This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa File: d0adf6f5-43ee-385c-be0f-59c4649227e9.roa (raw, json) Hash identifier: EXLn2ZpgsqxR8xRMftHlB3Lo4/993iJZtCmPUWkkZ3Y= Subject key identifier: 29:45:EB:A4:FE:3B:6C:75:BF:AE:2E:39:38:89:1D:68:57:1F:D4:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A67B065105C07A33438080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.23.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:7b:06:51:05:c0:7a:33:43:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c9dc4243-80bb-4e3b-940b-f0a273bc7b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:55:e4:b7:b4:54:c9:62:1a:0c:a3:64:ba:ca: cc:95:6d:bb:7a:98:e7:a3:ae:b7:ef:fc:c6:96:b1: 88:45:db:dc:8e:27:a8:3a:79:5d:e0:9f:f6:d0:76: 95:a2:61:03:98:e4:eb:cb:4e:2c:dd:0a:d4:6f:c5: de:8a:03:2f:9e:bf:8c:c7:16:93:23:ce:f8:87:d5: c8:7e:e6:ce:8b:a8:6f:b7:39:cf:5d:57:03:bc:fa: 4b:d1:50:27:27:8b:92:a2:d2:31:94:1f:46:f6:bc: 8c:0f:d6:07:03:cb:56:b4:6f:fa:ae:50:e4:78:30: 63:89:0b:0f:f9:e7:94:a3:7b:92:58:47:94:1f:90: 9c:47:19:20:1c:e0:3a:98:30:42:41:6c:01:3e:0e: a9:a9:0d:4a:19:ad:9e:f3:33:48:2d:3a:98:aa:e4: dc:db:43:3f:f1:fd:3a:38:b8:09:f2:20:21:26:c6: 35:b2:41:52:1a:52:a7:21:34:16:5b:e4:bf:90:f3: 76:57:9d:89:97:9e:76:1d:9f:72:df:8b:a4:b8:de: 55:a5:95:18:f3:86:e1:35:2b:80:5d:aa:1e:e7:b8: 6a:65:7b:ff:da:af:88:16:75:86:a8:e0:e8:88:68: 4a:f4:f5:d1:40:3b:38:b5:b5:08:a7:92:ec:c1:c4: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:45:EB:A4:FE:3B:6C:75:BF:AE:2E:39:38:89:1D:68:57:1F:D4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3c:8d:6d:63:5d:30:94:70:91:fd:d8:4d:d6:95:fa:49:70: ac:84:6c:f4:0d:58:22:49:c1:4d:b6:c5:76:83:ba:9a:e5:92: 8b:05:02:00:8d:82:e4:00:bf:be:ee:ce:ce:fe:93:df:45:9f: d3:84:96:d8:f8:d5:bc:0c:34:a6:4f:e1:9e:37:75:d3:12:92: 61:f1:90:11:3f:a3:81:b8:45:d8:9e:e3:78:14:fc:b7:03:26: 1a:1b:60:46:e7:47:82:72:db:dc:af:90:da:42:3c:13:77:aa: 5b:4a:e7:90:04:98:cc:1c:7a:1d:77:80:ff:47:1d:13:e3:db: e1:2a:57:9a:de:ef:08:fb:38:ea:f5:1b:84:66:47:ce:2c:f7: b0:48:4a:21:ad:d3:94:c8:96:09:17:b0:4a:a6:33:b4:c7:2a: 05:e5:2d:85:ce:7a:9e:c2:91:b2:0c:85:0b:dc:b4:05:b6:5e: 34:06:26:a0:91:f3:4d:de:6d:ee:92:35:42:f0:65:97:19:5e: b6:ad:0d:13:27:16:86:dc:b4:97:c3:0d:dc:18:47:3c:86:fd: 66:8c:61:d4:b8:9b:ce:e3:8b:86:1a:50:a3:43:ec:07:43:28: 7d:81:67:68:95:cb:a2:bb:f0:5f:2b:91:6f:15:13:c3:ad:5f: 27:9d:66:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpnsGUQXAejNDgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzlkYzQyNDMtODBiYi00ZTNiLTk0MGItZjBhMjczYmM3YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVXkt7RUyWIaDKNkusrMlW27epjno6637/zG lrGIRdvcjieoOnld4J/20HaVomEDmOTry04s3QrUb8XeigMvnr+MxxaTI874h9XI fubOi6hvtznPXVcDvPpL0VAnJ4uSotIxlB9G9ryMD9YHA8tWtG/6rlDkeDBjiQsP +eeUo3uSWEeUH5CcRxkgHOA6mDBCQWwBPg6pqQ1KGa2e8zNILTqYquTc20M/8f06 OLgJ8iAhJsY1skFSGlKnITQWW+S/kPN2V52Jl552HZ9y34ukuN5VpZUY84bhNSuA Xaoe57hqZXv/2q+IFnWGqODoiGhK9PXRQDs4tbUIp5LswcRRXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClF66T+O2x1v64uOTiJHWhXH9TFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhZGY2ZjUtNDNlZS0z ODVjLWJlMGYtNTljNDY0OTIyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc8jW1jXTCUcJH92E3WlfpJcKyEbPQNWCJJwU22xXaDuprlkosFAgCN guQAv77uzs7+k99Fn9OEltj41bwMNKZP4Z43ddMSkmHxkBE/o4G4Rdie43gU/LcD JhobYEbnR4Jy29yvkNpCPBN3qltK55AEmMwceh13gP9HHRPj2+EqV5re7wj7OOr1 G4RmR84s97BISiGt05TIlgkXsEqmM7THKgXlLYXOep7CkbIMhQvctAW2XjQGJqCR 803ebe6SNULwZZcZXratDRMnFobctJfDDdwYRzyG/WaMYdS4m87ji4YaUKND7AdD KH2BZ2iVy6K78F8rkW8VE8OtXyedZjc= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:36 2026 by rpki-client