This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa File: c0286517-a220-316a-b592-8b2237a7fea3.roa (raw, json) Hash identifier: 6po2SDT3hJz0U88PxiBhyoDhygg2vbzZh+W12TM8/Pg= Subject key identifier: A8:82:60:DC:10:5E:EB:B6:0B:B1:A0:9D:9B:7B:5C:97:C2:D4:02:EF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871CF18B9A45C9446DD1820 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.17.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:cf:18:b9:a4:5c:94:46:dd:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=65827bcd-f9aa-41d6-b2a2-d50f955fbb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:5e:b0:37:8c:41:24:0b:93:06:da:0a:d0: 57:18:47:45:e4:f2:31:78:f4:2f:41:cb:64:cd:91: 90:55:8f:8e:76:bd:86:a9:3e:9b:88:fc:bc:46:97: 83:00:a1:80:fe:1c:15:9e:76:15:c1:03:c6:f2:d1: 64:28:ae:ed:dc:3c:a9:c7:e2:6b:5e:b1:e7:bf:02: af:e2:6c:a1:36:5d:0e:e3:cf:2a:d1:62:2d:ce:f6: f7:4c:74:d2:82:e2:5f:36:39:77:b7:2f:35:05:bc: 41:d2:ad:3d:c4:b1:2f:be:79:ba:26:8d:9d:c7:3c: b3:8c:79:0f:81:2b:3f:bb:ae:00:e7:60:cb:6d:c4: 81:64:fa:d0:dd:9c:d3:8f:d3:45:f4:bb:de:93:91: 4d:fb:38:a0:c1:ad:57:58:fb:01:0a:c7:42:bb:85: 78:5b:d7:3f:90:11:a5:0e:7f:2a:49:a8:32:15:68: 29:ef:7d:43:fd:72:ce:bd:8a:48:68:92:29:1c:69: ec:0f:42:b5:f4:12:db:0d:4e:11:22:d1:93:37:a6: ac:66:d1:96:c6:92:a9:86:7e:ea:0d:4b:87:4c:67: e3:04:35:54:62:bc:79:09:a3:df:d1:6a:28:9c:05: b7:b1:f1:c3:30:c6:44:54:32:46:14:05:41:0e:d3: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:60:DC:10:5E:EB:B6:0B:B1:A0:9D:9B:7B:5C:97:C2:D4:02:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f2:80:5a:d8:76:eb:42:95:d6:d5:77:7b:b1:ec:f6:96:c9: 56:79:01:e3:48:e1:5a:37:98:7d:16:8d:4f:37:19:f2:a4:d3: f0:03:65:7a:07:3c:2a:38:43:c3:58:a6:ab:88:61:20:90:6b: 5a:bc:65:78:52:1f:a1:af:42:ab:70:c3:d4:fa:a7:e4:44:f8: 3b:65:3b:8e:50:b9:40:f2:fc:a5:48:4d:9a:a0:60:f0:d8:42: 0c:a9:c2:4e:a5:95:0d:83:8b:0e:8b:cc:f7:8d:53:10:b6:00: 7a:c3:07:89:ae:06:88:7a:01:02:ff:1f:6e:41:5c:d6:12:68: 55:04:36:69:17:3d:d3:e3:c1:7e:36:0d:af:34:15:00:36:08: 16:6c:2c:d2:4b:0a:fa:d6:9c:f4:8f:bf:ec:80:cd:ad:c6:7e: 9f:bb:af:75:93:c4:75:c7:e9:09:61:24:67:83:8f:ce:eb:9d: 13:f0:e9:7f:5d:ba:62:f2:f2:bc:8a:1a:f7:b3:f9:36:d4:72: e1:76:05:b5:47:e4:d2:4b:f0:e1:56:e5:14:ae:5c:eb:fa:b5: fd:b2:66:cb:ef:02:ab:66:20:38:43:1d:fd:ff:61:77:4a:ef: 36:a9:5b:27:cd:c8:02:71:cf:2e:b8:79:cd:71:28:69:0f:67: 26:84:88:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcc8YuaRclEbdGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NjU4MjdiY2QtZjlhYS00MWQ2LWIyYTItZDUwZjk1NWZiYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4hesDeMQSQLkwbaCtBXGEdF5PIxePQvQctk zZGQVY+Odr2GqT6biPy8RpeDAKGA/hwVnnYVwQPG8tFkKK7t3Dypx+JrXrHnvwKv 4myhNl0O488q0WItzvb3THTSguJfNjl3ty81BbxB0q09xLEvvnm6Jo2dxzyzjHkP gSs/u64A52DLbcSBZPrQ3ZzTj9NF9Lvek5FN+zigwa1XWPsBCsdCu4V4W9c/kBGl Dn8qSagyFWgp731D/XLOvYpIaJIpHGnsD0K19BLbDU4RItGTN6asZtGWxpKphn7q DUuHTGfjBDVUYrx5CaPf0WoonAW3sfHDMMZEVDJGFAVBDtN9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiCYNwQXuu2C7GgnZt7XJfC1ALvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzAyODY1MTctYTIyMC0z MTZhLWI1OTItOGIyMjM3YTdmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLygFrYdutCldbVd3ux7PaWyVZ5AeNI4Vo3mH0WjU83GfKk0/ADZXoH PCo4Q8NYpquIYSCQa1q8ZXhSH6GvQqtww9T6p+RE+DtlO45QuUDy/KVITZqgYPDY Qgypwk6llQ2Diw6LzPeNUxC2AHrDB4muBoh6AQL/H25BXNYSaFUENmkXPdPjwX42 Da80FQA2CBZsLNJLCvrWnPSPv+yAza3Gfp+7r3WTxHXH6QlhJGeDj87rnRPw6X9d umLy8ryKGvez+TbUcuF2BbVH5NJL8OFW5RSuXOv6tf2yZsvvAqtmIDhDHf3/YXdK 7zapWyfNyAJxzy64ec1xKGkPZyaEiNs= -----END CERTIFICATE-----Generated at Wed Dec 24 10:33:02 2025 by rpki-client