This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa File: cb25a333-11c3-3035-a32b-9d722b26f788.roa (raw, json) Hash identifier: h1e/AqfofeKUbMK8/koPOIa7ZSXlhK+Dcdoi15LFbGE= Subject key identifier: D4:B9:12:AE:AC:54:55:3E:24:2F:4A:48:C8:6E:20:34:18:BE:C1:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC16C2195A00C4F473B2C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:16:c2:19:5a:00:c4:f4:73:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=7bf74258-e8ca-4ca2-ba18-4b7c7e7fd02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:d2:ad:56:d6:22:06:d4:db:7b:58:62:d7: d3:60:b6:07:87:dc:fc:f1:05:13:e5:13:41:7c:f9: 29:ac:ff:52:41:27:4a:7e:cf:0e:0f:58:24:42:c4: e1:89:39:96:b4:97:a6:4e:71:cc:25:98:6c:50:99: b4:50:9d:64:0e:96:2b:f2:9d:f9:80:49:1d:87:d2: 9d:9d:25:e4:1b:de:8e:0e:a8:06:11:e6:6d:18:5e: 69:09:88:93:6c:d3:99:3c:79:f7:60:a6:11:f1:8b: 7d:a8:14:ee:b4:92:53:7c:61:cb:87:7f:3f:72:b8: bd:5e:ac:ee:57:4d:2b:30:b0:b7:8f:0a:57:73:17: a2:02:bc:c9:7b:38:18:d6:1f:dc:b0:97:d4:9f:64: 62:2e:76:a8:7c:ff:db:b8:1f:70:1a:b5:c3:97:e4: 91:21:84:e4:e6:f3:60:2e:55:5d:00:72:d7:0f:00: df:cd:fa:22:dd:a6:3f:67:16:4e:4a:cc:0c:d7:8e: 82:a3:8c:c5:65:52:ad:cd:ba:06:12:05:c6:d4:0d: ef:55:94:15:6a:fb:cf:f2:e1:60:d7:5e:ae:c9:2b: fd:8f:27:af:97:15:6e:b2:c1:f1:19:d4:09:b1:d9: 58:c5:65:f9:4e:0b:01:fc:8b:69:e4:e1:eb:04:16: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:12:AE:AC:54:55:3E:24:2F:4A:48:C8:6E:20:34:18:BE:C1:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:58:76:fe:04:0c:c9:d2:4a:0d:dc:f4:5e:46:22:22:58:b4: e7:dc:23:b0:12:81:90:a2:f6:8a:d4:6e:a2:b9:84:27:5c:a8: 36:7d:57:18:e9:72:55:e4:96:d1:6d:5c:2a:04:7b:11:c7:b1: 0e:a7:e2:93:7f:be:87:8e:7d:75:15:1a:2c:ec:ee:bd:96:1e: 39:31:d3:6d:8f:29:f8:52:90:30:14:cc:b2:c9:6c:b5:d5:94: f2:ed:02:ee:e2:5a:39:44:ef:eb:30:70:88:c2:69:45:8e:62: 77:24:8e:41:4e:1c:52:c1:f8:44:5c:cb:c7:6d:74:6f:d7:90: 4f:32:db:2b:eb:ba:08:3b:d9:34:6d:9e:e0:e9:e8:88:02:dc: 91:cd:ef:92:e6:ad:9f:d1:e6:32:fa:f5:73:c1:13:26:f3:a0: 02:93:a4:ab:44:1f:55:ff:f9:93:48:a8:e6:03:c1:3b:f3:23: 37:c3:84:87:81:5e:a8:89:c2:00:2c:85:53:51:ea:64:24:17: d8:d3:11:6c:01:b9:1a:7c:ab:79:02:50:47:94:eb:6a:ef:5a: e4:5e:75:a3:91:a8:e3:f8:eb:60:9a:67:7a:a2:9f:07:44:a4: ef:2e:f1:4e:35:cb:0e:8a:92:84:30:af:50:23:5f:a4:e1:83: 22:81:ed:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BbCGVoAxPRzssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk N2JmNzQyNTgtZThjYS00Y2EyLWJhMTgtNGI3YzdlN2ZkMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxTSrVbWIgbU23tYYtfTYLYHh9z88QUT5RNB fPkprP9SQSdKfs8OD1gkQsThiTmWtJemTnHMJZhsUJm0UJ1kDpYr8p35gEkdh9Kd nSXkG96ODqgGEeZtGF5pCYiTbNOZPHn3YKYR8Yt9qBTutJJTfGHLh38/cri9Xqzu V00rMLC3jwpXcxeiArzJezgY1h/csJfUn2RiLnaofP/buB9wGrXDl+SRIYTk5vNg LlVdAHLXDwDfzfoi3aY/ZxZOSswM146Co4zFZVKtzboGEgXG1A3vVZQVavvP8uFg 116uySv9jyevlxVussHxGdQJsdlYxWX5TgsB/Itp5OHrBBZ0HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS5Eq6sVFU+JC9KSMhuIDQYvsEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2IyNWEzMzMtMTFjMy0z MDM1LWEzMmItOWQ3MjJiMjZmNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJYdv4EDMnSSg3c9F5GIiJYtOfcI7ASgZCi9orUbqK5hCdcqDZ9Vxjp clXkltFtXCoEexHHsQ6n4pN/voeOfXUVGizs7r2WHjkx022PKfhSkDAUzLLJbLXV lPLtAu7iWjlE7+swcIjCaUWOYnckjkFOHFLB+ERcy8dtdG/XkE8y2yvrugg72TRt nuDp6IgC3JHN75LmrZ/R5jL69XPBEybzoAKTpKtEH1X/+ZNIqOYDwTvzIzfDhIeB XqiJwgAshVNR6mQkF9jTEWwBuRp8q3kCUEeU62rvWuRedaORqOP462CaZ3qinwdE pO8u8U41yw6KkoQwr1AjX6ThgyKB7ac= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:29 2026 by rpki-client