This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa File: a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa (raw, json) Hash identifier: 7Mmx3Lxv/DEQd/ArM7OYFDM79mHbclJKQQOLtgc+Cb8= Subject key identifier: 87:D4:C3:13:D6:5D:3F:10:2B:39:7D:F1:AE:04:C4:3A:FB:2A:37:FC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B1233F53E54BF3D8685680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.17.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:23:3f:53:e5:4b:f3:d8:68:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=da8c9545-f103-4a25-9b62-c54bf255afef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:0e:76:6c:87:f6:76:70:c0:00:f0:c5:83: 12:e8:c6:aa:a9:13:05:31:67:f6:fa:e5:27:99:8c: 8c:55:5e:f2:13:3d:d6:88:60:e4:7d:73:9f:1d:92: f9:8f:d3:d5:44:28:74:26:06:1e:54:09:83:e8:79: fb:ec:59:14:1d:69:30:63:87:f9:4f:2c:e9:02:54: 11:3b:e7:3a:91:e7:d5:b6:47:55:36:e8:ec:85:f2: 65:bf:33:cd:07:7c:5c:dd:aa:9e:64:3f:75:23:61: 1d:69:24:fd:1c:4c:cd:d3:7e:5d:f9:85:42:2f:8f: 46:36:9b:f1:2a:46:f7:c6:25:08:96:55:40:4f:57: bd:62:f2:2d:71:7e:19:9f:bb:e3:b3:f3:e8:d8:6b: 01:a2:28:1d:c8:d3:c9:2e:e6:46:2c:33:a7:8f:d9: 83:52:5d:15:85:e8:97:7c:e3:62:1e:86:4f:f4:38: bb:e9:67:a5:91:3a:30:f0:36:55:d5:51:4c:10:8b: c1:05:78:22:f2:8d:6c:88:b9:b2:a0:b8:b6:72:c7: 5a:8f:26:c6:cc:be:52:5a:44:b0:ff:85:e3:68:3b: 92:f4:fc:26:66:d0:a6:93:c0:b0:d3:7d:1d:c5:e4: 42:55:9e:04:40:ee:f8:45:54:11:dc:b7:3b:a2:e0: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:C3:13:D6:5D:3F:10:2B:39:7D:F1:AE:04:C4:3A:FB:2A:37:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7b:30:1d:9b:b6:67:ba:fe:2e:1b:88:f6:af:dd:3c:f3:b1: 7a:84:df:bf:d6:33:1f:ba:93:38:6f:91:ec:81:5b:a1:bf:3f: a7:db:85:a4:68:6d:8f:07:a1:d7:af:f5:73:17:1f:fd:ab:e6: d7:7a:80:92:8d:8a:cc:12:fd:97:aa:3d:3e:b3:a3:81:3d:7a: 7e:55:f5:79:70:27:e9:b1:ed:cd:d5:02:24:04:62:5f:f9:3c: 96:5f:d1:06:a3:f9:ae:6f:f6:fc:58:06:8e:f2:6a:93:4d:f3: 6f:46:68:b6:41:dc:6b:8a:ee:ed:eb:62:ce:50:c8:cf:f9:b2: 75:6c:e2:49:86:53:0b:8e:28:e0:ba:61:74:80:3f:8f:9f:fb: 82:c7:4b:cb:66:bf:52:7e:cc:21:65:2d:c6:b5:f5:d8:55:82: c0:cf:38:ea:6a:65:0c:fe:ea:e7:4d:2a:51:b2:1e:5d:9e:46: 53:da:03:c3:04:ed:01:51:1f:f7:c6:3a:b5:64:bd:dc:0a:8d: fe:17:6c:d4:81:47:19:88:4b:04:64:e8:c4:1b:c9:6e:08:00: 9e:6a:e8:cc:ba:57:8f:65:3d:01:39:14:18:63:de:9b:ad:8c: 95:eb:6a:14:9f:74:c1:e8:84:a0:38:eb:78:37:ca:b1:d0:35: e5:a5:9b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sSM/U+VL89hoVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk ZGE4Yzk1NDUtZjEwMy00YTI1LTliNjItYzU0YmYyNTVhZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpEOdmyH9nZwwADwxYMS6MaqqRMFMWf2+uUn mYyMVV7yEz3WiGDkfXOfHZL5j9PVRCh0JgYeVAmD6Hn77FkUHWkwY4f5TyzpAlQR O+c6kefVtkdVNujshfJlvzPNB3xc3aqeZD91I2EdaST9HEzN035d+YVCL49GNpvx Kkb3xiUIllVAT1e9YvItcX4Zn7vjs/Po2GsBoigdyNPJLuZGLDOnj9mDUl0VheiX fONiHoZP9Di76WelkTow8DZV1VFMEIvBBXgi8o1siLmyoLi2csdajybGzL5SWkSw /4XjaDuS9PwmZtCmk8Cw030dxeRCVZ4EQO74RVQR3Lc7ouD/rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfUwxPWXT8QKzl98a4ExDr7Kjf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdmYTdkZjMtNThhNi0z OGMzLThmNWEtMTc4ZDk5ZmE0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl7MB2btme6/i4biPav3TzzsXqE37/WMx+6kzhvkeyBW6G/P6fbhaRo bY8Hodev9XMXH/2r5td6gJKNiswS/ZeqPT6zo4E9en5V9XlwJ+mx7c3VAiQEYl/5 PJZf0Qaj+a5v9vxYBo7yapNN829GaLZB3GuK7u3rYs5QyM/5snVs4kmGUwuOKOC6 YXSAP4+f+4LHS8tmv1J+zCFlLca19dhVgsDPOOpqZQz+6udNKlGyHl2eRlPaA8ME 7QFRH/fGOrVkvdwKjf4XbNSBRxmISwRk6MQbyW4IAJ5q6My6V49lPQE5FBhj3put jJXrahSfdMHohKA463g3yrHQNeWlm+U= -----END CERTIFICATE-----Generated at Sat Dec 20 13:56:05 2025 by rpki-client