This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa File: 88c29cb3-d0f8-3556-894d-ea5396a34670.roa (raw, json) Hash identifier: sKe8toJt+ZmL7Vk1mczVuXHso5Eipchu3FkiRv3O/CY= Subject key identifier: 61:3C:33:26:74:98:EF:9A:2C:C1:C1:D1:83:68:3D:45:99:F9:E0:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A822049DDCA8D5ABF87380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.22.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:22:04:9d:dc:a8:d5:ab:f8:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=576130c2-03c5-4de9-b6d6-4084792b3f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:b2:04:4b:08:41:a3:20:18:96:ae:f2:4b: 1a:3c:83:2c:7f:2b:4e:47:2e:9f:83:d9:f2:46:6d: 0e:0b:fe:8e:0a:c9:15:7c:af:84:38:5a:23:1b:0f: f7:8d:4b:db:28:56:6a:e1:3e:9b:54:c4:10:dc:d7: 70:5e:8f:bc:33:c9:16:c8:3d:e6:4e:bb:44:1e:aa: 5b:47:cb:c5:92:41:85:d4:4a:63:04:19:7c:42:37: 5a:63:ba:a5:5b:60:54:6a:1e:a4:99:bf:b4:51:f3: ad:1b:24:2d:1f:fc:d3:c7:22:44:1d:88:6f:99:60: c5:70:8b:a6:7a:df:37:c4:74:e8:d2:ac:b4:31:15: a8:55:de:25:c2:a2:2a:d5:77:84:5e:2d:82:85:7f: d9:9d:da:df:b7:ac:d9:1d:ac:5f:39:80:1a:b2:93: f8:f2:dd:61:9b:2d:7b:d6:56:2a:44:98:e0:68:58: 7e:42:05:42:25:f9:de:67:ed:21:82:2d:37:43:af: d0:9c:0e:51:0f:86:8c:61:a7:9d:b8:2e:02:32:22: ea:f2:5f:85:ef:d0:da:ab:44:8f:dc:f7:86:e8:22: 58:72:54:3d:e5:7d:d7:2e:75:29:4b:df:24:83:8f: 18:e9:ae:07:fb:55:a6:9a:34:24:df:b3:99:b3:a6: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3C:33:26:74:98:EF:9A:2C:C1:C1:D1:83:68:3D:45:99:F9:E0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:86:90:ad:ea:a2:d7:68:6c:46:9f:40:4b:06:47:3c:a6:5c: fc:f3:94:49:72:53:99:b5:6a:2f:cb:e9:10:bc:aa:6f:c5:55: 50:7e:0f:b2:37:eb:ee:59:d6:69:83:eb:2f:19:67:9b:98:47: 85:a2:68:10:a6:56:f3:75:6d:9f:b9:53:53:fe:c7:22:17:97: 0a:d8:9b:22:37:ee:e2:f0:53:82:0c:9b:ff:cf:0a:f6:9f:a1: f5:96:cf:4d:13:1f:dc:2d:33:ee:d3:9c:33:95:ad:3f:65:59: e7:c2:f5:55:da:db:ce:70:09:5e:e5:80:c8:d0:ba:78:7d:71: c4:57:a6:be:8e:44:96:ca:68:b3:6b:9c:2f:51:03:c5:4c:23: 1b:3d:25:17:2a:22:1f:c4:a5:3e:26:09:d5:6c:bd:9a:03:56: 0a:9a:3c:40:a6:50:31:ce:68:a1:e4:07:77:02:9c:68:db:70: 77:49:1b:a1:5f:fb:7a:f7:61:70:93:84:40:b0:83:46:c2:cd: bc:15:34:b0:9c:51:45:19:64:ba:00:00:ce:20:8d:0b:1f:01: 69:ee:2d:cb:91:ae:c6:e7:01:93:01:f2:2d:0d:28:97:3e:1b: f9:45:e5:4b:1b:6d:d1:f8:9d:ac:bf:f6:44:27:6c:19:9a:98: ef:e6:b0:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCIEndyo1av4c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTc2MTMwYzItMDNjNS00ZGU5LWI2ZDYtNDA4NDc5MmIzZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGCyBEsIQaMgGJau8ksaPIMsfytORy6fg9ny Rm0OC/6OCskVfK+EOFojGw/3jUvbKFZq4T6bVMQQ3NdwXo+8M8kWyD3mTrtEHqpb R8vFkkGF1EpjBBl8QjdaY7qlW2BUah6kmb+0UfOtGyQtH/zTxyJEHYhvmWDFcIum et83xHTo0qy0MRWoVd4lwqIq1XeEXi2ChX/Zndrft6zZHaxfOYAaspP48t1hmy17 1lYqRJjgaFh+QgVCJfneZ+0hgi03Q6/QnA5RD4aMYaeduC4CMiLq8l+F79Daq0SP 3PeG6CJYclQ95X3XLnUpS98kg48Y6a4H+1WmmjQk37OZs6aZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE8MyZ0mO+aLMHB0YNoPUWZ+eCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODhjMjljYjMtZDBmOC0z NTU2LTg5NGQtZWE1Mzk2YTM0NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACGkK3qotdobEafQEsGRzymXPzzlElyU5m1ai/L6RC8qm/FVVB+D7I3 6+5Z1mmD6y8ZZ5uYR4WiaBCmVvN1bZ+5U1P+xyIXlwrYmyI37uLwU4IMm//PCvaf ofWWz00TH9wtM+7TnDOVrT9lWefC9VXa285wCV7lgMjQunh9ccRXpr6ORJbKaLNr nC9RA8VMIxs9JRcqIh/EpT4mCdVsvZoDVgqaPECmUDHOaKHkB3cCnGjbcHdJG6Ff +3r3YXCThECwg0bCzbwVNLCcUUUZZLoAAM4gjQsfAWnuLcuRrsbnAZMB8i0NKJc+ G/lF5UsbbdH4nay/9kQnbBmamO/msMo= -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:47 2025 by rpki-client