This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa File: af609f70-5354-323b-9ace-22f38e8708a1.roa (raw, json) Hash identifier: RZg2WRp/aWWL8FO/51+3Z5WWfEwSpoySqcIjqJ5AZUE= Subject key identifier: 2F:0B:AD:EB:AE:ED:64:32:F9:B2:A8:C1:35:FF:7C:41:BF:FF:21:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C49D65F4514F1DA55A1210900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa Signing time: Wed 24 Dec 2025 02:00:31 +0000 ROA not before: Wed 24 Dec 2025 02:00:31 +0000 ROA not after: Tue 24 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.27.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:d6:5f:45:14:f1:da:55:a1:21:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Mar 24 01:00:31 2026 GMT Subject: CN=ef4a998b-3efb-4a71-b652-b6eb956519bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:aa:d1:cc:fd:b8:69:b8:23:92:c4:57:06: 79:0c:aa:c9:48:a4:5c:19:7d:8b:b5:29:5e:31:cb: 48:e9:2c:c3:fa:9d:39:18:51:f5:09:43:0e:d4:15: 2e:15:57:c8:d5:ef:c7:e9:ed:cf:99:50:7a:07:3a: 65:26:ba:af:23:10:6f:14:78:50:1f:a5:d5:55:bf: da:3f:d4:3c:9e:e9:2a:a1:13:2c:44:7b:35:c5:06: 83:c2:27:73:b5:8f:30:ac:8d:06:cd:91:45:b0:9c: b9:b2:62:57:88:f3:8d:61:34:aa:80:3a:28:b0:3f: b1:98:0e:24:a9:1c:c7:82:ef:79:9c:d2:94:08:f5: d1:ab:f6:20:94:07:bc:a1:7d:f9:8f:a3:92:f1:1a: c8:ba:1f:12:9b:83:66:31:af:7a:c8:69:f4:48:6d: ad:3d:f0:6d:7c:49:ad:73:d1:7e:cf:e9:2e:8d:c8: 77:63:fd:66:6a:c7:8c:58:97:6e:82:76:19:6e:fe: b2:18:6b:25:88:f1:81:8c:10:97:24:1a:1a:cf:70: fd:ab:cc:70:1e:84:c2:ce:dd:85:d7:67:5c:78:b2: f5:d7:6d:bd:00:87:15:7d:84:7f:02:f4:1c:a7:79: c1:58:f3:13:fb:d7:d4:a1:a9:ca:a2:fc:e0:47:e6: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:AD:EB:AE:ED:64:32:F9:B2:A8:C1:35:FF:7C:41:BF:FF:21:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:37:8b:72:0b:8d:09:75:64:8f:81:dd:46:a3:9f:6c:7f:f3: 6e:88:73:08:54:67:5d:c7:a5:a5:2c:fb:2b:82:64:c1:2b:11: b0:ad:d7:90:50:a1:5c:55:89:9b:6b:8b:f2:2f:e7:2b:59:27: 35:b1:5b:ef:8d:7b:77:6c:3f:5c:5f:40:7f:13:c2:0c:81:21: 3f:9c:5f:0b:e4:b4:5f:89:07:fa:33:c3:f1:23:5f:27:b5:dd: c5:74:46:ea:66:9d:35:39:f5:c4:03:2b:f6:a9:fb:d2:52:aa: 15:de:53:b0:2a:17:2d:f1:1a:89:b8:4f:78:17:3b:bd:d8:8e: 70:3d:0e:f1:09:a1:f0:00:89:5b:93:73:57:90:d2:c4:2d:06: 4c:27:03:72:10:96:f5:56:70:d9:4a:d9:42:fe:e1:d9:79:55: 89:36:44:44:97:05:5d:f0:17:64:96:4a:00:3b:f1:87:c1:dc: 25:c4:e8:eb:04:38:55:aa:ba:83:a9:33:f7:67:6d:cc:8c:c2: 6c:f8:e5:ec:90:41:9e:15:c5:f3:4d:a8:eb:14:e7:19:ad:30: 1a:35:dc:41:80:07:ec:59:36:16:55:17:48:94:71:aa:0c:83: 33:f4:10:3d:c1:d9:66:e4:b1:5a:21:23:82:ba:5f:b2:8f:20: bb:78:a8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExJ1l9FFPHaVaEhCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyNDAyMDAzMVoXDTI2MDMyNDAxMDAzMVowLzEtMCsGA1UEAxMk ZWY0YTk5OGItM2VmYi00YTcxLWI2NTItYjZlYjk1NjUxOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJmq0cz9uGm4I5LEVwZ5DKrJSKRcGX2LtSle MctI6SzD+p05GFH1CUMO1BUuFVfI1e/H6e3PmVB6BzplJrqvIxBvFHhQH6XVVb/a P9Q8nukqoRMsRHs1xQaDwidztY8wrI0GzZFFsJy5smJXiPONYTSqgDoosD+xmA4k qRzHgu95nNKUCPXRq/YglAe8oX35j6OS8RrIuh8Sm4NmMa96yGn0SG2tPfBtfEmt c9F+z+kujch3Y/1maseMWJdugnYZbv6yGGsliPGBjBCXJBoaz3D9q8xwHoTCzt2F 12dceLL11229AIcVfYR/AvQcp3nBWPMT+9fUoanKovzgR+ZxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Lreuu7WQy+bKowTX/fEG//yEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWY2MDlmNzAtNTM1NC0z MjNiLTlhY2UtMjJmMzhlODcwOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg3i3ILjQl1ZI+B3Uajn2x/826IcwhUZ13HpaUs+yuCZMErEbCt15BQ oVxViZtri/Iv5ytZJzWxW++Ne3dsP1xfQH8TwgyBIT+cXwvktF+JB/ozw/EjXye1 3cV0RupmnTU59cQDK/ap+9JSqhXeU7AqFy3xGom4T3gXO73YjnA9DvEJofAAiVuT c1eQ0sQtBkwnA3IQlvVWcNlK2UL+4dl5VYk2RESXBV3wF2SWSgA78YfB3CXE6OsE OFWquoOpM/dnbcyMwmz45eyQQZ4VxfNNqOsU5xmtMBo13EGAB+xZNhZVF0iUcaoM gzP0ED3B2WbksVohI4K6X7KPILt4qMw= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:02 2026 by rpki-client