This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa File: b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa (raw, json) Hash identifier: KcTP8JAx1Uhv3O+QS5/BxU2YKboq6CT6e+fK7NtmFgY= Subject key identifier: 33:91:E8:3E:8D:B8:D4:57:B3:2A:C7:90:F6:58:22:48:40:B6:B5:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B12664DC833E0B41EAD540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.23.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:26:64:dc:83:3e:0b:41:ea:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=cf342248-3f42-4269-a5f1-46dc7e097641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:41:d2:d5:33:49:1a:ce:d0:c6:11:67:9f: b9:d1:22:fd:f7:6c:7c:99:3c:4a:30:ef:33:f1:e4: 8f:5d:4c:0e:51:e1:e6:89:37:99:af:a1:2a:5f:5f: ed:bb:81:30:1e:90:fb:d7:18:cd:be:71:7e:7b:41: 96:eb:45:b0:55:69:84:ea:4c:34:6b:41:ba:a6:eb: 74:b2:9b:05:ac:6f:7b:17:79:fc:2f:21:a7:74:5e: 71:13:d0:c0:c7:cf:e6:96:79:f9:e7:75:c0:dc:f4: 70:bf:50:39:ed:41:1c:47:5b:1f:a7:9c:ef:f4:fd: 1c:97:ad:b6:ee:3c:bf:a0:81:7b:b3:63:d8:ba:6b: 2b:2b:83:b4:e0:96:e0:2e:03:03:4d:9d:7d:f8:10: 4e:c4:05:93:55:1f:64:a5:c9:52:28:f0:13:d8:fe: b1:15:3b:18:73:a7:74:4e:bc:01:b5:8e:a0:60:21: 90:ff:b5:79:c3:55:6e:1d:1f:9c:d8:26:5a:08:ba: ad:1d:6d:34:85:60:62:c8:9d:69:ef:62:65:2e:29: c2:7f:00:d9:4c:48:5a:49:73:e5:ec:ea:95:fe:45: 51:c0:f0:c6:63:da:09:7c:89:97:cf:60:d2:7a:b4: 2b:9c:d5:ec:20:39:be:85:ea:04:cb:df:42:fb:37: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:91:E8:3E:8D:B8:D4:57:B3:2A:C7:90:F6:58:22:48:40:B6:B5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:09:8a:b1:c2:fa:46:13:01:58:a4:5b:3b:ff:1c:32:19:d7: 6c:af:8b:83:56:61:29:c2:bf:31:c7:de:bb:84:8d:87:c5:38: 09:ba:63:46:bc:e9:3a:4a:dd:70:7d:b1:c2:d8:c5:3c:d0:6a: 66:21:38:c7:0e:c0:d4:f5:e7:a7:fa:5c:15:0c:b1:91:02:73: 62:69:41:c3:36:03:46:5f:86:d2:54:9c:12:5b:de:ce:6f:b6: bc:ea:7a:4a:76:f6:3e:39:fc:b7:aa:84:91:7f:53:f5:c3:cf: e2:5e:9e:61:6a:ef:e1:17:f6:e9:a4:81:4b:ca:4b:df:4c:f1: d2:67:7c:45:dd:3b:d4:6f:59:db:0c:e7:7f:0a:d5:33:e3:23: f6:2f:e5:9c:6e:e3:9d:c8:71:f0:53:dd:49:b5:77:19:cf:d3: 65:bb:86:be:21:f7:21:a3:c6:49:78:14:6e:95:14:77:e3:e6: 18:de:ee:74:31:82:0e:07:fe:5f:e2:05:56:1d:9d:11:83:ce: eb:fd:3a:0d:91:c9:00:6b:37:26:f4:9c:e3:05:ea:b1:11:e3: 5d:47:18:87:9c:4f:7c:2e:93:75:68:bd:d3:33:68:cd:ea:55: 5b:ed:a1:7b:c2:80:d2:ad:60:a5:76:58:93:67:b6:99:46:68: c7:8d:c7:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sSZk3IM+C0Hq1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk Y2YzNDIyNDgtM2Y0Mi00MjY5LWE1ZjEtNDZkYzdlMDk3NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a5B0tUzSRrO0MYRZ5+50SL992x8mTxKMO8z 8eSPXUwOUeHmiTeZr6EqX1/tu4EwHpD71xjNvnF+e0GW60WwVWmE6kw0a0G6put0 spsFrG97F3n8LyGndF5xE9DAx8/mlnn553XA3PRwv1A57UEcR1sfp5zv9P0cl622 7jy/oIF7s2PYumsrK4O04JbgLgMDTZ19+BBOxAWTVR9kpclSKPAT2P6xFTsYc6d0 TrwBtY6gYCGQ/7V5w1VuHR+c2CZaCLqtHW00hWBiyJ1p72JlLinCfwDZTEhaSXPl 7OqV/kVRwPDGY9oJfImXz2DSerQrnNXsIDm+heoEy99C+zemoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOR6D6NuNRXsyrHkPZYIkhAtrUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjk1ZmU1ZTItOWZlZS0z OGU5LWE0NmEtNjRkZWQ3NDhlNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwJirHC+kYTAVikWzv/HDIZ12yvi4NWYSnCvzHH3ruEjYfFOAm6Y0a8 6TpK3XB9scLYxTzQamYhOMcOwNT156f6XBUMsZECc2JpQcM2A0ZfhtJUnBJb3s5v trzqekp29j45/LeqhJF/U/XDz+JenmFq7+EX9umkgUvKS99M8dJnfEXdO9RvWdsM 538K1TPjI/Yv5Zxu453IcfBT3Um1dxnP02W7hr4h9yGjxkl4FG6VFHfj5hje7nQx gg4H/l/iBVYdnRGDzuv9Og2RyQBrNyb0nOMF6rER411HGIecT3wuk3VovdMzaM3q VVvtoXvCgNKtYKV2WJNntplGaMeNxyY= -----END CERTIFICATE-----Generated at Sat Dec 20 12:10:53 2025 by rpki-client