This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa File: af3520ed-e043-3001-b695-d4f401a42f6d.roa (raw, json) Hash identifier: T2iixv/iM6wSCF/x0H6912jWpp4G9AN5A9umSKwCNdU= Subject key identifier: CC:F5:48:70:77:B2:28:E7:95:98:13:63:47:7F:D1:4B:D5:4B:62:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C487127003AF9404E48A02E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.24.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:27:00:3a:f9:40:4e:48:a0:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=50f9d70d-2683-4257-b478-db703d244d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:73:93:bc:e8:93:fc:04:92:60:29:a9:6c: aa:b7:2a:ac:75:5b:c4:17:9e:ec:42:90:a3:11:c5: 8c:d9:8a:ff:76:92:68:0a:2c:cf:b9:18:6a:d7:aa: 0a:80:a1:77:23:26:57:86:e3:28:a1:9f:49:9a:ac: 76:27:ef:39:10:e3:95:0a:2e:7c:f7:ff:d8:28:77: cb:f4:15:0c:27:c5:74:19:f8:9d:ff:90:4e:43:e6: b0:17:1d:58:5e:77:38:46:16:8d:67:b9:ea:e9:dc: 18:ae:c3:d5:15:69:3f:c0:83:57:f2:e7:a7:f1:e3: 72:e2:95:fb:96:6b:af:77:da:d8:0b:89:c9:7a:45: d0:7f:2d:6d:00:af:d2:76:0f:17:73:03:3a:59:fb: 86:2f:11:3f:16:a4:38:47:bc:a3:97:ed:6c:c8:9d: 4b:3c:fe:90:b7:c4:88:69:d9:08:18:19:64:05:e4: 25:46:5a:23:7c:9d:06:62:ce:5e:d2:fe:f6:8d:33: de:8c:23:e6:e8:ab:c4:9e:f8:ad:b8:db:60:5d:c9: 46:cd:27:64:4e:b3:64:48:d5:2e:f5:d8:90:5f:c6: 1e:96:7c:b8:ff:d2:3f:a0:78:2c:9b:30:75:40:25: 88:91:5b:7b:c0:af:81:9f:30:45:00:89:1c:b7:b1: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:48:70:77:B2:28:E7:95:98:13:63:47:7F:D1:4B:D5:4B:62:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:52:4d:ef:29:23:0d:a7:e9:6e:cc:fe:9f:35:c1:46:17: e5:7d:14:a8:0c:bd:d3:36:c4:dd:83:08:72:b9:fe:7c:95:4a: e0:21:79:4f:61:13:a6:17:42:e5:c6:4b:60:d5:b4:7a:46:13: 67:68:4d:e3:13:71:f6:f2:7c:e4:d4:f1:8b:b5:d2:64:19:2e: 36:e9:fa:df:dc:01:76:33:54:c9:55:7d:8e:04:82:da:30:69: f6:2b:2d:c6:c8:d7:1f:b5:79:8f:62:d2:e9:4f:c6:68:79:c0: c9:4a:f2:f5:69:f5:37:59:fa:db:1f:a0:d1:f6:84:2c:ba:7e: e8:4e:3d:35:85:55:f8:07:57:c7:70:4f:f9:b2:68:d0:96:b4: dd:e2:d7:d1:5f:f7:7a:15:bc:2d:f7:d6:fa:db:28:92:93:2d: f6:23:87:ca:c4:ab:3d:ad:ed:ee:47:3c:87:76:d8:a0:32:eb: cb:71:a7:80:b0:2a:62:bc:3e:5b:4a:ee:8f:41:37:da:c4:48: ee:86:3a:c5:2e:a5:3b:c7:de:c9:e5:5c:06:ce:78:8f:36:b5: 24:41:c7:d4:86:4a:bf:d4:0a:c3:15:bf:9e:02:f7:f0:25:fa: 3b:86:0e:8e:fa:5c:9e:51:e7:24:a3:83:93:49:4b:a4:11:cc: 7b:e5:aa:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcScAOvlATkigLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NTBmOWQ3MGQtMjY4My00MjU3LWI0NzgtZGI3MDNkMjQ0ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfZzk7zok/wEkmApqWyqtyqsdVvEF57sQpCj EcWM2Yr/dpJoCizPuRhq16oKgKF3IyZXhuMooZ9Jmqx2J+85EOOVCi589//YKHfL 9BUMJ8V0Gfid/5BOQ+awFx1YXnc4RhaNZ7nq6dwYrsPVFWk/wINX8uen8eNy4pX7 lmuvd9rYC4nJekXQfy1tAK/Sdg8XcwM6WfuGLxE/FqQ4R7yjl+1syJ1LPP6Qt8SI adkIGBlkBeQlRlojfJ0GYs5e0v72jTPejCPm6KvEnvituNtgXclGzSdkTrNkSNUu 9diQX8Yelny4/9I/oHgsmzB1QCWIkVt7wK+BnzBFAIkct7HGgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz1SHB3sijnlZgTY0d/0UvVS2LbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYzNTIwZWQtZTA0My0z MDAxLWI2OTUtZDRmNDAxYTQyZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3cUk3vKSMNp+luzP6fNcFGF+V9FKgMvdM2xN2DCHK5/nyVSuAheU9h E6YXQuXGS2DVtHpGE2doTeMTcfbyfOTU8Yu10mQZLjbp+t/cAXYzVMlVfY4Egtow afYrLcbI1x+1eY9i0ulPxmh5wMlK8vVp9TdZ+tsfoNH2hCy6fuhOPTWFVfgHV8dw T/myaNCWtN3i19Ff93oVvC331vrbKJKTLfYjh8rEqz2t7e5HPId22KAy68txp4Cw KmK8PltK7o9BN9rESO6GOsUupTvH3snlXAbOeI82tSRBx9SGSr/UCsMVv54C9/Al +juGDo76XJ5R5ySjg5NJS6QRzHvlqp0= -----END CERTIFICATE-----Generated at Sun Jan 11 09:44:53 2026 by rpki-client