This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa File: bfe8432c-0a39-369f-abd1-923404f53a2f.roa (raw, json) Hash identifier: GHAeG0cORstUPVXqAj3bKGwwWrLRgcj0ZVM4+sRqzOc= Subject key identifier: 97:15:2E:93:CB:3B:D6:B2:DE:96:0A:F4:84:05:94:40:92:CC:D0:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A81F5E6ED01547B44D4100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.28.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:1f:5e:6e:d0:15:47:b4:4d:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=8beb9c95-35ed-4c70-89b7-bbc16468ef08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:31:4a:e8:4f:ac:e0:c2:82:c3:f9:f9:dd: 76:d4:6c:6f:ca:ef:bf:54:b2:b4:e1:47:b4:cb:45: c0:6f:b2:80:bd:d7:fe:0f:ea:ed:19:6e:f3:87:72: 22:25:90:9c:a3:00:33:bd:94:39:d8:41:4e:9a:c3: 63:c5:63:e5:1a:41:dc:e0:20:59:5e:3a:96:a9:e6: 97:0e:9a:04:b2:3b:e2:75:a9:78:3b:5e:95:22:b8: e1:7a:3f:4e:bf:86:85:bb:b8:34:b2:cf:31:66:b4: 7a:de:fb:7e:97:b4:27:51:68:f6:b2:5d:4d:37:18: c1:a5:80:2e:ff:48:e8:37:26:64:47:d9:78:3c:f9: 10:cc:1a:7f:81:b1:ec:78:be:36:7d:8e:32:1e:e4: d9:24:c7:e7:13:7e:da:76:b1:36:1e:b1:21:45:51: 02:90:2c:6f:85:f6:5f:20:2e:21:37:42:19:04:3f: a9:51:96:7c:39:fd:29:eb:f4:f9:be:c9:0f:48:6d: 8e:9f:e5:10:e2:bb:0d:43:db:c8:3b:33:cd:5a:6e: 4d:53:42:b1:4f:b5:d7:31:13:57:5c:d9:25:8f:03: 2a:8d:da:84:17:66:34:6b:66:9d:71:8d:4b:4e:b8: 70:1b:5f:db:45:c7:81:80:f1:0d:90:fa:aa:41:03: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:15:2E:93:CB:3B:D6:B2:DE:96:0A:F4:84:05:94:40:92:CC:D0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:28:c8:03:8c:d7:86:1d:85:cb:37:40:46:ab:28:40:2e:58: cf:b9:8b:23:46:39:ae:1b:2e:be:00:b3:ff:29:7e:ca:2f:ca: 7c:ff:5e:a3:6a:46:cb:eb:aa:68:32:80:08:b3:07:da:57:44: 32:b6:70:a2:96:d5:b6:31:57:cd:87:70:90:bb:e1:9a:41:00: ac:af:79:f5:79:66:95:8a:dc:73:f6:fb:33:43:63:7c:8b:4a: 62:9d:71:d2:40:f2:fb:33:a5:c4:8e:d9:c1:fb:77:ae:f5:42: dc:18:dc:05:36:9d:b9:47:1a:90:75:e3:f8:2e:df:c2:fa:32: 7d:8d:ef:54:1b:40:56:c7:88:3b:a2:2a:92:03:dc:ea:6d:68: ef:52:3c:16:8d:3e:07:42:ca:e2:d5:77:49:52:0b:71:df:c5: 34:c1:3d:9f:a4:bf:e8:d5:b2:0a:2b:b6:8d:da:15:70:32:0f: 28:4e:e1:67:37:03:3a:dc:39:a6:e9:43:8a:21:d6:4c:5a:5e: a0:ed:6e:16:7d:c4:aa:d8:bc:a8:80:7c:84:a2:50:ac:04:0e: 42:0e:f8:bd:10:4b:4e:89:5d:64:f5:a4:31:c3:09:c1:56:06: 8a:ee:9d:cf:c7:e1:ee:e0:eb:85:fe:bc:e5:69:74:dc:e2:db: f4:77:f4:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqB9ebtAVR7RNQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OGJlYjljOTUtMzVlZC00YzcwLTg5YjctYmJjMTY0NjhlZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH0xSuhPrODCgsP5+d121Gxvyu+/VLK04Ue0 y0XAb7KAvdf+D+rtGW7zh3IiJZCcowAzvZQ52EFOmsNjxWPlGkHc4CBZXjqWqeaX DpoEsjvidal4O16VIrjhej9Ov4aFu7g0ss8xZrR63vt+l7QnUWj2sl1NNxjBpYAu /0joNyZkR9l4PPkQzBp/gbHseL42fY4yHuTZJMfnE37adrE2HrEhRVECkCxvhfZf IC4hN0IZBD+pUZZ8Of0p6/T5vskPSG2On+UQ4rsNQ9vIOzPNWm5NU0KxT7XXMRNX XNkljwMqjdqEF2Y0a2adcY1LTrhwG1/bRceBgPENkPqqQQN1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcVLpPLO9ay3pYK9IQFlECSzNDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlODQzMmMtMGEzOS0z NjlmLWFiZDEtOTIzNDA0ZjUzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEoyAOM14Ydhcs3QEarKEAuWM+5iyNGOa4bLr4As/8pfsovynz/XqNq RsvrqmgygAizB9pXRDK2cKKW1bYxV82HcJC74ZpBAKyvefV5ZpWK3HP2+zNDY3yL SmKdcdJA8vszpcSO2cH7d671QtwY3AU2nblHGpB14/gu38L6Mn2N71QbQFbHiDui KpID3OptaO9SPBaNPgdCyuLVd0lSC3HfxTTBPZ+kv+jVsgorto3aFXAyDyhO4Wc3 AzrcOabpQ4oh1kxaXqDtbhZ9xKrYvKiAfISiUKwEDkIO+L0QS06JXWT1pDHDCcFW Borunc/H4e7g64X+vOVpdNzi2/R39N4= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:40 2026 by rpki-client