This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa File: 968256d3-cb78-314c-bb42-530413b2968f.roa (raw, json) Hash identifier: qpFx5Msl3nq8h0sQ69CKeVq0/sWNyA2Umg+jfu9H9h4= Subject key identifier: 1A:B1:BC:56:36:47:59:DF:0B:A1:AF:23:0D:4B:D9:86:1C:4E:91:F3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A6963881FA290ECBD2A080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.28.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:96:38:81:fa:29:0e:cb:d2:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=322ccab9-abe5-4988-a6cc-0adff1cfb526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4d:c1:76:17:54:77:73:8e:36:74:f7:bf:a9: 6c:fa:60:a7:30:a2:f0:9c:65:41:b4:53:94:fe:a8: 42:db:21:49:07:51:a3:ff:6c:c9:af:54:dc:93:0b: 4b:d1:96:5e:2c:11:28:28:9e:5e:d2:09:79:ab:12: 3c:d6:4d:7c:e4:17:86:a8:93:a9:8a:40:8c:71:43: 1e:ea:c6:ba:a5:47:b5:f9:4b:d1:0f:36:b5:d4:12: 34:e9:67:6e:f6:06:08:4e:33:26:14:87:1f:69:4c: d9:05:3b:90:ed:f8:f1:27:75:6f:23:43:93:a4:97: 7f:83:30:25:05:0c:e4:7e:61:6b:81:34:f2:1c:8d: 0f:52:d0:ad:2f:40:3f:9f:bb:39:f3:cc:9c:76:fa: 31:d4:8f:06:79:b1:a0:ac:81:c8:5d:40:35:52:36: 0b:31:29:10:cb:65:a2:97:98:f6:6b:2b:b7:78:53: 02:24:50:32:bd:cb:ad:a9:bc:63:3b:d3:fd:54:29: d7:21:5b:53:06:2c:0d:85:d0:d4:c6:e4:cf:4d:b2: 1b:1d:ab:9e:a5:ff:76:5c:5a:95:59:f1:83:d5:ae: ec:5a:79:c6:66:a4:d0:06:be:ed:82:8c:cc:6d:a2: 71:36:05:b1:e7:e5:c4:8f:61:b9:f9:f6:a0:74:4a: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:BC:56:36:47:59:DF:0B:A1:AF:23:0D:4B:D9:86:1C:4E:91:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0f:23:a9:9f:b3:46:67:af:00:f0:ae:07:a2:5b:ad:f2:28: 78:a8:95:94:e6:c0:3b:95:89:5e:9b:ee:53:4b:9a:8b:60:79: 05:7e:19:de:f8:ad:2a:da:5f:01:1e:3c:51:ef:22:03:6f:d2: 6f:fc:ad:a5:b9:6c:b6:e4:0c:c6:41:8d:8c:ce:b5:17:fe:b5: 53:b2:7f:95:dd:5c:16:c4:bd:ba:74:16:2f:21:6f:a6:9f:28: bd:4e:96:b3:40:6b:1a:76:e7:66:9a:55:ab:fb:bc:92:fd:4e: bb:b6:45:18:69:bb:47:0b:74:c4:44:9c:1d:f8:a9:74:4e:b5: 85:cc:11:88:05:0a:35:bf:4e:c2:c4:b5:51:a3:1a:ce:e7:d5: 6e:d3:31:b0:db:c7:15:d2:34:9f:10:c4:ee:7c:19:5e:b3:a7: 57:89:4a:79:8f:46:78:0e:1f:be:78:fd:79:6f:aa:fe:dc:2d: 34:3f:b6:e6:08:4c:38:d3:44:71:bd:72:66:bb:56:11:bc:b5: 10:b0:50:2d:4c:9a:92:00:5d:9e:90:2c:4d:fa:be:9a:4e:c0: e1:5e:84:2d:1d:1c:13:d6:27:42:c2:1a:4c:57:66:73:50:63: 6f:20:96:f9:58:96:02:c8:19:87:43:37:21:62:4e:c5:7a:ac: 81:1b:a1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFppY4gfopDsvSoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzIyY2NhYjktYWJlNS00OTg4LWE2Y2MtMGFkZmYxY2ZiNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk3BdhdUd3OONnT3v6ls+mCnMKLwnGVBtFOU /qhC2yFJB1Gj/2zJr1TckwtL0ZZeLBEoKJ5e0gl5qxI81k185BeGqJOpikCMcUMe 6sa6pUe1+UvRDza11BI06Wdu9gYITjMmFIcfaUzZBTuQ7fjxJ3VvI0OTpJd/gzAl BQzkfmFrgTTyHI0PUtCtL0A/n7s588ycdvox1I8GebGgrIHIXUA1UjYLMSkQy2Wi l5j2ayu3eFMCJFAyvcutqbxjO9P9VCnXIVtTBiwNhdDUxuTPTbIbHauepf92XFqV WfGD1a7sWnnGZqTQBr7tgozMbaJxNgWx5+XEj2G5+fagdEqz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqxvFY2R1nfC6GvIw1L2YYcTpHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY4MjU2ZDMtY2I3OC0z MTRjLWJiNDItNTMwNDEzYjI5NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMPI6mfs0ZnrwDwrgeiW63yKHiolZTmwDuViV6b7lNLmotgeQV+Gd74 rSraXwEePFHvIgNv0m/8raW5bLbkDMZBjYzOtRf+tVOyf5XdXBbEvbp0Fi8hb6af KL1OlrNAaxp252aaVav7vJL9Tru2RRhpu0cLdMREnB34qXROtYXMEYgFCjW/TsLE tVGjGs7n1W7TMbDbxxXSNJ8QxO58GV6zp1eJSnmPRngOH754/Xlvqv7cLTQ/tuYI TDjTRHG9cma7VhG8tRCwUC1MmpIAXZ6QLE36vppOwOFehC0dHBPWJ0LCGkxXZnNQ Y28glvlYlgLIGYdDNyFiTsV6rIEboUg= -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:11 2025 by rpki-client