This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7b865b0-b062-377f-aa2e-93d9deede961.roa File: a7b865b0-b062-377f-aa2e-93d9deede961.roa (raw, json) Hash identifier: TsIzgi7dwpfJ62jFWOcQ/ASIKNtDgYWrBjMZzhwNhqs= Subject key identifier: D9:D8:00:3C:C1:6F:FD:76:B4:A1:8B:70:F1:5F:56:DF:50:1D:2B:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBDFBF691914DFBCC59780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7b865b0-b062-377f-aa2e-93d9deede961.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 170.52.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:df:bf:69:19:14:df:bc:c5:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=b29063f4-9c28-493c-a1ae-82c1ca9d626a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:02:4c:48:ed:3e:17:04:b3:9f:c2:1b:69:6a: f3:9d:dc:9d:c0:71:c2:5c:83:08:45:46:19:9b:66: e3:18:08:d0:18:b4:3b:d6:af:cd:a0:0c:76:07:2d: ee:d5:30:e9:4b:02:74:d2:b3:75:7d:e8:95:45:cc: 57:fe:00:d4:70:bf:ca:e0:79:e1:3a:0a:9b:bb:d7: 31:3f:1f:97:b4:3f:62:fd:8c:59:72:c9:a4:70:ee: a8:52:b6:c4:6d:e3:9b:66:3b:d4:b0:3e:64:ed:11: ff:4e:b0:c6:69:ea:63:d8:4f:99:06:4c:c5:2e:2e: 90:e3:44:eb:95:e8:d8:af:83:9f:93:90:eb:78:df: 1b:0e:fc:22:0c:cc:d5:18:1a:7b:2b:55:8b:76:6c: 88:78:9f:a7:fe:2d:86:46:5e:9c:fc:23:3b:0d:7c: 48:56:45:27:5e:c9:71:ff:94:83:28:aa:ae:87:6d: 30:08:1a:18:aa:69:b6:92:47:e8:08:f8:97:a9:78: 56:95:09:53:25:71:a8:99:e9:32:d8:02:a8:12:38: 04:a0:0f:4d:0b:0e:b3:31:8e:4c:d4:c5:21:ea:98: 99:45:1d:16:3a:22:c4:3e:cf:ad:a6:98:1b:0a:54: 80:ca:d9:90:f2:ae:d0:ed:25:a5:49:a1:eb:1c:d2: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:00:3C:C1:6F:FD:76:B4:A1:8B:70:F1:5F:56:DF:50:1D:2B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7b865b0-b062-377f-aa2e-93d9deede961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:57:05:7b:f8:a6:68:67:cf:6f:69:2e:de:71:dd:04:59:95: fd:4e:25:e5:03:67:99:88:97:3e:07:72:31:6d:29:40:74:13: f6:37:2d:1f:a6:0b:d0:be:f1:22:fe:db:d3:ce:3b:15:49:09: f8:1d:a3:f0:f4:52:41:17:1c:2c:3e:42:87:03:ad:37:d1:99: 08:e7:98:dc:cf:f2:c7:fd:66:b3:ff:5b:37:13:bc:37:6f:4f: c2:84:54:d9:2f:41:b4:c7:5d:6f:6c:c1:b0:2a:4d:72:d3:88: 3d:4d:7f:80:d3:a1:e2:70:1d:50:af:61:ce:41:bd:2c:31:9b: 3a:4d:c8:38:36:5b:c4:94:7e:df:af:f1:7c:2a:33:d1:f4:25: 92:8f:aa:53:e7:19:5c:7b:d5:23:74:30:c4:8f:22:56:19:9b: 1f:8f:32:f4:69:19:6c:5d:28:a4:2a:8f:4c:10:bf:cb:6c:a0: e8:35:be:5b:22:91:c1:bf:5a:b6:9d:ae:f4:e4:28:0f:02:e9: 6c:5e:f4:c9:c4:f6:1c:7e:fe:aa:36:4a:13:ff:40:b2:28:80: 84:8d:3f:7e:ee:53:4f:d3:7c:7c:04:b3:fd:55:fb:43:39:a2: 08:39:d5:dd:a2:ec:6e:b8:97:52:00:6b:9a:76:2c:e8:b6:de: cb:e8:6e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC29+/aRkU37zFl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YjI5MDYzZjQtOWMyOC00OTNjLWExYWUtODJjMWNhOWQ2MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AJMSO0+FwSzn8IbaWrzndydwHHCXIMIRUYZ m2bjGAjQGLQ71q/NoAx2By3u1TDpSwJ00rN1feiVRcxX/gDUcL/K4HnhOgqbu9cx Px+XtD9i/YxZcsmkcO6oUrbEbeObZjvUsD5k7RH/TrDGaepj2E+ZBkzFLi6Q40Tr lejYr4Ofk5DreN8bDvwiDMzVGBp7K1WLdmyIeJ+n/i2GRl6c/CM7DXxIVkUnXslx /5SDKKquh20wCBoYqmm2kkfoCPiXqXhWlQlTJXGomeky2AKoEjgEoA9NCw6zMY5M 1MUh6piZRR0WOiLEPs+tppgbClSAytmQ8q7Q7SWlSaHrHNLSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnYADzBb/12tKGLcPFfVt9QHSsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdiODY1YjAtYjA2Mi0z NzdmLWFhMmUtOTNkOWRlZWRlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVXBXv4pmhnz29pLt5x3QRZlf1OJeUDZ5mIlz4HcjFtKUB0E/Y3LR+m C9C+8SL+29POOxVJCfgdo/D0UkEXHCw+QocDrTfRmQjnmNzP8sf9ZrP/WzcTvDdv T8KEVNkvQbTHXW9swbAqTXLTiD1Nf4DToeJwHVCvYc5BvSwxmzpNyDg2W8SUft+v 8XwqM9H0JZKPqlPnGVx71SN0MMSPIlYZmx+PMvRpGWxdKKQqj0wQv8tsoOg1vlsi kcG/WradrvTkKA8C6Wxe9MnE9hx+/qo2ShP/QLIogISNP37uU0/TfHwEs/1V+0M5 ogg51d2i7G64l1IAa5p2LOi23svobiw= -----END CERTIFICATE-----Generated at Sun Jan 11 16:57:27 2026 by rpki-client