This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa File: 4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa (raw, json) Hash identifier: M1msiEqBbJozj4XOnJ/gqiLRQH8JtnKHlIAJsVhr7fQ= Subject key identifier: 01:32:E8:78:4A:4B:97:5B:08:F0:F4:2E:1F:E2:E4:50:C3:0E:26:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBCE0BF40F2BF54C24B360 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:ce:0b:f4:0f:2b:f5:4c:24:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=e8b30424-b01b-4d76-8ba9-9bd08949a5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:78:fa:24:c2:e5:48:1a:1b:63:7a:b2:25: b8:df:ea:93:8f:8f:7a:60:0c:8d:b4:75:a3:1d:95: 7c:97:10:e4:c8:42:ff:b4:70:2b:d5:df:c8:09:5c: 24:ee:6c:a7:e4:64:57:c1:76:c7:73:11:84:f1:9f: 2f:6b:b9:1a:9f:34:d3:cc:84:be:33:a3:b4:7d:80: 21:48:25:d7:8e:a1:c4:ba:ad:3b:af:3d:e3:35:72: 67:1d:55:d6:52:13:b6:1b:8a:78:a9:64:4b:37:bd: f2:3e:10:60:de:bc:bb:24:52:af:06:bd:5c:b4:ab: 09:93:e7:8a:db:b4:43:00:e4:63:74:13:a9:76:f5: df:a3:54:e7:0b:a4:79:cf:f5:35:96:79:59:15:26: 31:1e:94:f4:2a:bd:7b:54:4a:ed:7f:af:cc:34:ca: 38:18:3d:ee:76:cd:c3:9e:d2:6f:87:60:db:0f:91: 04:c1:84:2d:fd:48:f0:33:44:d6:67:b0:02:b2:82: b1:20:f3:d0:23:7b:d3:c3:a1:72:d3:57:7b:49:27: 33:7c:0b:53:ba:1c:b7:4f:22:8e:e7:83:b0:85:58: 66:d1:4d:85:54:d8:b7:22:a7:96:23:87:56:be:23: 84:4c:16:62:b1:d1:d6:b6:c5:fd:84:76:4e:ab:00: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:32:E8:78:4A:4B:97:5B:08:F0:F4:2E:1F:E2:E4:50:C3:0E:26:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:eb:0b:f8:88:ac:b4:b2:5c:e4:46:45:90:de:bd:06:a5:dc: 7a:bd:0b:68:f9:12:81:70:74:77:99:74:0c:5f:d6:f1:2c:7c: 5d:76:d2:b8:37:7e:11:f3:42:29:26:78:af:2d:be:f8:1c:b9: a8:1d:9c:0c:ad:21:45:1e:2f:fc:f4:35:d5:ea:2f:52:a5:04: 7e:c4:3b:6f:fd:62:e5:d6:81:bc:cf:df:a5:e6:b3:8e:fc:cd: 64:35:00:d4:9a:80:8e:10:03:9b:c8:42:4e:af:8d:2e:21:06: 22:67:56:c0:6c:64:e2:dd:d5:a8:f5:1a:47:aa:80:d9:d5:e4: 5b:21:a1:3e:49:81:dd:aa:17:52:9f:1d:92:ba:75:66:28:8e: d3:92:49:64:87:ab:e3:fe:8b:79:ec:24:7a:26:4a:e0:2f:a5: 3c:cd:8b:13:95:79:b0:45:0c:4e:d5:5b:36:f7:40:e5:03:2b: c6:52:01:3c:73:22:1c:04:7b:34:fe:45:cb:a0:0c:db:e9:b8: 81:fa:cf:89:55:8a:b2:dc:8e:6c:48:d3:fb:41:9a:76:6c:7e: b1:76:d9:1b:43:2d:3d:1e:ba:91:a3:37:7b:bb:42:45:93:21: db:b6:80:48:8c:25:2d:e1:fb:5c:71:eb:45:67:50:e6:0b:38: a3:f4:c6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC284L9A8r9Uwks2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZThiMzA0MjQtYjAxYi00ZDc2LThiYTktOWJkMDg5NDlhNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxB4+iTC5UgaG2N6siW43+qTj496YAyNtHWj HZV8lxDkyEL/tHAr1d/ICVwk7myn5GRXwXbHcxGE8Z8va7kanzTTzIS+M6O0fYAh SCXXjqHEuq07rz3jNXJnHVXWUhO2G4p4qWRLN73yPhBg3ry7JFKvBr1ctKsJk+eK 27RDAORjdBOpdvXfo1TnC6R5z/U1lnlZFSYxHpT0Kr17VErtf6/MNMo4GD3uds3D ntJvh2DbD5EEwYQt/UjwM0TWZ7ACsoKxIPPQI3vTw6Fy01d7SSczfAtTuhy3TyKO 54OwhVhm0U2FVNi3IqeWI4dWviOETBZisdHWtsX9hHZOqwCVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEy6HhKS5dbCPD0Lh/i5FDDDiafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE5MzFlYjMtYTBjYy0z MTVjLWI2NmYtM2VlMTVjMjY4OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErrC/iIrLSyXORGRZDevQal3Hq9C2j5EoFwdHeZdAxf1vEsfF120rg3 fhHzQikmeK8tvvgcuagdnAytIUUeL/z0NdXqL1KlBH7EO2/9YuXWgbzP36Xms478 zWQ1ANSagI4QA5vIQk6vjS4hBiJnVsBsZOLd1aj1GkeqgNnV5FshoT5Jgd2qF1Kf HZK6dWYojtOSSWSHq+P+i3nsJHomSuAvpTzNixOVebBFDE7VWzb3QOUDK8ZSATxz IhwEezT+RcugDNvpuIH6z4lVirLcjmxI0/tBmnZsfrF22RtDLT0eupGjN3u7QkWT Idu2gEiMJS3h+1xx60VnUOYLOKP0xlg= -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:26 2025 by rpki-client