This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af064a96-4023-3e12-b0dd-2a140d93700e.roa File: af064a96-4023-3e12-b0dd-2a140d93700e.roa (raw, json) Hash identifier: Qjv92UAb4YrFe9E9hZsUbX64olEVjS0paznkMDzMKEo= Subject key identifier: A4:E4:61:7A:F2:31:D8:0D:18:CD:A1:EA:31:76:FC:11:5A:D4:1E:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C26F0EC342E69E62E51157680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af064a96-4023-3e12-b0dd-2a140d93700e.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 173.24.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:ec:34:2e:69:e6:2e:51:15:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=f28598c3-6721-4a16-8844-d4ed39e0099c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:0e:24:20:f9:cc:57:f0:19:79:c4:05:d0: 05:0b:90:68:dc:d1:af:bd:6a:85:04:11:7a:a4:ba: 41:f0:c9:68:d5:a9:7e:d1:52:f1:81:44:a3:c1:d1: b5:19:69:92:69:f9:90:dd:c6:fe:bb:f3:6e:d8:3a: 50:cf:00:f5:07:d7:18:ee:e8:d2:3c:6e:d3:03:db: de:25:15:77:6a:92:ba:f7:55:22:fa:6b:c0:81:06: 15:38:e6:5c:be:4d:d3:83:9d:9c:ae:cb:17:e7:06: 3b:aa:99:b9:e7:b4:c2:81:35:eb:38:2c:eb:ed:ab: cd:d4:49:68:15:b3:b4:e3:ec:6c:f8:78:63:bb:fd: 9f:51:63:29:88:0a:5f:ff:de:c3:5a:93:30:76:5e: 39:cc:f2:fa:5e:fd:0b:4a:c5:0d:e9:bd:26:d6:3f: 3f:ce:45:42:98:fa:61:07:ac:c9:8b:9e:c4:16:59: aa:c8:da:e5:85:fd:0c:01:d5:c0:d3:60:32:b0:ca: 8a:87:6b:6b:e9:a3:fd:e8:e4:c8:b7:f5:20:f8:b2: 04:dd:6b:db:f5:d8:db:01:09:e5:03:c6:ea:97:fe: db:4c:25:14:2a:8a:9a:c8:b8:66:23:0a:86:6b:62: 6d:c5:31:80:ce:db:f0:06:7b:c5:f5:13:86:a1:51: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E4:61:7A:F2:31:D8:0D:18:CD:A1:EA:31:76:FC:11:5A:D4:1E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af064a96-4023-3e12-b0dd-2a140d93700e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e6:ca:f1:c1:87:c1:38:68:e6:84:f0:fd:da:71:bc:bf:86: b3:3f:70:1e:02:10:4d:4f:36:1c:15:ac:fd:02:6b:3c:86:09: 03:d8:07:3e:ba:cf:2b:33:a1:44:ee:b0:52:c5:10:09:61:3a: 90:8d:33:7d:73:b3:3b:81:d8:30:d1:4c:02:7c:04:c5:ab:00: b6:3c:1c:5a:e5:0b:88:16:32:65:67:e0:1b:f8:ae:ab:db:29: cd:95:d1:9c:47:6f:61:21:0f:f7:b2:41:75:9f:18:66:8e:84: d4:95:41:8b:f0:19:d4:3a:97:10:78:c5:13:e1:92:6b:99:6b: 0d:12:c6:13:82:4f:88:d3:65:28:76:d1:74:34:0a:81:73:7b: f2:86:f2:85:23:54:dd:1f:83:6e:74:ab:e0:c2:39:c7:15:19: 25:69:70:54:a1:a1:46:5c:66:0c:42:66:fe:ac:66:29:08:99: bf:b4:e0:ff:4a:d7:6d:a1:40:ed:09:00:74:eb:73:29:5f:a4: c8:c8:01:1f:39:b7:69:42:d6:c6:c5:cf:6e:05:a8:c7:cd:aa: 82:c9:c4:3f:c2:26:f2:cf:e8:6e:74:96:73:25:78:a6:a0:c3: 8c:2d:6d:50:3a:58:6e:0b:b1:f8:72:d8:c2:d8:e1:15:d4:5c: 94:26:23:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8Ow0LmnmLlEVdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZjI4NTk4YzMtNjcyMS00YTE2LTg4NDQtZDRlZDM5ZTAwOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArksOJCD5zFfwGXnEBdAFC5Bo3NGvvWqFBBF6 pLpB8Mlo1al+0VLxgUSjwdG1GWmSafmQ3cb+u/Nu2DpQzwD1B9cY7ujSPG7TA9ve JRV3apK691Ui+mvAgQYVOOZcvk3Tg52crssX5wY7qpm557TCgTXrOCzr7avN1Elo FbO04+xs+Hhju/2fUWMpiApf/97DWpMwdl45zPL6Xv0LSsUN6b0m1j8/zkVCmPph B6zJi57EFlmqyNrlhf0MAdXA02AysMqKh2tr6aP96OTIt/Ug+LIE3Wvb9djbAQnl A8bql/7bTCUUKoqayLhmIwqGa2JtxTGAztvwBnvF9ROGoVGEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTkYXryMdgNGM2h6jF2/BFa1B4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYwNjRhOTYtNDAyMy0z ZTEyLWIwZGQtMmExNDBkOTM3MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnmyvHBh8E4aOaE8P3acby/hrM/cB4CEE1PNhwVrP0CazyGCQPYBz66 zyszoUTusFLFEAlhOpCNM31zszuB2DDRTAJ8BMWrALY8HFrlC4gWMmVn4Bv4rqvb Kc2V0ZxHb2EhD/eyQXWfGGaOhNSVQYvwGdQ6lxB4xRPhkmuZaw0SxhOCT4jTZSh2 0XQ0CoFze/KG8oUjVN0fg250q+DCOccVGSVpcFShoUZcZgxCZv6sZikImb+04P9K 122hQO0JAHTrcylfpMjIAR85t2lC1sbFz24FqMfNqoLJxD/CJvLP6G50lnMleKag w4wtbVA6WG4Lsfhy2MLY4RXUXJQmI7E= -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:03 2025 by rpki-client