This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa File: bfef74fc-994c-3502-b355-4ccb17c00e10.roa (raw, json) Hash identifier: DLAeNSKpZ/HYi17fSY44NcXD1GRT6r8k1dYQRV83qCo= Subject key identifier: 26:36:10:8C:21:97:C3:7F:EE:B5:DB:C9:21:14:BF:44:11:0E:DF:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C3BE16F5F5F1DAE9E511B1D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 19905 IP address blocks: 173.31.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:6f:5f:5f:1d:ae:9e:51:1b:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=9a4c0737-4d99-4b32-8281-443653e98b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:9f:ee:80:6e:82:a1:f1:e9:e8:b0:8c:1e: ce:04:25:68:f6:85:2b:92:24:bf:76:ed:56:29:f1: 6e:d8:73:bd:8a:f6:4f:65:25:8a:be:1c:37:2c:d3: 85:08:fd:86:72:fb:3d:79:9d:3f:5e:43:2b:c4:74: 3b:a7:de:ee:58:c8:b1:b3:3d:e2:3e:da:25:10:b2: 64:02:6f:8a:84:ed:19:4a:7d:ef:fc:ff:a3:c2:d4: ef:f0:20:ea:cc:29:5a:05:62:6f:af:70:06:b2:ba: d1:38:ae:77:83:ce:b2:e2:13:1e:f1:5f:da:f4:ab: ae:2d:9b:7b:cd:9a:82:94:6a:5f:6d:e8:8b:91:f4: d2:ca:6f:e0:4a:84:a9:ae:cb:b8:54:f3:c0:39:0c: e9:de:d0:d7:41:fa:2c:e8:a7:37:76:27:27:46:90: 6b:e9:05:4e:b3:17:79:88:04:ac:ea:03:f3:ca:98: 64:51:49:2b:c3:d8:fc:da:34:f6:e5:25:3e:2b:02: c9:64:c4:4e:73:11:65:00:9a:5d:ca:bd:88:0c:18: 3b:fb:54:04:fb:cc:f7:cb:7b:2e:1d:e9:db:bb:0d: f9:d5:39:80:e6:dd:62:93:24:31:72:04:80:a0:c8: af:d8:00:20:fa:e6:60:cd:89:9f:96:00:2b:aa:06: 28:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:10:8C:21:97:C3:7F:EE:B5:DB:C9:21:14:BF:44:11:0E:DF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d8:e7:10:25:19:e4:2d:3b:f8:84:ba:3e:a3:d9:55:50:2d: 36:22:fb:94:af:f0:c5:7f:bf:5e:09:c5:c9:c7:5f:37:69:64: ad:ac:90:75:39:a7:d3:bd:d5:9e:51:ab:e6:28:0f:f1:42:c5: e6:30:f0:ec:91:62:83:35:c5:f4:04:ad:b4:e3:3d:f2:03:17: 83:cc:e9:28:63:e5:cb:ec:1a:d2:f4:a7:c0:b9:8e:22:f1:64: ac:b8:7a:98:75:3d:9d:5a:6c:82:a9:00:79:c3:b9:57:9c:e9: 2c:6a:87:0f:7d:fb:98:23:31:9a:0f:4f:2e:9f:83:5a:5c:fc: a3:d3:80:2d:4d:d6:3e:fa:df:42:b7:dc:a4:c1:45:a7:b4:d4: de:e3:9b:c1:e9:08:a9:b9:1f:25:17:65:23:f3:66:5c:51:bb: b6:fa:fa:bc:51:d8:d0:4e:06:4b:51:a5:90:1c:e8:09:a1:96: 9c:ea:50:d7:39:f4:49:19:25:cd:d2:3f:11:8c:86:c5:ea:7f: 1f:01:cc:09:21:a6:10:55:f6:a2:79:2d:51:cd:b2:70:dd:34: c7:25:ca:0b:ef:e7:45:d8:e5:48:6a:ae:d5:d7:78:9a:5d:8d: 9c:3f:19:64:f6:94:b6:85:6a:04:fe:ac:b0:78:9d:31:c4:98: 0b:8c:96:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74W9fXx2unlEbHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk OWE0YzA3MzctNGQ5OS00YjMyLTgyODEtNDQzNjUzZTk4YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBef7oBugqHx6eiwjB7OBCVo9oUrkiS/du1W KfFu2HO9ivZPZSWKvhw3LNOFCP2Gcvs9eZ0/XkMrxHQ7p97uWMixsz3iPtolELJk Am+KhO0ZSn3v/P+jwtTv8CDqzClaBWJvr3AGsrrROK53g86y4hMe8V/a9KuuLZt7 zZqClGpfbeiLkfTSym/gSoSprsu4VPPAOQzp3tDXQfos6Kc3dicnRpBr6QVOsxd5 iASs6gPzyphkUUkrw9j82jT25SU+KwLJZMROcxFlAJpdyr2IDBg7+1QE+8z3y3su Henbuw351TmA5t1ikyQxcgSAoMiv2AAg+uZgzYmflgArqgYoqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCY2EIwhl8N/7rXbySEUv0QRDt99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlZjc0ZmMtOTk0Yy0z NTAyLWIzNTUtNGNjYjE3YzAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7Y5xAlGeQtO/iEuj6j2VVQLTYi+5Sv8MV/v14JxcnHXzdpZK2skHU5 p9O91Z5Rq+YoD/FCxeYw8OyRYoM1xfQErbTjPfIDF4PM6Shj5cvsGtL0p8C5jiLx ZKy4eph1PZ1abIKpAHnDuVec6Sxqhw99+5gjMZoPTy6fg1pc/KPTgC1N1j7630K3 3KTBRae01N7jm8HpCKm5HyUXZSPzZlxRu7b6+rxR2NBOBktRpZAc6AmhlpzqUNc5 9EkZJc3SPxGMhsXqfx8BzAkhphBV9qJ5LVHNsnDdNMclygvv50XY5UhqrtXXeJpd jZw/GWT2lLaFagT+rLB4nTHEmAuMlpo= -----END CERTIFICATE-----Generated at Sun Jan 11 17:06:46 2026 by rpki-client