This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9688429-4443-3857-85f5-019546f02e81.roa File: a9688429-4443-3857-85f5-019546f02e81.roa (raw, json) Hash identifier: IIw1ezsS+gvaHty+TPuc2Y8Tk8XUZ9JSNyxDabAt2GI= Subject key identifier: 32:D0:A2:31:E8:FD:0B:DD:15:FF:27:EC:14:F0:88:86:6C:10:CD:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C3BE1334AE6A3552460B6EE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9688429-4443-3857-85f5-019546f02e81.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 19905 IP address blocks: 173.23.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:33:4a:e6:a3:55:24:60:b6:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=d6135ea2-72b5-4f54-9d88-df53012a8ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:fd:7b:8e:09:b9:72:f2:23:af:75:3b:b8: c8:92:04:86:c0:80:fc:c2:ec:9e:fc:95:de:0f:86: 67:89:73:d9:ed:69:73:ea:32:22:cb:cd:86:15:cf: a6:6f:d5:d5:59:db:6f:35:62:c7:a8:5e:6d:f7:29: 65:53:56:01:9d:0f:62:96:d2:b2:b7:d9:8c:2e:61: cc:ce:66:4a:c4:ab:33:29:c8:25:49:b5:05:12:81: a3:39:a7:26:77:8e:7d:97:3a:30:95:9e:5b:22:03: 17:63:2b:cb:76:ec:6d:59:cd:5c:df:bc:4b:5f:10: 5a:6e:b0:36:4d:4a:43:8e:20:12:92:37:94:48:ae: 26:a2:80:82:3a:a8:6f:6e:15:ed:87:76:d8:32:40: b2:df:4f:cb:63:95:98:1c:18:21:46:bf:b6:3c:17: a3:fd:c6:3d:b1:ce:f2:22:98:ae:62:91:b2:06:ad: 1f:f3:e5:28:9b:88:df:3c:91:53:e1:e1:14:04:cd: 50:44:4f:ba:26:61:96:f0:c4:a3:e5:57:94:30:cd: 30:52:00:9f:e1:6c:81:7d:9d:6b:e1:2e:79:d6:86: a4:75:b1:a7:53:c0:d3:71:51:70:07:58:8a:e5:f1: c0:0b:5e:1e:ca:dd:01:50:e4:fc:6a:e7:c2:99:55: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D0:A2:31:E8:FD:0B:DD:15:FF:27:EC:14:F0:88:86:6C:10:CD:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9688429-4443-3857-85f5-019546f02e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9b:d6:cf:2c:cb:42:f4:4c:5f:ac:51:6a:a6:b8:69:9e:96: 3f:f7:3d:ad:90:cc:e6:64:c9:0d:aa:44:1c:d5:0b:d7:c1:3d: 85:b1:21:ff:b1:80:32:56:e0:af:ba:3f:e7:27:87:08:18:ab: 17:fe:a6:e6:54:bf:1e:cd:c0:99:dc:4a:fb:36:59:11:2c:12: 83:5d:10:bb:98:1e:16:0b:67:f6:4d:78:42:ae:ef:cb:7d:8f: c8:7e:05:d2:90:61:7f:40:b4:2e:8b:86:60:e3:02:2c:d9:49: c3:e1:67:b9:c9:6f:41:9c:0e:8e:37:be:df:98:98:4e:55:f5: 3d:1d:25:66:e0:7a:69:5c:f8:24:58:64:16:ac:84:81:42:53: a3:47:29:bc:cf:76:1b:1e:be:d9:e7:e6:4b:d0:e0:8f:18:4e: 65:10:be:5f:26:22:a5:32:10:11:92:a7:6b:6f:9e:d4:da:1f: 67:4e:01:62:08:e9:da:30:03:03:a4:ca:01:1d:14:46:5d:1c: 25:53:19:38:8c:ad:ee:3e:a8:02:bf:b3:13:ac:c0:4f:50:06: 04:40:86:6f:41:53:17:66:3c:c6:37:bd:f0:73:78:3e:21:a2: dc:4a:6f:d6:da:a0:36:43:6a:a0:c9:37:1b:37:d5:66:57:38: 03:2d:05:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74TNK5qNVJGC27gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZDYxMzVlYTItNzJiNS00ZjU0LTlkODgtZGY1MzAxMmE4Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RP9e44JuXLyI691O7jIkgSGwID8wuye/JXe D4ZniXPZ7Wlz6jIiy82GFc+mb9XVWdtvNWLHqF5t9yllU1YBnQ9iltKyt9mMLmHM zmZKxKszKcglSbUFEoGjOacmd459lzowlZ5bIgMXYyvLduxtWc1c37xLXxBabrA2 TUpDjiASkjeUSK4mooCCOqhvbhXth3bYMkCy30/LY5WYHBghRr+2PBej/cY9sc7y IpiuYpGyBq0f8+Uom4jfPJFT4eEUBM1QRE+6JmGW8MSj5VeUMM0wUgCf4WyBfZ1r 4S551oakdbGnU8DTcVFwB1iK5fHAC14eyt0BUOT8aufCmVUTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLQojHo/QvdFf8n7BTwiIZsEM01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTk2ODg0MjktNDQ0My0z ODU3LTg1ZjUtMDE5NTQ2ZjAyZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6b1s8sy0L0TF+sUWqmuGmelj/3Pa2QzOZkyQ2qRBzVC9fBPYWxIf+x gDJW4K+6P+cnhwgYqxf+puZUvx7NwJncSvs2WREsEoNdELuYHhYLZ/ZNeEKu78t9 j8h+BdKQYX9AtC6LhmDjAizZScPhZ7nJb0GcDo43vt+YmE5V9T0dJWbgemlc+CRY ZBashIFCU6NHKbzPdhsevtnn5kvQ4I8YTmUQvl8mIqUyEBGSp2tvntTaH2dOAWII 6dowAwOkygEdFEZdHCVTGTiMre4+qAK/sxOswE9QBgRAhm9BUxdmPMY3vfBzeD4h otxKb9baoDZDaqDJNxs31WZXOAMtBRg= -----END CERTIFICATE-----Generated at Sat Dec 20 13:47:55 2025 by rpki-client