This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa File: cf80f08c-152d-3bb2-b48b-341b799003f6.roa (raw, json) Hash identifier: r34LlWe4474yv//J1mcLg+Rnm2n8hrKKM+J5TLsgmug= Subject key identifier: FD:46:81:54:19:FD:EB:B0:95:12:94:80:69:FD:4A:32:77:7D:2F:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A69928643F20D14ABD6E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.24.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:99:28:64:3f:20:d1:4a:bd:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d674718a-a688-46cf-b5be-788d840ae9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:03:df:9c:eb:20:be:46:d9:ba:48:bc:26: 46:e9:df:17:50:99:36:2e:2a:83:37:26:84:c1:19: 27:7e:4f:12:dc:28:c2:ef:08:af:39:65:8a:62:16: 16:69:58:4e:69:16:c0:55:c5:a7:48:06:2b:be:a7: aa:c6:b2:69:7c:bd:7a:a0:e6:5f:57:94:26:01:74: d5:c9:f7:7b:6f:99:e2:f3:5a:dc:86:97:29:d0:60: 66:ec:2e:02:b3:46:29:26:6d:99:c7:26:2d:b4:ff: 14:a9:57:80:63:b8:6d:2b:69:54:77:84:f5:dd:05: 8c:09:b7:c6:9d:7d:cd:97:c6:0b:58:cd:46:cc:40: 06:21:c1:a6:17:34:28:31:ed:a1:7e:a3:39:40:a2: 9e:d8:91:94:21:9d:81:ad:0f:ef:65:07:9b:63:e1: df:1d:e3:83:cf:36:e1:0a:3c:6d:ae:b5:da:01:91: b0:b3:18:2a:f9:b8:b5:25:c6:29:99:b9:6e:2c:46: 41:19:4b:7e:9a:b7:90:f8:f2:90:94:ea:b1:01:70: c9:5b:e1:7e:e9:17:cf:55:44:94:e9:a6:0e:e8:c0: 99:00:aa:eb:61:ac:12:52:81:c8:ff:29:13:84:e0: 1f:60:4e:63:10:95:e1:78:96:f1:7f:46:9d:7b:a5: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:46:81:54:19:FD:EB:B0:95:12:94:80:69:FD:4A:32:77:7D:2F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f2:d4:df:86:3e:02:e7:ad:d5:9f:9c:f0:a5:6b:b6:dc:00: 23:38:3a:42:5b:c5:a4:0b:16:49:f6:cc:7f:a5:39:d5:c1:98: a0:b2:84:90:02:fb:6f:de:22:c1:0b:ed:89:70:ee:30:77:c7: 64:f5:77:97:8b:5c:29:72:73:09:da:0b:4c:0f:f5:c7:ae:b2: 4b:39:91:d8:63:07:c8:5d:b1:8f:51:30:06:e9:63:cb:9e:00: 66:f2:01:d6:4a:80:c4:71:b1:82:e0:27:29:51:19:34:b6:58: 85:c9:6a:a2:0e:15:0e:93:54:47:44:06:0a:1b:2b:c7:12:8e: a3:f5:34:3b:22:1a:46:19:92:f9:63:dd:6e:56:82:4e:95:99: 8b:07:66:e7:b9:58:0e:fd:80:c9:6c:50:9f:51:a3:f8:6c:3d: d4:d9:bb:32:d7:67:0a:f0:e3:69:b7:6d:f0:9b:c7:0f:c1:70: be:ad:ee:69:21:15:cd:9e:df:20:08:69:e9:3a:00:dc:4c:91: 13:47:2f:3b:53:79:ba:6e:66:29:b1:c6:b3:ca:b6:39:42:b5: 92:ab:95:83:83:dd:92:ee:42:de:84:6e:81:6e:1e:cc:16:fe: d9:d4:37:03:84:c2:a0:f4:b8:26:db:f7:30:cd:95:27:ad:7f: 59:96:6d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFppkoZD8g0Uq9boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDY3NDcxOGEtYTY4OC00NmNmLWI1YmUtNzg4ZDg0MGFlOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv8D35zrIL5G2bpIvCZG6d8XUJk2LiqDNyaE wRknfk8S3CjC7wivOWWKYhYWaVhOaRbAVcWnSAYrvqeqxrJpfL16oOZfV5QmAXTV yfd7b5ni81rchpcp0GBm7C4Cs0YpJm2ZxyYttP8UqVeAY7htK2lUd4T13QWMCbfG nX3Nl8YLWM1GzEAGIcGmFzQoMe2hfqM5QKKe2JGUIZ2BrQ/vZQebY+HfHeODzzbh CjxtrrXaAZGwsxgq+bi1JcYpmbluLEZBGUt+mreQ+PKQlOqxAXDJW+F+6RfPVUSU 6aYO6MCZAKrrYawSUoHI/ykThOAfYE5jEJXheJbxf0ade6XoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1GgVQZ/euwlRKUgGn9SjJ3fS++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4MGYwOGMtMTUyZC0z YmIyLWI0OGItMzQxYjc5OTAwM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACry1N+GPgLnrdWfnPCla7bcACM4OkJbxaQLFkn2zH+lOdXBmKCyhJAC +2/eIsEL7Ylw7jB3x2T1d5eLXClycwnaC0wP9ceusks5kdhjB8hdsY9RMAbpY8ue AGbyAdZKgMRxsYLgJylRGTS2WIXJaqIOFQ6TVEdEBgobK8cSjqP1NDsiGkYZkvlj 3W5Wgk6VmYsHZue5WA79gMlsUJ9Ro/hsPdTZuzLXZwrw42m3bfCbxw/BcL6t7mkh Fc2e3yAIaek6ANxMkRNHLztTebpuZimxxrPKtjlCtZKrlYOD3ZLuQt6EboFuHswW /tnUNwOEwqD0uCbb9zDNlSetf1mWbe0= -----END CERTIFICATE-----Generated at Sun Jan 11 16:58:10 2026 by rpki-client