf:17:1d:69:d2:e0:f4:21:a3:fb:a7:c1:49: 26:cd:21:f7:59:c3:e8:38:90:34:99:96:9c:05:e5: 65:b3:5a:34:45:bc:83:a1:a0:a9:7a:df:fa:c3:0c: 53:1b:f6:c2:11:59:6d:bb:d2:70:d3:b0:30:9f:55: bc:fa:de:ae:66:8d:2a:6d:39:cc:7c:e8:2a:58:db: 2e:95:0b:15:ab:b5:f8:7a:b4:43:25:71:b9:c1:66: 13:da:cf:c3:36:80:03:be:8a:13:25:f2:ff:98:5b: a3:fb:c7:50:06:5d:d0:d2:45:2c:0e:19:54:91:e3: b5:83:ab:c1:25:5d:ed:ee:ea:a0:f0:91:63:cf:48: c8:a1:14:3c:ba:14:88:2d:5a:97:52:89:f1:eb:52: 9a:bd:d0:fe:c5:de:05:61:76:b0:1f:80:46:2d:9d: 30:1c:f9:d8:76:64:08:67:38:15:cc:32:ec:ef:53: 21:ca:b3:0e:69:6a:da:23:43:6d:fc:88:6d:b8:be: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9D:9C:07:B7:F7:68:DD:2D:05:DC:17:D4:F6:66:7B:2F:5D:8E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:25:94:ac:49:ec:7e:6c:e7:0a:5c:a7:84:f8:7d:46:70:f0: 76:6c:16:6b:8b:45:9d:e8:a7:ed:0d:05:a6:ea:99:a4:bc:59: ff:05:21:c9:2e:f8:ac:42:54:7e:60:e9:ff:2e:81:b3:9f:a3: 26:7e:22:66:ad:b2:08:c7:47:14:63:5c:c7:97:e1:f7:96:df: 2b:a1:8e:71:57:a6:68:f9:1f:9b:f8:7a:c4:d4:2d:07:52:37: 4d:6d:37:54:26:3a:6c:bf:d8:5a:67:17:8e:e1:0d:19:65:7a: 71:88:ec:81:77:b6:05:ff:b6:ab:eb:48:93:11:a7:85:f8:15: 2d:7c:c1:46:ec:f9:86:13:43:c6:55:98:ef:b9:9c:b4:e3:a0: 02:35:c0:6e:99:ee:da:d0:12:08:db:5c:6c:f7:04:5b:55:16: 2d:b7:69:e1:f1:9d:0f:00:cf:6b:c0:11:17:d4:75:da:8d:fb: c0:ca:38:19:39:0f:f7:f2:bb:76:39:1a:67:19:23:86:2e:d9: 68:cc:10:b1:29:4a:fa:cf:a7:c2:6a:30:47:6c:d5:6a:d2:f5: 74:b8:ec:66:46:9c:9c:75:03:bd:86:ef:eb:cf:f4:a2:54:9b: bb:61:02:fe:d7:29:ef:57:80:81:e5:93:9f:31:be:9f:a7:ec: 86:13:78:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpo19cb0s1bh9XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MmJmOTE3YmYtN2EwZC00MDNkLTk1OTMtMWIyM2M2ZGM3YmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZeeXhp89Tl8iEOPT2crz5CohdjbqqWvNKWL xtB0FGdgvnfcuMWvFfjTMDMcazXNkau6VLlIgWsK+qhpc78XHWnS4PQho/unwUkm zSH3WcPoOJA0mZacBeVls1o0RbyDoaCpet/6wwxTG/bCEVltu9Jw07Awn1W8+t6u Zo0qbTnMfOgqWNsulQsVq7X4erRDJXG5wWYT2s/DNoADvooTJfL/mFuj+8dQBl3Q 0kUsDhlUkeO1g6vBJV3t7uqg8JFjz0jIoRQ8uhSILVqXUonx61KavdD+xd4FYXaw H4BGLZ0wHPnYdmQIZzgVzDLs71MhyrMOaWraI0Nt/IhtuL7JKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2dnAe392jdLQXcF9T2ZnsvXY6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUyNWE2OTEtODNjYS0z MzM0LTgwODUtYzIxZTRmNmI5OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsllKxJ7H5s5wpcp4T4fUZw8HZsFmuLRZ3op+0NBabqmaS8Wf8FIcku +KxCVH5g6f8ugbOfoyZ+ImatsgjHRxRjXMeX4feW3yuhjnFXpmj5H5v4esTULQdS N01tN1QmOmy/2FpnF47hDRllenGI7IF3tgX/tqvrSJMRp4X4FS18wUbs+YYTQ8ZV mO+5nLTjoAI1wG6Z7trQEgjbXGz3BFtVFi23aeHxnQ8Az2vAERfUddqN+8DKOBk5 D/fyu3Y5GmcZI4Yu2WjMELEpSvrPp8JqMEds1WrS9XS47GZGnJx1A72G7+vP9KJU m7thAv7XKe9XgIHlk58xvp+n7IYTeJA= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:55 2026 by rpki-client