This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7215018-219b-3566-a792-d096ee2930b8.roa File: a7215018-219b-3566-a792-d096ee2930b8.roa (raw, json) Hash identifier: 0o7H7/hexj/FT5h2uUZFLF/pP3QKT6p7162WLI3CFc4= Subject key identifier: 49:DC:92:3B:0C:F1:F4:54:60:FA:7C:57:86:14:AD:8F:3D:A3:8F:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BE1260FF1B89FF360E17CC280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7215018-219b-3566-a792-d096ee2930b8.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.19.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:26:0f:f1:b8:9f:f3:60:e1:7c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=21018e8f-1f87-4793-bf96-5afba9b54cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:0d:f5:f2:39:ed:c8:b2:75:35:61:7b:34: 07:f2:62:fb:50:37:8d:7b:43:7a:a1:da:57:d1:3f: 84:29:d3:af:7c:bb:19:4b:44:ba:a0:12:90:7d:ad: 87:bc:71:d3:5a:78:4a:c5:0e:59:41:a3:03:f3:89: 81:7f:87:e7:80:4c:ff:7e:61:89:e6:5f:84:ed:45: cf:69:fe:f2:9b:8e:4d:c4:61:63:75:7a:00:65:38: c0:7d:5f:a6:b1:c7:ee:b8:b7:62:21:aa:9a:93:6a: 9b:03:bf:0a:ec:01:27:cb:7e:cf:04:fb:c7:d9:a3: 09:bf:a7:07:74:d7:15:c5:53:0f:94:d5:d3:ba:69: 28:d2:9b:1b:fa:f5:61:2d:0d:82:cb:fd:b2:00:49: 22:0e:e8:87:df:26:73:64:72:d8:0c:e4:7b:9a:bb: ea:10:b2:50:16:4b:c2:7f:35:db:0e:f8:04:7f:c1: 7e:a8:96:78:42:a0:50:63:60:8c:1f:cc:31:6c:77: 2d:b6:05:22:7c:0c:35:50:a4:47:2b:77:39:69:54: f5:4d:e1:5b:4a:93:ee:12:be:92:90:68:6e:dc:c9: d6:96:7c:df:8f:81:ff:ec:e5:d6:9e:71:ad:40:3f: ea:4c:ca:58:82:7c:a8:20:1b:87:d3:a8:7a:0e:c0: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:92:3B:0C:F1:F4:54:60:FA:7C:57:86:14:AD:8F:3D:A3:8F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7215018-219b-3566-a792-d096ee2930b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fe:c3:04:46:30:0c:16:d9:aa:c2:3b:74:ba:b7:13:fe:f0: d7:f3:63:be:35:52:e5:6b:0e:a7:22:90:b5:1b:99:1a:75:bb: 04:19:1b:70:db:4c:d8:51:3f:93:dc:43:3c:95:31:38:fb:9a: 88:d9:d8:d9:b2:86:c7:bc:f2:fb:3f:5f:61:38:f6:2d:29:c5: 95:4b:1a:56:dc:d1:89:a6:ec:74:31:97:53:aa:2c:6d:9f:e7: 94:40:14:93:18:fc:27:cf:89:ac:37:4b:66:e7:e4:6d:ac:d8: f3:91:31:e2:d9:0e:08:6e:56:21:1a:b0:98:f4:cd:c3:8d:38: a8:24:79:56:b5:17:c2:e4:44:3c:78:77:ad:d2:d3:68:83:02: ab:50:aa:51:1e:4b:f2:7d:d5:5c:a6:f8:7c:12:78:41:45:da: 4d:25:4c:a5:f5:00:45:6e:74:39:08:d9:b1:82:bb:ef:c1:51: ba:ca:84:fa:65:90:02:e7:17:d5:e4:cc:d0:63:c1:e5:ef:50: 0e:11:f9:13:da:48:44:ea:1f:ec:64:c3:95:e6:3a:4f:d1:e7: d7:c4:67:1f:2b:37:7d:ff:00:50:fb:e8:cd:5f:1f:c4:cb:f7: 7c:d7:1c:b7:48:09:fc:21:ee:32:e4:94:78:bf:dc:80:d7:dd: c6:97:23:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJg/xuJ/zYOF8woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk MjEwMThlOGYtMWY4Ny00NzkzLWJmOTYtNWFmYmE5YjU0Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j8N9fI57ciydTVhezQH8mL7UDeNe0N6odpX 0T+EKdOvfLsZS0S6oBKQfa2HvHHTWnhKxQ5ZQaMD84mBf4fngEz/fmGJ5l+E7UXP af7ym45NxGFjdXoAZTjAfV+mscfuuLdiIaqak2qbA78K7AEny37PBPvH2aMJv6cH dNcVxVMPlNXTumko0psb+vVhLQ2Cy/2yAEkiDuiH3yZzZHLYDOR7mrvqELJQFkvC fzXbDvgEf8F+qJZ4QqBQY2CMH8wxbHcttgUifAw1UKRHK3c5aVT1TeFbSpPuEr6S kGhu3MnWlnzfj4H/7OXWnnGtQD/qTMpYgnyoIBuH06h6DsD02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnckjsM8fRUYPp8V4YUrY89o4/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTcyMTUwMTgtMjE5Yi0z NTY2LWE3OTItZDA5NmVlMjkzMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX+wwRGMAwW2arCO3S6txP+8NfzY741UuVrDqcikLUbmRp1uwQZG3Db TNhRP5PcQzyVMTj7mojZ2Nmyhse88vs/X2E49i0pxZVLGlbc0Ymm7HQxl1OqLG2f 55RAFJMY/CfPiaw3S2bn5G2s2PORMeLZDghuViEasJj0zcONOKgkeVa1F8LkRDx4 d63S02iDAqtQqlEeS/J91Vym+HwSeEFF2k0lTKX1AEVudDkI2bGCu+/BUbrKhPpl kALnF9XkzNBjweXvUA4R+RPaSETqH+xkw5XmOk/R59fEZx8rN33/AFD76M1fH8TL 93zXHLdICfwh7jLklHi/3IDX3caXIzo= -----END CERTIFICATE-----Generated at Tue Nov 25 10:36:30 2025 by rpki-client