This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa File: b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa (raw, json) Hash identifier: 9Fl08NIIa40ZL3WVyjEA+ftDrC/ZyV9XEiClXqhFWRU= Subject key identifier: CC:63:85:9B:EB:CE:94:ED:AE:0F:10:EF:9E:63:95:A6:9F:1D:45:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8226F6723036FB8677F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.25.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:22:6f:67:23:03:6f:b8:67:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=2b4fa25c-1af3-4714-a565-0469fd713e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:49:cf:63:d9:d6:c2:2b:3f:93:c1:10:23: 1d:1c:a3:4a:68:a8:6a:78:95:0d:7e:18:22:b4:65: 27:e5:db:3b:65:a1:f7:24:2c:d2:ac:1e:12:f4:cf: db:de:f7:7d:d2:1d:67:9b:bd:88:b6:51:8a:d9:7e: 65:42:8e:f0:1b:0d:04:fc:2f:d8:55:bd:7e:5e:d4: 72:2e:f8:d8:8b:55:b8:fa:ab:f2:47:cb:32:62:78: b4:fc:59:bd:3f:3b:a9:9e:d8:d8:e5:0c:c6:8e:1f: 8f:54:3b:11:21:68:7a:2f:6b:d6:0b:72:7d:1c:38: 4e:bc:a3:d5:da:77:63:5b:4f:ff:49:df:73:90:2d: b0:2e:b1:c7:25:92:8f:ec:23:39:f6:a2:13:37:80: 18:61:c1:08:4d:94:35:79:5c:bc:ab:39:b0:51:63: 26:48:e5:aa:e9:be:c1:a2:0e:21:bc:37:82:64:89: 4e:13:58:89:db:21:0c:06:8f:ab:c8:4d:a7:db:02: ad:81:e2:17:de:75:c3:64:5e:82:c2:9f:7f:02:25: 31:50:63:c2:76:5a:e1:4a:e2:ca:6f:f2:71:03:6b: a9:61:05:b3:42:fc:cf:d4:fa:5c:42:0c:d7:19:f7: 6e:bc:68:2e:a6:60:05:e7:49:b3:d6:f5:aa:bd:0a: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:63:85:9B:EB:CE:94:ED:AE:0F:10:EF:9E:63:95:A6:9F:1D:45:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ee:86:73:8b:1c:71:64:36:49:1e:b3:41:3e:1f:8e:d9:ba: ac:56:62:0c:74:c7:8d:ed:e9:cb:ca:70:05:a1:ce:f5:e3:c2: bf:86:b9:aa:4f:ab:8d:cd:b7:4b:d7:15:58:a0:62:3a:0a:a7: 7d:3e:db:c5:37:f6:ea:43:65:c4:f0:09:58:97:e6:cf:35:b5: ef:dd:df:6e:da:c6:59:7a:ea:59:1c:9a:f9:48:62:e7:c5:ce: 91:12:20:0c:49:a0:f2:4e:c9:64:43:c7:c5:60:33:65:b8:b1: 36:06:8d:e3:87:12:87:e1:14:45:b7:60:04:2d:96:d2:9f:4f: 6e:3c:16:4e:af:3e:8e:40:21:76:d7:26:cc:22:ed:b9:1a:55: fd:14:e1:e1:c6:fb:aa:5f:1f:36:ca:50:1a:7e:fa:99:73:52: 32:42:74:91:9a:81:c0:46:36:b5:e8:66:2d:86:43:28:af:83: e2:79:64:fd:aa:29:51:f2:24:04:d9:c1:9e:01:ce:86:b3:df: 8d:9b:a1:92:d1:db:c5:c9:2f:47:a0:6a:ce:1c:ed:fb:63:b2: 4c:75:06:cf:8d:e7:8d:dc:c0:28:be:d8:cb:6b:82:7c:f4:e5: 6e:d9:92:8d:65:e2:08:56:8b:37:2a:ce:23:76:eb:cf:73:16: 18:dc:0c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCJvZyMDb7hnf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MmI0ZmEyNWMtMWFmMy00NzE0LWE1NjUtMDQ2OWZkNzEzZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB9Jz2PZ1sIrP5PBECMdHKNKaKhqeJUNfhgi tGUn5ds7ZaH3JCzSrB4S9M/b3vd90h1nm72ItlGK2X5lQo7wGw0E/C/YVb1+XtRy LvjYi1W4+qvyR8syYni0/Fm9PzupntjY5QzGjh+PVDsRIWh6L2vWC3J9HDhOvKPV 2ndjW0//Sd9zkC2wLrHHJZKP7CM59qITN4AYYcEITZQ1eVy8qzmwUWMmSOWq6b7B og4hvDeCZIlOE1iJ2yEMBo+ryE2n2wKtgeIX3nXDZF6Cwp9/AiUxUGPCdlrhSuLK b/JxA2upYQWzQvzP1PpcQgzXGfduvGgupmAF50mz1vWqvQoKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxjhZvrzpTtrg8Q755jlaafHUU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVjYmE2YjAtNDA3My0z ZGFhLWIyOTctZWFjYThkMDk1ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/uhnOLHHFkNkkes0E+H47ZuqxWYgx0x43t6cvKcAWhzvXjwr+GuapP q43Nt0vXFVigYjoKp30+28U39upDZcTwCViX5s81te/d327axll66lkcmvlIYufF zpESIAxJoPJOyWRDx8VgM2W4sTYGjeOHEofhFEW3YAQtltKfT248Fk6vPo5AIXbX Jswi7bkaVf0U4eHG+6pfHzbKUBp++plzUjJCdJGagcBGNrXoZi2GQyivg+J5ZP2q KVHyJATZwZ4Bzoaz342boZLR28XJL0egas4c7ftjskx1Bs+N543cwCi+2Mtrgnz0 5W7Zko1l4ghWizcqziN2689zFhjcDHE= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:34 2026 by rpki-client