This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa File: a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa (raw, json) Hash identifier: qQy3SBrBMkVcL8QhZWGYBmrBgNkQJ1hbmnvuBEAGaSs= Subject key identifier: 67:78:29:4C:BC:40:21:C2:52:29:AA:D3:1F:E4:4F:0C:6A:6C:63:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A67DE794E2D467856AF400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.23.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:7d:e7:94:e2:d4:67:85:6a:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=916c7cf9-86bb-4730-b455-17e318227a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:da:d5:8f:1d:1b:39:f0:71:dc:70:46:d0: 7a:a2:d8:2f:9a:cf:b1:c3:2e:b0:e8:da:c0:ff:39: ec:ca:9c:42:93:0e:16:d8:b6:cf:df:5d:af:1c:5e: 81:2a:72:d3:5e:38:cd:ea:78:ba:25:53:c2:a4:56: 6a:33:db:0d:ed:82:b4:71:b1:3d:8c:74:35:e5:e5: 0a:2b:ce:29:77:ca:98:99:d3:ef:77:31:99:4f:d2: 82:24:fa:8b:aa:46:98:ba:d4:22:3c:9f:cc:61:42: dc:53:bc:3f:6c:c4:25:87:d2:33:79:ff:7d:03:88: 44:58:ab:b7:1d:38:bd:29:ae:f1:56:01:1a:e1:5c: 08:64:2f:7d:ec:0a:dc:3d:ec:1e:7d:70:c0:bc:d0: b7:b1:21:2c:4a:a2:37:38:6e:f7:f4:21:f8:15:74: 49:3d:1c:9f:34:bf:ea:61:65:1a:40:3a:cd:63:c1: 2d:20:66:f0:11:1e:35:9b:39:e2:12:df:d9:97:82: 51:31:b7:66:19:f6:4b:e1:30:be:68:f2:63:40:2b: 74:67:4a:99:c2:c1:22:55:5c:58:61:c1:7a:c8:ed: 11:cb:17:5b:4d:a9:e7:f5:a0:0a:eb:f8:f0:91:4e: 0c:1e:4b:61:66:03:b9:82:95:68:e2:8d:6a:bc:73: 2c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:29:4C:BC:40:21:C2:52:29:AA:D3:1F:E4:4F:0C:6A:6C:63:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f6:5b:1c:c3:9e:e7:98:54:a4:45:bb:97:47:83:36:be:24: c4:ff:88:c3:f7:7b:7b:d3:f0:d3:1a:5f:4b:9b:eb:91:2f:0d: 7e:01:7c:ba:ce:43:c7:24:41:66:cd:18:4d:3f:0b:0f:36:ff: de:c6:3b:ef:3e:7f:47:00:14:d8:82:f9:41:59:68:a2:38:29: 8a:78:85:8d:a2:a8:c6:f6:8d:76:86:a2:e5:d4:f9:12:94:08: e7:82:69:15:21:e3:3a:ae:10:66:53:5f:07:8a:a5:5e:f9:61: c8:6f:ef:c9:59:33:e8:c8:b2:ce:c4:a7:54:30:67:96:10:1c: d9:38:5a:ea:75:e2:3e:89:f6:c6:ee:1b:3e:96:6e:17:11:fb: 1b:b6:30:1c:09:c8:42:83:60:94:a6:99:98:b8:38:5b:fb:19: 79:56:bb:78:a3:8f:6b:a1:2e:ab:5e:98:b6:73:d5:b9:80:9e: 9b:0b:1f:8e:7b:2d:c7:4c:0e:64:67:1a:5f:a8:b6:60:b7:71: f6:ca:58:ca:bc:6d:11:2c:5a:89:b1:59:53:b2:f8:f1:06:c8: d1:65:cf:65:87:3d:9a:0f:0d:f1:ca:4b:82:9b:6b:c5:2a:47: 02:5b:9b:2b:22:60:6b:9f:36:6b:c5:2a:29:5d:8d:19:c9:e2: 2a:d4:c3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpn3nlOLUZ4Vq9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OTE2YzdjZjktODZiYi00NzMwLWI0NTUtMTdlMzE4MjI3YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN3a1Y8dGznwcdxwRtB6otgvms+xwy6w6NrA /znsypxCkw4W2LbP312vHF6BKnLTXjjN6ni6JVPCpFZqM9sN7YK0cbE9jHQ15eUK K84pd8qYmdPvdzGZT9KCJPqLqkaYutQiPJ/MYULcU7w/bMQlh9Izef99A4hEWKu3 HTi9Ka7xVgEa4VwIZC997ArcPewefXDAvNC3sSEsSqI3OG739CH4FXRJPRyfNL/q YWUaQDrNY8EtIGbwER41mzniEt/Zl4JRMbdmGfZL4TC+aPJjQCt0Z0qZwsEiVVxY YcF6yO0RyxdbTann9aAK6/jwkU4MHkthZgO5gpVo4o1qvHMspQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd4KUy8QCHCUimq0x/kTwxqbGPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTY1ODk4YTYtMTY4Mi0z ZDQ5LTlhYzEtODg1NmJiYmNjZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD2WxzDnueYVKRFu5dHgza+JMT/iMP3e3vT8NMaX0ub65EvDX4BfLrO Q8ckQWbNGE0/Cw82/97GO+8+f0cAFNiC+UFZaKI4KYp4hY2iqMb2jXaGouXU+RKU COeCaRUh4zquEGZTXweKpV75Ychv78lZM+jIss7Ep1QwZ5YQHNk4Wup14j6J9sbu Gz6WbhcR+xu2MBwJyEKDYJSmmZi4OFv7GXlWu3ijj2uhLqtemLZz1bmAnpsLH457 LcdMDmRnGl+otmC3cfbKWMq8bREsWomxWVOy+PEGyNFlz2WHPZoPDfHKS4Kba8Uq RwJbmysiYGufNmvFKildjRnJ4irUw50= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:52 2026 by rpki-client