This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11910660-46d8-3ec4-ab7d-7db94017c584.roa File: 11910660-46d8-3ec4-ab7d-7db94017c584.roa (raw, json) Hash identifier: cMXs//V5Q6QV+a4fkzV9GSWgNDwg/fDhyif0OiOuV8I= Subject key identifier: 33:89:E3:73:CD:B5:12:8C:DA:95:2C:55:06:6A:06:1B:B9:D5:A4:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871D659FA5FB514B7029100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11910660-46d8-3ec4-ab7d-7db94017c584.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.22.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:d6:59:fa:5f:b5:14:b7:02:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=f7bffdfc-a3cc-424f-86c5-1ae522b8c437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:86:b5:bb:66:78:64:bf:c0:0f:84:ab:0c:eb: e5:c1:e5:51:49:3d:f4:e9:08:56:77:96:06:22:7e: 2d:36:bb:72:4a:ca:f9:ec:62:a8:42:a3:e7:24:c4: b7:40:e4:12:96:63:48:cd:45:38:1f:26:63:da:2a: b5:d7:bd:cf:e2:94:46:bc:26:3d:0e:95:6e:03:45: a2:18:06:fa:6a:cb:9b:28:14:f7:71:c9:ae:97:a7: 7f:37:5e:2c:48:d8:e2:15:65:e9:47:47:f9:ba:ec: 06:c8:8d:06:96:bc:d1:0d:65:2d:f9:ec:77:e9:b4: f2:da:ca:31:55:fb:79:fd:f2:21:87:82:f6:87:bc: 26:33:25:df:4f:93:6c:fa:31:95:5d:e4:37:f3:ff: f4:e9:c3:24:3b:29:fa:59:70:6d:8c:6f:58:4a:38: f6:45:37:1b:7c:48:03:3a:5a:fb:23:d3:45:3d:5e: 18:12:37:f5:01:89:17:b1:9c:a3:a6:87:b0:54:fa: 10:fa:19:5f:f0:91:ad:4a:06:d2:98:28:a0:b7:cc: 94:b9:42:1e:e4:09:3f:65:b8:3e:32:d1:c3:1b:f8: 38:cb:19:5a:90:54:19:27:a5:8f:dd:84:35:b9:f2: 1d:a1:f9:97:cb:71:28:25:0d:06:60:36:ba:73:f6: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:89:E3:73:CD:B5:12:8C:DA:95:2C:55:06:6A:06:1B:B9:D5:A4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11910660-46d8-3ec4-ab7d-7db94017c584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:70:f6:0b:39:04:c0:02:4d:98:b7:f7:90:1e:d8:d7:29:47: 33:b6:c9:a5:35:49:f6:71:2b:d8:8f:6f:2e:e2:b5:8f:fa:29: 8d:10:4a:06:ab:b6:0e:29:ba:1a:7b:9d:80:ab:fa:aa:d6:3e: 39:7d:dd:d3:8f:94:7e:41:28:e1:b6:45:6d:46:35:3c:42:3f: 10:61:be:13:af:65:91:74:f3:5d:0e:ff:cd:87:fd:f4:30:e1: d0:4d:5c:ab:34:e0:c5:e9:2f:c4:9e:52:85:78:88:69:b5:79: a0:54:b7:59:3e:25:36:82:df:4b:b5:bc:cd:fb:12:e6:b9:49: 49:c1:22:b1:5a:cf:e8:ec:35:44:17:64:61:e0:72:47:c8:23: ac:e8:38:32:a8:1e:d2:45:d4:6d:6d:a8:f3:86:28:16:e6:4b: 52:76:5a:f8:84:f2:43:50:25:01:86:a9:43:d4:7c:07:91:c7: cd:9e:b2:fb:5f:c5:3b:ac:5b:53:42:a2:7b:33:6b:b3:1e:59: 7c:b9:d8:4c:9e:ae:4d:d3:a6:29:41:71:38:1b:af:20:12:ec: a2:40:0f:15:37:c9:85:23:42:a4:f1:ee:51:cc:7d:ee:a5:3c: b1:b5:34:17:27:35:8f:76:51:46:19:b5:bd:f6:98:54:da:08: 6a:3c:be:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcdZZ+l+1FLcCkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZjdiZmZkZmMtYTNjYy00MjRmLTg2YzUtMWFlNTIyYjhjNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYa1u2Z4ZL/AD4SrDOvlweVRST306QhWd5YG In4tNrtySsr57GKoQqPnJMS3QOQSlmNIzUU4HyZj2iq1173P4pRGvCY9DpVuA0Wi GAb6asubKBT3ccmul6d/N14sSNjiFWXpR0f5uuwGyI0GlrzRDWUt+ex36bTy2sox Vft5/fIhh4L2h7wmMyXfT5Ns+jGVXeQ38//06cMkOyn6WXBtjG9YSjj2RTcbfEgD Olr7I9NFPV4YEjf1AYkXsZyjpoewVPoQ+hlf8JGtSgbSmCigt8yUuUIe5Ak/Zbg+ MtHDG/g4yxlakFQZJ6WP3YQ1ufIdofmXy3EoJQ0GYDa6c/Y/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOJ43PNtRKM2pUsVQZqBhu51aQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTE5MTA2NjAtNDZkOC0z ZWM0LWFiN2QtN2RiOTQwMTdjNTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZw9gs5BMACTZi395Ae2NcpRzO2yaU1SfZxK9iPby7itY/6KY0QSgar tg4puhp7nYCr+qrWPjl93dOPlH5BKOG2RW1GNTxCPxBhvhOvZZF0810O/82H/fQw 4dBNXKs04MXpL8SeUoV4iGm1eaBUt1k+JTaC30u1vM37Eua5SUnBIrFaz+jsNUQX ZGHgckfII6zoODKoHtJF1G1tqPOGKBbmS1J2WviE8kNQJQGGqUPUfAeRx82esvtf xTusW1NConsza7MeWXy52Eyerk3TpilBcTgbryAS7KJADxU3yYUjQqTx7lHMfe6l PLG1NBcnNY92UUYZtb32mFTaCGo8vnk= -----END CERTIFICATE-----Generated at Thu Dec 25 03:40:23 2025 by rpki-client