This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa File: a0388682-f011-3f25-a315-590c70213ae3.roa (raw, json) Hash identifier: a0zygYw3ht2O1qkyX64j/3FxYtDN0GHv1Uv7M8v3TVE= Subject key identifier: 78:EE:C4:09:CF:85:03:83:21:6E:5A:D0:D8:38:6F:FB:91:CE:2F:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C26F0ED79F78F148B27C99260 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 173.23.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:ed:79:f7:8f:14:8b:27:c9:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=b3ee7980-b4b6-46f9-91a0-c2ed3ff02620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:64:5a:b0:72:14:79:75:5a:b1:62:f1:c6: 48:44:4c:6c:7d:77:0c:89:c3:96:58:54:36:61:cb: 43:a4:8d:ef:99:ca:0e:c6:3e:14:47:e8:58:03:48: 4b:11:7a:73:1b:ed:8e:01:92:b7:f5:bb:15:cb:d5: d8:86:cc:03:00:61:6b:a0:73:6c:17:b6:36:e0:10: 7e:c7:f6:46:40:fc:75:0e:91:e5:44:12:f1:0b:31: 86:e2:18:28:95:81:46:79:42:13:c3:90:3c:34:24: 7a:32:d8:c9:1b:26:35:1d:01:b1:26:d0:20:6a:b8: 87:44:58:b6:16:85:21:14:cc:50:2f:76:86:87:15: 3b:32:57:58:0e:54:09:2a:d2:2e:ce:05:d8:66:38: 32:cd:69:46:61:27:cc:95:69:b1:d9:5f:97:d8:47: 00:9d:3b:1f:4c:27:01:f8:9b:59:5b:83:ae:a6:83: 30:c6:a0:43:1b:19:e5:0a:dd:1b:1d:7a:ed:a8:e3: 88:35:a2:02:43:ff:d8:02:ff:da:58:4f:3b:27:e6: 4c:c0:f0:7c:8a:1a:e7:e5:67:77:97:2b:81:31:54: 4b:7e:63:f9:c1:39:61:f4:4e:cf:b8:10:78:eb:61: fa:6a:3b:90:28:fc:90:eb:6b:fd:8e:f4:a1:ff:9a: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EE:C4:09:CF:85:03:83:21:6E:5A:D0:D8:38:6F:FB:91:CE:2F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:07:bb:51:59:49:55:07:27:51:1e:c5:b3:3c:8c:d2:e7:6a: 11:b9:6c:b0:a8:7a:98:1a:58:44:df:d6:45:7e:d5:2e:a9:be: fe:6c:37:4d:11:f6:13:95:c6:60:5f:4a:65:6b:31:95:3c:18: 4c:b4:2c:b4:b6:7c:59:64:2d:78:a7:41:cb:5a:5e:83:15:72: a5:9b:c4:af:dc:28:e4:8c:80:05:9c:60:34:53:f2:74:c9:a6: d2:73:fd:53:71:45:0d:8d:a8:32:8a:ee:bd:ce:d7:92:16:75: bd:f2:9b:d7:fa:e9:03:be:bc:6d:b8:a8:24:c0:8e:39:fc:4b: 69:b8:bf:53:fe:10:7d:eb:6c:57:85:b9:e8:b9:94:35:1e:ac: f1:95:c0:44:6e:56:fe:2b:02:eb:64:33:c2:46:43:a9:bd:8e: 36:97:80:99:0b:f6:8e:26:34:75:00:c4:75:ca:32:b0:64:ab: 49:59:b4:a7:00:2d:c8:19:c0:00:a9:97:77:cd:07:a3:05:ab: fa:30:a5:c6:23:6f:92:54:79:21:f0:df:ae:2b:0d:06:6a:8b: bf:23:11:07:24:80:f4:98:83:ac:65:07:08:af:3a:14:ed:ca: cc:8f:23:1a:cd:3d:18:25:81:74:58:72:e4:ed:e2:41:5a:f7: d2:c7:c8:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8O15948UiyfJkmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk YjNlZTc5ODAtYjRiNi00NmY5LTkxYTAtYzJlZDNmZjAyNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5hkWrByFHl1WrFi8cZIRExsfXcMicOWWFQ2 YctDpI3vmcoOxj4UR+hYA0hLEXpzG+2OAZK39bsVy9XYhswDAGFroHNsF7Y24BB+ x/ZGQPx1DpHlRBLxCzGG4hgolYFGeUITw5A8NCR6MtjJGyY1HQGxJtAgariHRFi2 FoUhFMxQL3aGhxU7MldYDlQJKtIuzgXYZjgyzWlGYSfMlWmx2V+X2EcAnTsfTCcB +JtZW4OupoMwxqBDGxnlCt0bHXrtqOOINaICQ//YAv/aWE87J+ZMwPB8ihrn5Wd3 lyuBMVRLfmP5wTlh9E7PuBB462H6ajuQKPyQ62v9jvSh/5rFzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjuxAnPhQODIW5a0Ng4b/uRzi+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTAzODg2ODItZjAxMS0z ZjI1LWEzMTUtNTkwYzcwMjEzYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Hu1FZSVUHJ1EexbM8jNLnahG5bLCoepgaWETf1kV+1S6pvv5sN00R 9hOVxmBfSmVrMZU8GEy0LLS2fFlkLXinQctaXoMVcqWbxK/cKOSMgAWcYDRT8nTJ ptJz/VNxRQ2NqDKK7r3O15IWdb3ym9f66QO+vG24qCTAjjn8S2m4v1P+EH3rbFeF uei5lDUerPGVwERuVv4rAutkM8JGQ6m9jjaXgJkL9o4mNHUAxHXKMrBkq0lZtKcA LcgZwACpl3fNB6MFq/owpcYjb5JUeSHw364rDQZqi78jEQckgPSYg6xlBwivOhTt ysyPIxrNPRglgXRYcuTt4kFa99LHyCk= -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:46 2025 by rpki-client