This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa File: aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa (raw, json) Hash identifier: Cxfx0Ys4O6jrjeWMlkuIeP9l55LXCWpKzRMbPRXs3IU= Subject key identifier: 0A:6E:4C:5E:ED:03:A0:AE:BA:F9:C6:46:29:0D:48:D3:B2:B2:1C:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBC7A301C3EE0FF9DA0CA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c7:a3:01:c3:ee:0f:f9:da:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=3e41d19d-4137-4d10-b423-b49430b51453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:04:98:bd:58:97:90:19:df:af:0e:0d:77: 6b:ca:35:2c:e3:a3:9c:a8:32:1c:01:01:4e:2f:aa: 0f:dd:b2:cc:0b:6c:bb:c9:51:d7:6a:a6:aa:b4:cb: a6:aa:b0:0d:8c:69:9f:a4:17:92:e8:c1:09:16:e0: f8:58:b9:f5:23:d3:15:a2:81:24:a2:71:8d:4c:83: 54:f6:9c:ab:be:2d:0d:43:85:69:54:59:47:e9:9d: c6:ee:8f:33:55:98:49:88:5b:f3:eb:dc:a1:1b:58: 5d:80:7a:88:c9:6c:d4:00:75:d3:bd:fb:5c:08:0a: b1:3c:5b:18:de:8e:91:d2:25:e5:49:a2:ef:c1:55: 77:a8:0c:4e:a1:34:30:69:77:63:c8:92:e8:8f:7b: 7b:16:c7:2c:f4:2d:ea:76:3a:77:7e:d8:2e:74:56: 29:cb:61:6a:cd:fd:3b:7f:89:74:31:7d:b1:bd:9f: a5:69:49:a7:9f:63:6b:df:5d:af:33:37:0e:ce:53: b5:24:be:f1:a7:c1:b9:63:f0:ac:71:3f:8c:b8:76: b4:60:9f:5d:b1:36:66:f9:c3:0a:25:d2:78:66:d3: a1:1f:0b:97:37:ad:19:0d:4d:91:12:64:19:7a:6e: 8c:c4:82:ce:f4:02:6d:b0:dd:65:bb:f6:1b:98:3a: 7c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:4C:5E:ED:03:A0:AE:BA:F9:C6:46:29:0D:48:D3:B2:B2:1C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:aa:4d:6b:34:3e:7a:f8:a6:56:35:c4:fb:42:e4:98:a0:72: ba:2e:41:51:4b:2b:af:3c:ed:19:5e:86:6e:da:f3:e0:37:53: 04:1d:15:dd:ad:2c:ec:ea:0c:42:6d:37:70:af:d8:26:f9:e7: d5:07:52:ec:89:8e:09:da:0b:5b:06:b6:1c:fb:f0:f8:11:e6: 7f:2c:0d:dd:bb:12:fc:ed:38:75:71:13:c9:60:d8:00:19:c7: d5:a4:03:e9:cc:79:97:1b:22:0e:96:72:a5:31:eb:ed:85:5a: 58:d5:f6:cb:4a:69:c7:88:d1:49:64:2a:ea:1b:b5:e5:80:da: 35:aa:38:0e:8d:b5:c8:fb:7c:aa:e3:8a:86:7c:e2:2d:85:c9: 4e:36:10:4d:82:30:d0:62:5b:74:db:b0:22:ed:64:da:9c:85: 56:f8:54:b9:83:1b:32:50:69:aa:e0:84:ff:d7:d4:3c:dc:d6: 9f:ff:12:a4:a6:5d:1e:dc:79:d0:84:38:0c:a6:43:7c:9c:a0: 0f:9e:74:83:cd:e6:93:72:de:c9:a7:7a:05:60:d3:72:ca:4f: bd:4f:21:44:29:3c:27:aa:e2:55:c4:cc:0c:2b:81:8a:09:9a: 4e:e9:17:03:2d:88:7a:80:37:0f:fe:32:80:e7:aa:f1:da:e7: 1a:f0:ab:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28ejAcPuD/naDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk M2U0MWQxOWQtNDEzNy00ZDEwLWI0MjMtYjQ5NDMwYjUxNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHMEmL1Yl5AZ368ODXdryjUs46OcqDIcAQFO L6oP3bLMC2y7yVHXaqaqtMumqrANjGmfpBeS6MEJFuD4WLn1I9MVooEkonGNTINU 9pyrvi0NQ4VpVFlH6Z3G7o8zVZhJiFvz69yhG1hdgHqIyWzUAHXTvftcCAqxPFsY 3o6R0iXlSaLvwVV3qAxOoTQwaXdjyJLoj3t7Fscs9C3qdjp3ftgudFYpy2Fqzf07 f4l0MX2xvZ+laUmnn2Nr312vMzcOzlO1JL7xp8G5Y/CscT+MuHa0YJ9dsTZm+cMK JdJ4ZtOhHwuXN60ZDU2REmQZem6MxILO9AJtsN1lu/YbmDp8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApuTF7tA6CuuvnGRikNSNOyshzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE1OWQ5ZDItY2Q4NS0z NWZhLWE0NWItN2UyYTFkOGJhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2qTWs0Pnr4plY1xPtC5JigcrouQVFLK6887Rlehm7a8+A3UwQdFd2t LOzqDEJtN3Cv2Cb559UHUuyJjgnaC1sGthz78PgR5n8sDd27EvztOHVxE8lg2AAZ x9WkA+nMeZcbIg6WcqUx6+2FWljV9stKaceI0UlkKuobteWA2jWqOA6Ntcj7fKrj ioZ84i2FyU42EE2CMNBiW3TbsCLtZNqchVb4VLmDGzJQaarghP/X1Dzc1p//EqSm XR7cedCEOAymQ3ycoA+edIPN5pNy3smnegVg03LKT71PIUQpPCeq4lXEzAwrgYoJ mk7pFwMtiHqANw/+MoDnqvHa5xrwq6E= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:33 2026 by rpki-client