This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: 7wV8l4Bo+H3uhIfqDWt0rGUzCichsKOlBP2424Gb9j4= Subject key identifier: 67:73:7F:9E:16:97:90:3F:2F:85:55:67:7A:B1:A4:99:79:35:0D:D8 Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584C470BCB2700B1316FCD956B80 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:cb:27:00:b1:31:6f:cd:95:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=b90b840c-1481-454c-aaa5-33685ed5f91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:9e:93:68:32:b2:f1:29:73:1a:5d:0d:be: 67:fc:30:04:cc:7b:91:c6:05:c5:c1:f6:16:05:da: 21:75:33:6e:4b:92:ba:3f:42:83:23:b2:70:17:d8: 90:a0:d6:2e:d4:c5:d3:8c:15:34:29:b9:fd:c2:41: ea:5c:4c:b2:77:c1:3b:a3:99:08:b5:fd:2d:48:90: bb:16:3e:42:b8:85:a2:e2:5a:bd:a2:94:b9:8d:2e: c8:3c:bf:98:f1:37:50:c4:78:1a:ab:b0:8a:c7:59: c6:18:e8:fb:3b:c3:7a:62:d8:71:6f:ba:28:dc:0c: 36:4f:35:e8:db:0d:26:97:a8:72:4d:98:15:ad:71: ba:4f:e2:1f:cf:d2:60:c3:36:56:70:af:40:21:f6: c7:42:d9:14:98:cc:87:71:eb:09:70:99:b5:a6:08: 43:d5:96:27:65:00:83:b2:84:b7:68:02:4f:75:46: e0:90:ae:07:71:63:f3:dc:eb:d4:e2:aa:92:6f:4e: 71:da:4a:9a:4b:55:44:04:13:c7:af:fe:d6:65:c9: 95:bc:36:18:b3:f1:a5:0b:28:fe:b9:9d:65:4c:88: e4:cb:12:4a:ff:39:81:1d:fe:31:fc:a0:c9:45:a4: 48:07:1f:66:45:5f:df:e1:6c:72:be:d9:bc:a1:1e: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:73:7F:9E:16:97:90:3F:2F:85:55:67:7A:B1:A4:99:79:35:0D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:38:24:47:39:6d:98:77:fe:8b:90:e6:27:60:6a:80:32:da: 93:69:0e:f4:86:33:e8:14:80:83:78:47:e4:93:9c:3d:ec:89: df:10:cb:f7:2f:28:ea:84:b6:3f:e0:15:b1:49:a8:62:52:69: 5c:8c:3b:9c:4f:79:1c:ad:b1:a0:b4:38:19:9a:ce:03:63:32: 8a:d6:77:74:9e:a5:59:6a:fa:64:9f:1b:17:3e:4e:a1:c5:3d: 81:5e:a6:83:2a:97:dc:a0:36:e2:20:31:7b:b8:b5:b0:fa:69: 46:af:ec:69:87:b4:26:a9:a9:e0:2c:c6:d6:3a:5e:db:34:e5: 15:10:08:fa:5e:44:53:b5:ab:6f:fd:b3:44:73:62:17:86:3f: 70:36:43:7d:df:6d:20:6f:69:5c:64:6e:0d:2a:55:2d:0e:60: d8:77:a1:e7:e7:a0:56:a9:9d:4c:b7:35:15:12:46:ee:e0:04: e1:03:3b:dc:10:72:f5:d2:a0:d1:51:cb:bd:a8:2c:7c:cc:98: a5:42:61:e8:84:31:23:fa:75:ee:e7:9e:a7:5b:e6:02:00:50: ee:1f:47:8f:5a:48:69:5e:ca:4b:08:45:00:a4:03:a3:11:01: 91:9c:1a:c4:2e:7f:1f:9c:16:a3:f7:46:d9:b6:4b:db:2a:87: 6d:0a:dd:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8snALExb82Va4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YjkwYjg0MGMtMTQ4MS00NTRjLWFhYTUtMzM2ODVlZDVmOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo2ek2gysvEpcxpdDb5n/DAEzHuRxgXFwfYW BdohdTNuS5K6P0KDI7JwF9iQoNYu1MXTjBU0Kbn9wkHqXEyyd8E7o5kItf0tSJC7 Fj5CuIWi4lq9opS5jS7IPL+Y8TdQxHgaq7CKx1nGGOj7O8N6Ythxb7oo3Aw2TzXo 2w0ml6hyTZgVrXG6T+Ifz9JgwzZWcK9AIfbHQtkUmMyHcesJcJm1pghD1ZYnZQCD soS3aAJPdUbgkK4HcWPz3OvU4qqSb05x2kqaS1VEBBPHr/7WZcmVvDYYs/GlCyj+ uZ1lTIjkyxJK/zmBHf4x/KDJRaRIBx9mRV/f4Wxyvtm8oR6deQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdzf54Wl5A/L4VVZ3qxpJl5NQ3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU4JEc5bZh3/ouQ5idgaoAy2pNpDvSGM+gUgIN4R+STnD3sid8Qy/cv KOqEtj/gFbFJqGJSaVyMO5xPeRytsaC0OBmazgNjMorWd3SepVlq+mSfGxc+TqHF PYFepoMql9ygNuIgMXu4tbD6aUav7GmHtCapqeAsxtY6Xts05RUQCPpeRFO1q2/9 s0RzYheGP3A2Q33fbSBvaVxkbg0qVS0OYNh3oefnoFapnUy3NRUSRu7gBOEDO9wQ cvXSoNFRy72oLHzMmKVCYeiEMSP6de7nnqdb5gIAUO4fR49aSGleyksIRQCkA6MR AZGcGsQufx+cFqP3Rtm2S9sqh20K3b4= -----END CERTIFICATE-----Generated at Mon Jan 12 16:05:54 2026 by rpki-client