This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa File: 00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa (raw, json) Hash identifier: k9vT+DfyLq5XwNkspuOpPLVAj+AKBEZKEOyvKLxMsr4= Subject key identifier: AC:6D:79:F3:93:B7:69:83:41:BA:1C:19:A9:8D:13:05:95:73:C4:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B11FA905342F4BF8ACC680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.17.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:1f:a9:05:34:2f:4b:f8:ac:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=02040670-bb9f-487f-a025-5b12d1b5683f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:d8:f3:c5:d8:31:c0:9c:91:51:c7:67:74: 43:32:b1:16:39:ab:55:77:14:01:83:e7:dd:6d:63: 37:b0:54:1e:5b:e9:30:90:8c:ce:79:cb:b2:87:75: a9:ff:18:b1:09:e1:da:2f:99:fa:24:6a:51:69:96: 14:eb:14:05:42:42:1c:88:1a:d9:a6:f4:ef:d1:89: d9:d6:f8:d8:68:c2:26:c7:d9:40:43:9d:5f:39:bd: 85:75:9f:ba:1f:4e:7d:7c:49:a5:2a:c2:45:bd:6e: 9a:d6:be:3a:4c:97:91:02:f6:f4:8f:85:6e:05:92: 67:98:ca:16:50:74:97:d9:37:a3:be:d8:29:06:39: 14:4c:13:58:39:3d:b2:07:1f:49:92:72:81:c1:89: 33:70:84:c1:eb:10:eb:ed:46:e2:4d:9a:de:84:12: 42:b7:2a:8b:da:b7:43:d8:a9:a1:f8:34:c4:70:42: c5:b5:b8:e7:01:cd:4e:ca:19:21:91:31:c2:8b:ee: 0d:03:c7:be:1a:8e:3d:32:ca:aa:e4:ba:b4:77:18: 9e:68:c2:62:ed:fb:bb:a4:b1:11:7e:ed:64:6b:1a: cf:9b:d2:92:91:e7:17:48:51:a7:be:08:cb:02:3f: 9d:6f:20:74:d9:b8:16:69:0d:37:8c:8b:20:fb:c1: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6D:79:F3:93:B7:69:83:41:BA:1C:19:A9:8D:13:05:95:73:C4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:12:61:a6:54:21:06:fd:89:53:4b:c0:06:5c:6b:c5:31:ba: dc:6b:4a:55:af:76:60:b0:aa:d8:62:aa:dc:39:9c:43:88:de: 9f:3d:21:29:bd:bd:ee:e0:5e:2f:3a:68:f7:b4:19:fd:99:50: e1:90:5f:36:f4:1d:f7:16:ef:42:fb:0d:f4:09:6e:de:ca:95: 66:c3:d4:8a:13:26:ed:4a:b7:53:1a:b9:8d:1d:92:d0:3e:a8: 8a:54:a1:56:40:fc:2e:91:51:b8:1b:af:19:06:fc:44:31:06: 5a:d4:5b:c4:0e:2f:07:61:c1:81:8f:ce:2d:a9:60:1b:68:71: c5:8d:42:d7:29:08:64:8b:a0:03:fc:21:74:bb:5e:42:5a:f4: 5e:2f:b7:2b:61:88:26:6e:4d:96:78:6a:f9:c6:d6:be:0b:dc: 44:42:c8:41:64:b2:e8:57:c0:51:43:49:7d:44:16:8f:13:56: d5:77:9d:c3:45:5f:bb:3a:eb:13:86:de:c9:96:e2:19:9b:b8: cd:93:cf:2d:40:a8:5b:82:4f:78:41:84:ad:0c:1e:ff:26:a4: bb:a4:7b:f9:b6:f9:0e:7b:cf:d1:a5:9e:b5:40:4e:04:f0:1f: 33:ae:f5:37:7a:af:f3:05:87:d8:79:a2:bd:63:47:65:96:67: b5:11:0c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sR+pBTQvS/isxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MDIwNDA2NzAtYmI5Zi00ODdmLWEwMjUtNWIxMmQxYjU2ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLY88XYMcCckVHHZ3RDMrEWOatVdxQBg+fd bWM3sFQeW+kwkIzOecuyh3Wp/xixCeHaL5n6JGpRaZYU6xQFQkIciBrZpvTv0YnZ 1vjYaMImx9lAQ51fOb2FdZ+6H059fEmlKsJFvW6a1r46TJeRAvb0j4VuBZJnmMoW UHSX2TejvtgpBjkUTBNYOT2yBx9JknKBwYkzcITB6xDr7UbiTZrehBJCtyqL2rdD 2Kmh+DTEcELFtbjnAc1OyhkhkTHCi+4NA8e+Go49Msqq5Lq0dxieaMJi7fu7pLER fu1kaxrPm9KSkecXSFGnvgjLAj+dbyB02bgWaQ03jIsg+8EmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxtefOTt2mDQbocGamNEwWVc8TyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDBlNWJlM2MtNjAxOC0z NWFiLWI0YWQtYmM0YTEzZjVlOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIISYaZUIQb9iVNLwAZca8UxutxrSlWvdmCwqthiqtw5nEOI3p89ISm9 ve7gXi86aPe0Gf2ZUOGQXzb0HfcW70L7DfQJbt7KlWbD1IoTJu1Kt1MauY0dktA+ qIpUoVZA/C6RUbgbrxkG/EQxBlrUW8QOLwdhwYGPzi2pYBtoccWNQtcpCGSLoAP8 IXS7XkJa9F4vtythiCZuTZZ4avnG1r4L3ERCyEFksuhXwFFDSX1EFo8TVtV3ncNF X7s66xOG3smW4hmbuM2Tzy1AqFuCT3hBhK0MHv8mpLuke/m2+Q57z9GlnrVATgTw HzOu9Td6r/MFh9h5or1jR2WWZ7URDBE= -----END CERTIFICATE-----Generated at Sat Dec 20 12:07:03 2025 by rpki-client