This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa File: b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa (raw, json) Hash identifier: 4v6r53WPcNUpVLsvJt7pkYVVFdjlPVWM1DOCxxI5YXg= Subject key identifier: 0F:50:E5:E0:AB:74:59:8D:E7:E6:CC:60:A2:E4:03:DA:90:F6:D0:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C48711BA4E7A834DFAEFEF1E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.23.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:1b:a4:e7:a8:34:df:ae:fe:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=dd30ff15-421f-47a3-ad46-5df9bf94cb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:2d:b6:47:3b:1e:54:17:26:07:6a:e0:3c: 53:2c:95:f7:0d:60:d1:42:05:28:60:27:e6:eb:a5: a7:0c:6a:53:4e:3b:78:26:34:de:11:78:2a:7c:31: 0c:c6:ae:f1:22:ed:17:ff:dd:af:70:2b:7c:6c:0d: 56:55:db:36:d2:30:5e:cf:45:94:e7:7a:08:95:f5: b6:3e:2e:33:de:f4:32:4f:9d:d1:3d:47:84:08:ba: d3:da:26:d5:82:bd:1f:a6:dd:17:bc:6a:29:b2:07: fa:97:6f:ba:08:df:24:49:39:80:7d:2c:c4:8c:b3: 00:63:8f:24:aa:cd:fe:34:9d:3d:4d:a0:80:8a:4c: 16:7e:9e:66:91:46:b8:03:8c:77:c0:c2:e7:e7:da: 41:63:7c:02:d5:e6:75:23:35:0f:f0:88:02:5b:19: 81:2d:a7:60:39:9e:62:b3:41:7c:1d:8f:ca:5a:bb: 2a:e3:29:d8:02:c0:a7:22:b6:79:19:9a:41:67:ae: 2a:52:bc:28:04:4e:98:bc:8a:37:79:39:5c:93:b4: e1:84:41:28:6c:46:8f:8a:12:d1:f7:61:dc:8d:98: 1c:75:40:5a:7d:73:db:15:4b:6a:a2:59:1b:e5:25: de:23:9e:34:54:83:1f:43:4b:b3:64:04:d5:ce:77: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:50:E5:E0:AB:74:59:8D:E7:E6:CC:60:A2:E4:03:DA:90:F6:D0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:59:28:63:d8:2e:ea:66:c5:d9:1d:20:2a:bf:60:7b:b9:a6: 25:be:dc:37:4b:cd:b7:5f:39:f8:b3:09:20:98:82:79:07:97: 8b:5f:bd:1b:59:f2:6c:57:88:d4:12:b5:04:82:cc:9f:da:68: c0:a4:8b:9c:fa:6d:27:c5:5d:7a:21:35:53:f3:c5:8e:42:d9: 8b:38:e5:7e:e3:d8:19:bd:3a:ef:b7:51:67:c0:de:18:02:84: 78:f2:87:7f:5d:57:e2:36:2d:65:22:22:a5:56:6c:03:3a:bc: 73:d9:e9:80:9f:ba:a4:2a:76:56:ec:69:5e:64:2f:01:05:e2: 15:3d:fe:60:71:a6:e4:2a:11:ff:34:df:d1:d3:e4:ea:71:77: 2a:7f:95:3d:a8:63:60:c4:5b:ae:d4:f6:4e:db:0a:58:38:94: 05:8c:02:41:0b:c8:5a:11:89:64:73:d7:cd:fd:96:dc:79:80: 62:50:79:85:8d:21:f5:b5:96:ad:45:bc:33:6f:de:bd:a8:ac: 55:17:70:8d:79:5f:1d:ab:6f:18:6a:b1:8d:8d:15:58:01:a2: 67:34:7f:a3:51:71:c9:f2:7d:9d:7f:d7:56:b2:46:7d:da:af: ac:88:d8:ca:0f:e3:96:f3:11:2c:df:7b:ff:65:55:6a:d3:74: 08:e3:7e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcRuk56g0367+8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZGQzMGZmMTUtNDIxZi00N2EzLWFkNDYtNWRmOWJmOTRjYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuottkc7HlQXJgdq4DxTLJX3DWDRQgUoYCfm 66WnDGpTTjt4JjTeEXgqfDEMxq7xIu0X/92vcCt8bA1WVds20jBez0WU53oIlfW2 Pi4z3vQyT53RPUeECLrT2ibVgr0fpt0XvGopsgf6l2+6CN8kSTmAfSzEjLMAY48k qs3+NJ09TaCAikwWfp5mkUa4A4x3wMLn59pBY3wC1eZ1IzUP8IgCWxmBLadgOZ5i s0F8HY/KWrsq4ynYAsCnIrZ5GZpBZ64qUrwoBE6YvIo3eTlck7ThhEEobEaPihLR 92HcjZgcdUBafXPbFUtqolkb5SXeI540VIMfQ0uzZATVzne3tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9Q5eCrdFmN5+bMYKLkA9qQ9tAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjIzZWNkY2MtNjAzOC0z N2E1LWJmMWYtMmIwYjgyMjg4ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZZKGPYLupmxdkdICq/YHu5piW+3DdLzbdfOfizCSCYgnkHl4tfvRtZ 8mxXiNQStQSCzJ/aaMCki5z6bSfFXXohNVPzxY5C2Ys45X7j2Bm9Ou+3UWfA3hgC hHjyh39dV+I2LWUiIqVWbAM6vHPZ6YCfuqQqdlbsaV5kLwEF4hU9/mBxpuQqEf80 39HT5Opxdyp/lT2oY2DEW67U9k7bClg4lAWMAkELyFoRiWRz1839ltx5gGJQeYWN IfW1lq1FvDNv3r2orFUXcI15Xx2rbxhqsY2NFVgBomc0f6NRccnyfZ1/11ayRn3a r6yI2MoP45bzESzfe/9lVWrTdAjjfm4= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:21 2026 by rpki-client