This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c78f1dd3-965a-3bfc-9dc3-7fc3792d261f.roa File: c78f1dd3-965a-3bfc-9dc3-7fc3792d261f.roa (raw, json) Hash identifier: qMNv94r7Yn40qNaf5ybmzoyHZIyiSqbBiUiX9yKtDeM= Subject key identifier: 2C:C2:83:4C:D6:FA:6D:E5:77:4B:74:4D:C3:D4:06:58:44:C3:13:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BC96B1238B5BE4FF1BD54DB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c78f1dd3-965a-3bfc-9dc3-7fc3792d261f.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 173.28.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6b:12:38:b5:be:4f:f1:bd:54:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=876b1273-8a52-4f46-b356-6a019e15d239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:af:bc:1a:f1:65:06:cc:d7:2e:5f:56:88: 2e:a3:66:73:3c:ee:05:d2:91:64:61:bb:ec:c2:d4: a8:3f:8a:90:a2:b5:05:c9:06:4f:85:97:6d:f0:54: d2:12:18:22:cb:58:05:76:e8:d4:5c:06:49:6b:42: 87:0b:71:b9:2a:b4:87:65:a0:8b:7f:28:ec:c9:60: cc:be:12:21:61:c5:d7:41:8a:2a:66:23:43:b2:4f: 6e:da:8b:71:ec:23:c2:40:73:05:53:fb:12:12:ec: 80:a0:6e:e4:05:3a:5e:ae:2b:ea:b8:63:9a:f5:2f: 52:12:07:ea:e1:7c:18:35:50:ca:64:2b:4c:43:1e: 78:c0:bd:e1:aa:46:63:97:f1:be:62:0f:74:45:df: 97:46:0d:e9:ee:96:82:08:88:1d:2d:62:f2:b0:3e: 82:56:b9:10:d2:23:30:f1:af:0e:45:ac:07:f0:85: f2:4a:bb:e5:af:58:04:dc:de:9d:8a:ce:d8:26:08: 9a:e7:10:35:87:3d:76:52:6c:2e:92:bc:02:1f:61: d6:b9:78:09:0f:08:c7:15:d5:6a:2c:be:d3:26:cb: ff:00:98:39:38:3d:ba:43:26:fe:93:b3:fa:97:fb: 18:05:ff:42:0d:06:52:13:71:db:8b:49:89:34:df: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:83:4C:D6:FA:6D:E5:77:4B:74:4D:C3:D4:06:58:44:C3:13:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c78f1dd3-965a-3bfc-9dc3-7fc3792d261f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1b:22:0e:dc:9d:b3:a7:f5:e1:5b:ef:4e:d7:25:3b:d2:2e: 43:5f:d0:f1:39:a9:db:da:95:d0:e4:20:d0:fd:c5:3d:dd:81: 95:5b:53:28:93:e2:d5:19:4d:60:f8:a6:fc:b9:8a:b3:c1:ad: 08:ff:92:08:c2:4b:f8:26:8f:08:e2:f1:86:01:d9:17:87:e3: 52:2f:f9:88:4c:6e:bc:6b:39:0a:7e:7a:46:eb:a4:e4:ce:29: 2d:70:3d:d5:1c:b1:36:78:9a:69:06:c4:38:02:cd:18:6a:4f: 87:1d:ee:74:8f:41:c0:d2:66:f9:8b:78:cf:70:c5:86:9f:61: 22:09:40:b5:f4:a7:7c:e8:b1:63:68:19:b7:a3:a0:85:a5:3a: b3:cc:24:a5:52:90:9a:17:f3:20:43:62:95:61:85:30:79:bb: b3:61:89:21:da:6c:f2:cd:3e:20:f7:48:dc:08:e3:e3:1d:09: b2:69:ca:c8:b3:1d:fe:41:3f:54:fe:ae:f7:a1:30:f9:37:8b: 75:25:55:3a:b2:47:75:ac:e4:8b:be:c2:42:df:35:96:85:64: 60:03:70:3f:70:79:be:6a:fb:70:c3:92:df:d2:a8:82:63:87: 0d:ff:3f:ee:48:0b:b5:72:8f:ab:c1:46:cd:7c:c2:9b:0f:97: d9:6a:49:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJaxI4tb5P8b1U24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk ODc2YjEyNzMtOGE1Mi00ZjQ2LWIzNTYtNmEwMTllMTVkMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpuvvBrxZQbM1y5fVoguo2ZzPO4F0pFkYbvs wtSoP4qQorUFyQZPhZdt8FTSEhgiy1gFdujUXAZJa0KHC3G5KrSHZaCLfyjsyWDM vhIhYcXXQYoqZiNDsk9u2otx7CPCQHMFU/sSEuyAoG7kBTperivquGOa9S9SEgfq 4XwYNVDKZCtMQx54wL3hqkZjl/G+Yg90Rd+XRg3p7paCCIgdLWLysD6CVrkQ0iMw 8a8ORawH8IXySrvlr1gE3N6dis7YJgia5xA1hz12UmwukrwCH2HWuXgJDwjHFdVq LL7TJsv/AJg5OD26Qyb+k7P6l/sYBf9CDQZSE3Hbi0mJNN+iOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzCg0zW+m3ld0t0TcPUBlhEwxOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzc4ZjFkZDMtOTY1YS0z YmZjLTlkYzMtN2ZjMzc5MmQyNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUbIg7cnbOn9eFb707XJTvSLkNf0PE5qdvaldDkIND9xT3dgZVbUyiT 4tUZTWD4pvy5irPBrQj/kgjCS/gmjwji8YYB2ReH41Iv+YhMbrxrOQp+ekbrpOTO KS1wPdUcsTZ4mmkGxDgCzRhqT4cd7nSPQcDSZvmLeM9wxYafYSIJQLX0p3zosWNo GbejoIWlOrPMJKVSkJoX8yBDYpVhhTB5u7NhiSHabPLNPiD3SNwI4+MdCbJpysiz Hf5BP1T+rvehMPk3i3UlVTqyR3Ws5Iu+wkLfNZaFZGADcD9web5q+3DDkt/SqIJj hw3/P+5IC7Vyj6vBRs18wpsPl9lqSR8= -----END CERTIFICATE-----Generated at Tue Nov 25 10:29:28 2025 by rpki-client