This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b04e1438-79ee-3992-ab6d-8b045db654a8.roa File: b04e1438-79ee-3992-ab6d-8b045db654a8.roa (raw, json) Hash identifier: fDG5np8ZFpgn5sr9hrs1Cln5XCLyorqtZ20cnOtyld4= Subject key identifier: 31:C9:C0:D5:A3:24:75:A9:85:F7:F6:74:FA:2E:C7:6A:7C:4B:9B:50 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BC8319C4EFA9C2D200E708200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b04e1438-79ee-3992-ab6d-8b045db654a8.roa Signing time: Fri 07 Nov 2025 15:29:20 +0000 ROA not before: Fri 07 Nov 2025 15:29:20 +0000 ROA not after: Thu 05 Feb 2026 15:29:20 +0000 asID: 19905 IP address blocks: 173.22.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:31:9c:4e:fa:9c:2d:20:0e:70:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 7 15:29:20 2025 GMT Not After : Feb 5 15:29:20 2026 GMT Subject: CN=5078034b-5721-44ad-b703-af73f6f9031e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:75:fb:c6:7b:a1:90:92:95:0f:0b:ce:61: 65:fd:75:4d:ce:c6:2b:c7:3d:ab:ef:d5:29:fd:5c: ca:39:55:7f:7e:9d:e9:a9:ec:03:6d:ab:16:0f:49: 55:f0:6f:b5:59:03:9e:c5:87:ee:3f:27:fa:ba:a2: 5a:9a:f7:40:84:c1:d3:57:eb:41:44:87:38:fa:8e: f4:e0:f0:6c:b8:7d:1b:95:17:19:32:d9:05:70:fb: 54:14:ea:18:27:77:59:29:6b:64:c4:5e:7e:e6:bb: 7f:bb:8a:41:19:13:b3:e1:48:3e:86:28:77:90:d7: 60:68:8a:f9:d5:98:ec:17:9c:ef:44:13:a1:4c:78: f1:7d:1a:be:f4:c7:a3:e7:4b:28:f0:a8:7d:34:f2: 4c:4a:54:07:af:10:4e:62:27:7b:c6:37:43:f6:54: 85:2b:90:f4:ee:ed:c8:c0:80:64:66:c9:88:dc:3b: d1:5d:a7:6d:20:f1:a8:8b:12:23:4a:0e:97:13:0f: 7e:71:58:21:89:02:13:54:c2:4c:56:c2:34:44:b2: 9f:41:9f:40:af:0d:39:c4:5a:d6:c2:10:0b:0a:3c: 9c:43:00:aa:47:96:dd:ea:fc:4c:7c:b0:f2:b4:59: 16:39:e8:3f:63:d1:6c:73:46:2d:48:54:47:65:46: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C9:C0:D5:A3:24:75:A9:85:F7:F6:74:FA:2E:C7:6A:7C:4B:9B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b04e1438-79ee-3992-ab6d-8b045db654a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ff:e3:c7:56:e6:d9:3e:93:36:91:61:c2:d7:a7:f4:fb:eb: 21:81:9b:57:57:15:3a:65:18:83:a2:a8:a8:e9:54:60:92:24: 69:f8:33:93:43:b2:eb:ac:a9:65:de:be:a2:d4:6e:6d:86:7b: 52:e4:59:b5:55:37:fe:64:03:45:18:54:b9:3b:0f:5c:a5:13: 07:59:b3:a2:49:5d:93:57:e6:fd:f4:9f:24:8e:2e:26:3d:b4: b3:3f:71:9c:03:29:81:67:de:c5:40:6c:eb:c0:5f:a7:c1:6d: 9e:9b:a7:4f:3b:87:60:b7:5b:39:89:83:33:de:8e:df:9d:8d: aa:e5:ea:8d:4b:a3:e7:3d:22:ba:78:c8:ac:ac:8a:73:9a:5b: 82:88:02:72:9c:d0:4b:02:91:d7:0a:09:91:79:6b:97:eb:86: 0f:39:b7:a7:c3:b7:af:9e:1b:10:f6:65:30:d2:89:bf:2c:de: 2d:57:c4:b7:1a:a1:5d:4d:9f:d3:26:d4:d1:bd:8d:f4:ec:33: 40:48:c3:40:31:7a:05:c9:45:87:cb:08:8b:00:3d:b7:56:26: 74:a8:60:6f:40:be:3e:0e:1a:30:41:09:c1:a0:95:5f:e3:70: 74:3d:03:43:a9:61:16:b2:12:12:96:09:6f:61:02:49:03:0c: eb:4f:03:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvIMZxO+pwtIA5wggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwNzE1MjkyMFoXDTI2MDIwNTE1MjkyMFowLzEtMCsGA1UEAxMk NTA3ODAzNGItNTcyMS00NGFkLWI3MDMtYWY3M2Y2ZjkwMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg91+8Z7oZCSlQ8LzmFl/XVNzsYrxz2r79Up /VzKOVV/fp3pqewDbasWD0lV8G+1WQOexYfuPyf6uqJamvdAhMHTV+tBRIc4+o70 4PBsuH0blRcZMtkFcPtUFOoYJ3dZKWtkxF5+5rt/u4pBGROz4Ug+hih3kNdgaIr5 1ZjsF5zvRBOhTHjxfRq+9Mej50so8Kh9NPJMSlQHrxBOYid7xjdD9lSFK5D07u3I wIBkZsmI3DvRXadtIPGoixIjSg6XEw9+cVghiQITVMJMVsI0RLKfQZ9Arw05xFrW whALCjycQwCqR5bd6vxMfLDytFkWOeg/Y9Fsc0YtSFRHZUZhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHJwNWjJHWphff2dPoux2p8S5tQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjA0ZTE0MzgtNzllZS0z OTkyLWFiNmQtOGIwNDVkYjY1NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz/48dW5tk+kzaRYcLXp/T76yGBm1dXFTplGIOiqKjpVGCSJGn4M5ND suusqWXevqLUbm2Ge1LkWbVVN/5kA0UYVLk7D1ylEwdZs6JJXZNX5v30nySOLiY9 tLM/cZwDKYFn3sVAbOvAX6fBbZ6bp087h2C3WzmJgzPejt+djarl6o1Lo+c9Irp4 yKysinOaW4KIAnKc0EsCkdcKCZF5a5frhg85t6fDt6+eGxD2ZTDSib8s3i1XxLca oV1Nn9Mm1NG9jfTsM0BIw0AxegXJRYfLCIsAPbdWJnSoYG9Avj4OGjBBCcGglV/j cHQ9A0OpYRayEhKWCW9hAkkDDOtPA9k= -----END CERTIFICATE-----Generated at Tue Nov 25 10:28:10 2025 by rpki-client