This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa File: 0063bf2e-d940-336a-8c0a-4ccda641701e.roa (raw, json) Hash identifier: JljTKEx8pOeLHABJCzOC//zhdPO00JRfLmoqLIcHTUE= Subject key identifier: DE:4E:3F:9A:7C:BD:04:65:67:E4:DD:FE:4B:2E:1E:A4:CB:F1:BD:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC0629175FC8AAC2F31600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:06:29:17:5f:c8:aa:c2:f3:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=5a553d93-da74-4535-8e64-032ac05bf286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:dd:dc:56:6f:9f:2c:7e:df:d5:18:9e:72: ce:37:f3:bd:da:dc:d2:77:3c:c8:65:df:80:5b:96: 1f:a2:11:d1:ec:72:41:cb:50:71:0d:fb:7c:69:f6: f9:66:98:c7:b7:e5:df:15:43:8a:a3:93:48:c2:6b: 38:0d:0d:28:da:02:9b:9c:b3:80:88:50:38:49:77: c6:a5:d9:7a:3f:96:1a:bd:ef:b8:2d:2d:1c:19:8a: 7d:12:8c:67:93:2a:97:45:ba:28:b0:a1:48:a2:74: a1:ff:4d:ee:3c:5a:e8:ff:ac:7d:0c:31:e7:7d:3a: 7b:bb:82:a7:06:85:b5:25:e1:e9:18:9d:9b:76:3a: 63:5e:0d:c9:0d:b5:06:4d:74:a6:11:fa:5f:f6:78: f6:f1:ee:8a:aa:8c:93:02:4f:26:00:32:86:36:35: e9:78:bd:c7:e0:b3:fb:ea:02:fc:06:3d:4a:37:85: 77:3b:96:8d:38:81:75:36:0b:5d:be:14:87:68:8b: be:58:58:b7:7b:1c:e1:58:f2:67:02:71:d4:bd:81: 3d:b9:28:54:33:89:07:b0:6b:83:43:00:54:dc:6d: 38:ad:93:7d:32:1b:ea:25:d9:e8:d7:d0:b8:84:20: e1:b7:ea:64:95:e6:43:2c:2f:56:b4:dc:6a:24:0b: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4E:3F:9A:7C:BD:04:65:67:E4:DD:FE:4B:2E:1E:A4:CB:F1:BD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:52:af:37:95:78:d3:72:57:69:7c:2e:60:32:e0:24:d5:23: b8:d0:85:82:8e:7e:71:93:67:4e:27:7b:3c:52:d2:6e:fc:6b: 40:db:37:25:e4:e0:c1:36:68:c9:92:0d:38:e2:53:a4:82:1f: 84:75:c9:e2:64:02:da:f1:68:82:da:9a:1a:04:d9:af:a4:35: d0:7c:02:4c:37:4d:49:d2:ee:db:b0:d5:a8:4e:84:05:51:b9: 37:00:0a:9d:1d:29:8c:be:69:2b:3d:d8:c0:aa:37:61:2a:4f: d3:29:94:3a:0b:5e:8c:87:b4:57:9f:5c:29:0c:e1:9c:e9:d2: 87:28:96:ca:30:48:4a:52:50:74:2d:3f:3b:7b:75:5d:c0:77: ce:81:f8:cf:6c:14:cd:25:4d:0c:db:77:d2:a1:aa:13:81:40: 49:91:ba:4e:9c:06:13:10:88:e3:a8:b3:ca:f5:ea:d8:8f:2b: 67:8e:30:b3:b5:d5:1f:a3:62:23:18:02:ee:b3:39:38:4d:a3: 1f:8b:19:f6:ec:10:3c:49:91:3c:fd:3e:8a:91:e1:94:6d:33: 24:a8:ea:f9:26:ff:b2:5f:9f:96:f1:7b:74:a6:19:76:f8:50: 7e:04:56:68:83:30:d4:90:89:27:87:b5:11:ee:f8:66:0e:a2: 56:1c:dc:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AYpF1/IqsLzFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NWE1NTNkOTMtZGE3NC00NTM1LThlNjQtMDMyYWMwNWJmMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhbd3FZvnyx+39UYnnLON/O92tzSdzzIZd+A W5YfohHR7HJBy1BxDft8afb5ZpjHt+XfFUOKo5NIwms4DQ0o2gKbnLOAiFA4SXfG pdl6P5Yave+4LS0cGYp9EoxnkyqXRboosKFIonSh/03uPFro/6x9DDHnfTp7u4Kn BoW1JeHpGJ2bdjpjXg3JDbUGTXSmEfpf9nj28e6KqoyTAk8mADKGNjXpeL3H4LP7 6gL8Bj1KN4V3O5aNOIF1NgtdvhSHaIu+WFi3exzhWPJnAnHUvYE9uShUM4kHsGuD QwBU3G04rZN9MhvqJdno19C4hCDht+pkleZDLC9WtNxqJAvXqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5OP5p8vQRlZ+Td/ksuHqTL8b11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDA2M2JmMmUtZDk0MC0z MzZhLThjMGEtNGNjZGE2NDE3MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxSrzeVeNNyV2l8LmAy4CTVI7jQhYKOfnGTZ04nezxS0m78a0DbNyXk 4ME2aMmSDTjiU6SCH4R1yeJkAtrxaILamhoE2a+kNdB8Akw3TUnS7tuw1ahOhAVR uTcACp0dKYy+aSs92MCqN2EqT9MplDoLXoyHtFefXCkM4Zzp0ocolsowSEpSUHQt Pzt7dV3Ad86B+M9sFM0lTQzbd9KhqhOBQEmRuk6cBhMQiOOos8r16tiPK2eOMLO1 1R+jYiMYAu6zOThNox+LGfbsEDxJkTz9PoqR4ZRtMySo6vkm/7Jfn5bxe3SmGXb4 UH4EVmiDMNSQiSeHtRHu+GYOolYc3Oc= -----END CERTIFICATE-----Generated at Tue Dec 23 09:13:31 2025 by rpki-client