This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa File: 963e3efe-e16b-3101-9c10-58fdc48b8689.roa (raw, json) Hash identifier: VzVRaX2gMSuvqoA1bB1xeQTqRvEoTTP+HlFLH+uuvv4= Subject key identifier: 99:49:06:C8:68:1F:86:82:32:E5:3E:A4:65:9B:EF:8C:7E:5D:F1:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A683B942BFC0A08A80BD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.24.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:83:b9:42:bf:c0:a0:8a:80:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3d6293a5-4a59-47bc-8a31-db329c0c1f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:27:4a:43:23:0c:3a:47:15:82:5a:c7:b0: a7:67:78:e3:7b:06:07:4f:b3:45:8a:b1:5b:a3:d8: 9b:80:db:0f:0d:88:b6:d0:7b:ea:75:76:4e:c9:84: 97:21:f9:63:6c:97:eb:b4:7a:49:a2:ab:48:99:3b: c5:0f:b9:6c:0e:a8:2c:e1:21:05:9c:f3:6c:3f:c3: 23:f3:d2:05:f7:40:67:b3:63:2f:f3:fe:8d:e3:28: 0a:68:08:a1:57:aa:bc:48:ce:95:0f:30:22:e3:81: ed:9c:17:c9:bd:b5:36:38:da:9a:53:32:37:b7:40: 4c:0a:d0:f5:c7:a9:a4:1a:9a:26:52:20:11:6f:ca: f9:23:50:07:29:d7:aa:5c:04:ea:02:1f:83:e1:5b: 44:18:4c:5f:fd:33:23:eb:c0:e2:a1:3a:1a:96:52: 0b:b0:90:21:a8:90:d2:32:4b:28:c8:3c:70:68:d1: d6:cc:e7:85:d9:09:43:79:55:11:64:c8:81:e9:f5: 98:75:e2:45:d6:c2:56:07:5c:f1:f0:e2:0b:26:61: 3d:50:36:e9:6a:52:89:02:88:f1:88:7a:6e:01:72: f5:21:3d:6f:42:8d:f0:c6:d9:29:4f:fa:0f:51:34: d4:8b:49:88:51:8c:69:65:a7:7a:20:6d:17:e0:68: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:49:06:C8:68:1F:86:82:32:E5:3E:A4:65:9B:EF:8C:7E:5D:F1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:76:7d:02:18:df:42:a7:35:2e:8f:68:f9:30:6b:e1:3e:de: a2:7b:54:07:91:c4:9a:95:25:83:78:d3:a0:38:3a:96:84:3f: 94:c5:6e:3e:51:73:9c:9e:4c:3d:9b:68:fc:5d:68:ad:e7:92: a2:01:74:2b:8c:d0:11:d1:9a:02:5b:49:43:e4:e2:8c:09:f1: 71:31:ef:fc:cc:b1:20:53:b8:3f:22:06:30:5c:86:3b:a6:ee: e4:61:1d:71:0e:4b:ee:5a:b7:af:c8:d6:3c:14:ae:88:52:b8: 09:38:8b:5c:a9:9e:30:ff:20:15:4c:f5:20:a3:cd:d3:54:00: e9:a0:cc:7a:c4:63:47:bb:4e:e5:b3:27:36:74:89:7c:45:bd: cf:02:af:6f:1e:02:4f:5e:dc:eb:3a:41:ba:9e:0b:cd:f4:2f: ce:89:54:df:73:36:be:8a:8a:55:37:d6:b4:d7:9b:6e:43:02: 90:a4:f4:34:6d:2c:b6:b7:dd:7e:01:04:8b:d0:93:65:c6:d0: eb:b2:36:6f:63:d4:06:cb:db:1f:c3:7c:fa:8e:c8:ca:7a:b1: 79:66:74:07:46:d7:70:4e:29:46:f3:47:d3:40:8d:a6:dc:88: 0a:29:7a:f2:1b:de:6e:17:86:35:65:fb:24:77:53:d2:db:96: 30:a0:47:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpoO5Qr/AoIqAvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2Q2MjkzYTUtNGE1OS00N2JjLThhMzEtZGIzMjljMGMxZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngAnSkMjDDpHFYJax7CnZ3jjewYHT7NFirFb o9ibgNsPDYi20HvqdXZOyYSXIfljbJfrtHpJoqtImTvFD7lsDqgs4SEFnPNsP8Mj 89IF90Bns2Mv8/6N4ygKaAihV6q8SM6VDzAi44HtnBfJvbU2ONqaUzI3t0BMCtD1 x6mkGpomUiARb8r5I1AHKdeqXATqAh+D4VtEGExf/TMj68DioToallILsJAhqJDS MksoyDxwaNHWzOeF2QlDeVURZMiB6fWYdeJF1sJWB1zx8OILJmE9UDbpalKJAojx iHpuAXL1IT1vQo3wxtkpT/oPUTTUi0mIUYxpZad6IG0X4Gii2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlJBshoH4aCMuU+pGWb74x+XfFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTYzZTNlZmUtZTE2Yi0z MTAxLTljMTAtNThmZGM0OGI4Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ2fQIY30KnNS6PaPkwa+E+3qJ7VAeRxJqVJYN406A4OpaEP5TFbj5R c5yeTD2baPxdaK3nkqIBdCuM0BHRmgJbSUPk4owJ8XEx7/zMsSBTuD8iBjBchjum 7uRhHXEOS+5at6/I1jwUrohSuAk4i1ypnjD/IBVM9SCjzdNUAOmgzHrEY0e7TuWz JzZ0iXxFvc8Cr28eAk9e3Os6QbqeC830L86JVN9zNr6KilU31rTXm25DApCk9DRt LLa33X4BBIvQk2XG0OuyNm9j1AbL2x/DfPqOyMp6sXlmdAdG13BOKUbzR9NAjabc iAopevIb3m4XhjVl+yR3U9LbljCgRwk= -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:12 2025 by rpki-client