This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa File: d01ab5bd-8e67-3001-a4ea-48358502331a.roa (raw, json) Hash identifier: MB9suY/977g1zdK3gxlDArhfLA7R9VcJp5q5DQ20VsQ= Subject key identifier: 39:E2:CA:BD:02:27:84:A1:D4:20:BE:27:04:EE:5F:97:67:04:38:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A692AF35F57BD487155600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.31.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:92:af:35:f5:7b:d4:87:15:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5a67793f-01cd-4dfd-9e70-3ce54ad24b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:eb:88:58:b3:15:02:11:cc:cd:39:9f:6a: bd:bc:02:bb:3a:3d:bb:84:54:14:23:d4:05:88:6f: a7:2b:8a:b4:d9:51:ac:5e:0d:66:b0:ce:88:74:33: ac:11:a0:2f:12:4f:1c:c0:39:f1:03:0b:e7:4d:3b: 27:60:4e:54:0d:28:c3:72:8a:12:eb:3d:ba:36:1e: 58:9c:90:db:98:94:e2:d0:38:e2:46:b1:e2:d8:8e: 3a:a4:f4:7a:db:2e:83:17:3c:7e:66:d1:2d:34:e2: 64:72:a7:78:97:df:9b:c1:cd:02:18:57:0b:42:ac: 7b:00:fc:59:0f:ed:60:61:9f:17:55:7d:14:e7:fd: fd:93:33:cd:39:65:79:dd:25:5d:02:0e:59:a8:55: 9b:1d:fe:14:55:28:18:ac:d0:85:67:b8:8a:55:1b: ce:cd:dc:5b:10:3e:a8:9c:d3:97:20:b2:fa:95:14: 21:93:14:e5:59:c9:02:81:e3:90:6e:68:e1:7e:ec: 48:e2:46:a6:bd:23:08:68:1b:60:41:26:b1:b5:ba: 41:68:b7:f1:82:88:87:01:22:d5:79:c7:6f:9e:ee: f5:67:31:77:a7:97:e7:6c:14:63:9d:86:25:77:80: 71:c4:d2:f8:0a:dd:9b:3d:b8:34:44:cf:3f:e8:80: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:CA:BD:02:27:84:A1:D4:20:BE:27:04:EE:5F:97:67:04:38:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5c:a7:60:4c:b5:70:2f:c4:5b:e1:9b:5f:95:ae:11:84:0f: 69:bb:3e:05:7a:d5:9a:76:ac:bc:c8:59:80:0f:b0:d4:74:17: 65:30:3c:cc:21:2b:42:99:64:f9:a9:dd:84:85:cb:fd:59:b4: 7c:01:eb:ee:fb:2e:11:1c:88:1d:b6:71:45:a3:6f:ca:04:20: be:67:f0:aa:b5:1b:f0:47:63:ff:44:55:76:a3:6e:93:ac:0c: d2:45:57:1b:09:44:57:68:d1:cd:0a:6f:70:ca:33:80:6c:c3: b1:bc:e1:72:c9:6d:46:cc:37:0c:64:30:46:58:13:90:c1:de: ba:48:02:b8:dd:84:76:6c:8c:b4:b6:46:6d:4c:13:7e:4e:17: b2:71:35:d2:0b:b5:84:01:be:1a:da:ab:d8:bf:ba:1a:25:c9: 75:bc:65:c6:8e:d2:7f:47:32:d2:bf:c5:15:90:1e:3b:b2:c0: 81:b3:42:9d:48:d1:fa:2b:6e:fb:ee:7e:e5:ef:c8:53:6b:ca: d5:50:18:85:9f:7c:d9:0f:67:74:f2:0f:d8:01:c1:9f:dd:30: 25:e5:e9:2f:b4:e6:26:89:50:05:cd:af:e7:69:0e:87:ea:39: 23:cc:b2:63:e2:06:7c:a9:cc:cd:3e:fc:2f:38:43:5d:45:2c: df:d2:de:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFppKvNfV71IcVVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NWE2Nzc5M2YtMDFjZC00ZGZkLTllNzAtM2NlNTRhZDI0YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV3riFizFQIRzM05n2q9vAK7Oj27hFQUI9QF iG+nK4q02VGsXg1msM6IdDOsEaAvEk8cwDnxAwvnTTsnYE5UDSjDcooS6z26Nh5Y nJDbmJTi0DjiRrHi2I46pPR62y6DFzx+ZtEtNOJkcqd4l9+bwc0CGFcLQqx7APxZ D+1gYZ8XVX0U5/39kzPNOWV53SVdAg5ZqFWbHf4UVSgYrNCFZ7iKVRvOzdxbED6o nNOXILL6lRQhkxTlWckCgeOQbmjhfuxI4kamvSMIaBtgQSaxtbpBaLfxgoiHASLV ecdvnu71ZzF3p5fnbBRjnYYld4BxxNL4Ct2bPbg0RM8/6IBGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDniyr0CJ4Sh1CC+JwTuX5dnBDi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDAxYWI1YmQtOGU2Ny0z MDAxLWE0ZWEtNDgzNTg1MDIzMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRcp2BMtXAvxFvhm1+VrhGED2m7PgV61Zp2rLzIWYAPsNR0F2UwPMwh K0KZZPmp3YSFy/1ZtHwB6+77LhEciB22cUWjb8oEIL5n8Kq1G/BHY/9EVXajbpOs DNJFVxsJRFdo0c0Kb3DKM4Bsw7G84XLJbUbMNwxkMEZYE5DB3rpIArjdhHZsjLS2 Rm1ME35OF7JxNdILtYQBvhraq9i/uholyXW8ZcaO0n9HMtK/xRWQHjuywIGzQp1I 0forbvvufuXvyFNrytVQGIWffNkPZ3TyD9gBwZ/dMCXl6S+05iaJUAXNr+dpDofq OSPMsmPiBnypzM0+/C84Q11FLN/S3hM= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:50 2026 by rpki-client