This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa File: 89f75768-f5cc-3977-b803-ee0990cb3e34.roa (raw, json) Hash identifier: dG3XRTo9umJMAennVqlf9Sn5Yx9tK8hDUU5tHokk/oQ= Subject key identifier: 04:E7:8B:A7:9C:1B:BF:43:0B:80:9E:76:4F:2F:00:97:D6:43:21:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871DD2619EF762C5956DD70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.17.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:dd:26:19:ef:76:2c:59:56:dd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=384c143b-8456-439a-8f92-78e1046d03d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:34:66:85:f2:79:35:45:53:ab:1a:5f:25: 7b:93:a3:4d:f0:2d:6b:38:3e:5b:c2:a5:ea:de:a8: 2d:62:0e:49:fe:19:5e:ce:d0:d0:51:05:1f:ee:3b: 92:ee:0f:11:ac:8a:d3:7c:fc:90:82:79:2d:90:b3: bf:a5:cd:af:b1:78:5a:06:ae:9c:f6:13:c6:47:d5: 14:db:86:aa:83:3e:2b:b7:26:62:ac:52:32:3e:f0: de:e5:3b:02:a5:c3:17:f5:c6:b1:75:bd:d9:7b:64: 73:f6:96:fd:66:48:d8:f0:6c:f2:d7:89:18:56:15: b8:4c:ed:cd:73:47:a7:7b:38:4b:f8:e4:82:d2:3e: 6a:76:06:45:47:76:f4:4b:44:a7:c4:2c:95:f1:e5: f0:0d:89:ad:f6:10:e9:33:f0:30:ab:45:8b:c3:6c: 16:ba:d4:f4:70:31:33:e7:9a:64:34:d0:68:c8:4a: 52:02:d1:a6:48:e6:80:12:e8:da:c7:5f:df:82:d3: c7:c2:04:4f:a5:e6:17:51:b6:ac:96:68:1e:70:6a: 07:34:08:03:f4:b7:65:ee:9c:67:7b:1f:94:04:5a: c3:7c:db:8d:62:ef:5a:8e:5d:d3:0f:ab:42:f3:f7: 1f:4b:74:15:dc:7b:7f:58:32:a9:09:7d:88:b3:57: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E7:8B:A7:9C:1B:BF:43:0B:80:9E:76:4F:2F:00:97:D6:43:21:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:26:34:bb:19:9b:2e:04:ba:ff:b6:00:bb:75:49:ce:ec:cc: 47:34:7e:af:99:1a:7c:ab:4d:65:6f:0f:74:a0:be:38:a1:0b: 61:3e:50:86:1b:84:b3:19:aa:fc:dc:8d:4b:0a:8d:e6:18:8f: 50:5a:e8:f6:e7:1f:3b:40:23:12:ce:8a:f1:01:e9:1d:fa:c4: d7:0a:c5:dd:c6:52:0c:42:c0:6f:60:15:48:71:eb:14:5e:7f: 9a:e5:53:ac:df:8d:8e:84:6a:60:63:21:da:fe:b9:02:78:d9: fa:78:36:c4:0c:36:f7:ce:e6:53:1d:e3:fe:dd:b3:77:c8:77: 07:9b:91:eb:fe:40:ff:92:67:11:84:67:a9:57:6c:6e:15:94: 72:6f:69:4b:42:f6:f6:0a:4a:8d:6c:b4:d6:fd:95:d9:c1:27: c5:c1:23:b6:16:88:f6:bb:a4:49:55:db:4d:4a:d9:40:20:e4: 1c:ab:78:4b:12:c3:af:56:c4:6f:11:51:77:dc:35:b7:ca:db: 1c:e3:c1:f7:e1:1f:67:0b:82:bf:4e:67:a9:e6:82:d1:53:54: 5a:74:00:4a:ab:75:09:ca:13:14:80:38:57:78:b8:8c:e9:f4: eb:d4:cf:de:e0:c6:be:28:f6:b1:ea:a2:74:e8:b3:6e:9f:08: 33:01:ae:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcd0mGe92LFlW3XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk Mzg0YzE0M2ItODQ1Ni00MzlhLThmOTItNzhlMTA0NmQwM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKM0ZoXyeTVFU6saXyV7k6NN8C1rOD5bwqXq 3qgtYg5J/hleztDQUQUf7juS7g8RrIrTfPyQgnktkLO/pc2vsXhaBq6c9hPGR9UU 24aqgz4rtyZirFIyPvDe5TsCpcMX9caxdb3Ze2Rz9pb9ZkjY8Gzy14kYVhW4TO3N c0enezhL+OSC0j5qdgZFR3b0S0SnxCyV8eXwDYmt9hDpM/Awq0WLw2wWutT0cDEz 55pkNNBoyEpSAtGmSOaAEujax1/fgtPHwgRPpeYXUbaslmgecGoHNAgD9Ldl7pxn ex+UBFrDfNuNYu9ajl3TD6tC8/cfS3QV3Ht/WDKpCX2Is1cN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATni6ecG79DC4Cedk8vAJfWQyHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlmNzU3NjgtZjVjYy0z OTc3LWI4MDMtZWUwOTkwY2IzZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8mNLsZmy4Euv+2ALt1Sc7szEc0fq+ZGnyrTWVvD3SgvjihC2E+UIYb hLMZqvzcjUsKjeYYj1Ba6PbnHztAIxLOivEB6R36xNcKxd3GUgxCwG9gFUhx6xRe f5rlU6zfjY6EamBjIdr+uQJ42fp4NsQMNvfO5lMd4/7ds3fIdwebkev+QP+SZxGE Z6lXbG4VlHJvaUtC9vYKSo1stNb9ldnBJ8XBI7YWiPa7pElV201K2UAg5ByreEsS w69WxG8RUXfcNbfK2xzjwffhH2cLgr9OZ6nmgtFTVFp0AEqrdQnKExSAOFd4uIzp 9OvUz97gxr4o9rHqonTos26fCDMBrgk= -----END CERTIFICATE-----Generated at Wed Dec 24 08:50:52 2025 by rpki-client