This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa
File: c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa (raw, json)
Hash identifier: iZ831ivdxfhjSyDCgQugMETBNEl1EYxujV+uFxq9PqQ=
Subject key identifier: 00:76:10:40:7E:D0:80:66:B5:69:A0:6B:AC:30:D2:F3:D5:8A:D6:E7
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C22C0F0139B3FF58F06A73A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 19905
IP address blocks: 173.25.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:f0:13:9b:3f:f5:8f:06:a7:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=30de65a2-f489-461f-83f2-8b8ac6b68798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:95:cf:f4:86:d6:76:eb:fd:7d:e0:3d:2c:
0a:4a:56:ab:80:fd:5e:5d:80:a9:e5:0c:81:76:40:
c9:cd:58:af:b3:e7:f1:ec:91:3b:aa:84:c0:4b:8d:
55:1b:f4:d6:6d:10:d3:ad:82:12:29:93:2c:82:c0:
d1:6e:2b:55:d0:b3:47:3c:61:f1:58:82:0c:32:91:
4d:b1:95:81:d6:a9:4e:36:c8:ec:fd:1a:b2:bf:00:
4b:9f:63:7d:93:58:d5:b0:6a:2f:d6:3d:87:48:65:
cf:5c:fb:89:21:5b:4b:63:7a:db:45:f3:73:6c:b4:
33:24:c5:a2:df:e8:2a:17:54:6c:ca:9f:68:73:b8:
93:4c:e7:b3:17:d1:d2:e5:df:62:a2:9c:96:42:0f:
ad:2e:80:c1:cf:7f:b5:98:a2:cd:71:3a:f6:96:c9:
cd:b2:38:88:7c:d3:52:d3:ea:8f:91:97:dd:ae:c7:
5e:b4:2a:ba:39:14:ff:28:c3:a3:b4:66:f8:c4:bd:
5a:1b:46:08:1b:fa:14:26:80:2f:a6:70:21:04:4f:
ba:db:15:da:84:3f:a6:82:68:b1:75:63:81:d0:ee:
3e:b0:60:04:3d:7b:9b:dd:5a:47:30:7e:73:c2:a5:
e7:84:2f:12:04:b3:f1:15:01:02:6a:3d:c2:ad:44:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:10:40:7E:D0:80:66:B5:69:A0:6B:AC:30:D2:F3:D5:8A:D6:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:d3:7a:a5:cc:a4:4c:61:ef:7e:cb:6c:48:9a:b3:a4:4f:5b:
b2:2b:ab:94:cf:c4:40:e4:a6:b6:df:18:a3:7d:4a:3c:7f:db:
bc:d9:a7:9d:6c:47:ea:c3:54:88:ba:5a:e4:22:53:b0:1d:dd:
6c:98:67:21:c6:f5:e5:e6:2b:4f:5b:cb:61:1b:d1:83:e6:1d:
e4:0b:be:8f:48:55:fa:6e:fa:13:ec:27:dc:ac:df:a5:33:8a:
72:62:5e:a7:3e:84:a0:55:8d:83:5d:37:f8:0e:6a:f5:d2:5d:
6b:51:a5:f5:38:e9:69:a0:fc:c7:44:6d:4d:27:52:9c:16:3a:
17:8c:c1:eb:fe:fe:68:c9:de:5d:83:e0:e2:af:eb:8c:eb:38:
b1:47:a8:66:19:54:75:86:5f:35:3f:ba:4b:da:dc:77:3b:69:
ff:26:08:7f:ac:56:f7:d5:f5:40:d1:ef:6b:92:c8:05:e3:c8:
18:2f:c0:5c:05:8c:8d:bf:4a:77:af:16:5d:b7:4b:16:ba:05:
b9:05:54:2f:35:16:5b:35:6e:cd:0d:2e:56:ed:a5:18:a0:1a:
f3:10:f0:94:18:11:bc:c2:10:be:2a:21:64:1a:9c:ea:31:e8:
38:a4:0f:33:b1:fc:10:d3:3e:16:8b:e9:14:1e:dd:cc:d4:7c:
87:43:72:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwPATmz/1jwanOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk
MzBkZTY1YTItZjQ4OS00NjFmLTgzZjItOGI4YWM2YjY4Nzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVeVz/SG1nbr/X3gPSwKSlargP1eXYCp5QyB
dkDJzVivs+fx7JE7qoTAS41VG/TWbRDTrYISKZMsgsDRbitV0LNHPGHxWIIMMpFN
sZWB1qlONsjs/RqyvwBLn2N9k1jVsGov1j2HSGXPXPuJIVtLY3rbRfNzbLQzJMWi
3+gqF1Rsyp9oc7iTTOezF9HS5d9iopyWQg+tLoDBz3+1mKLNcTr2lsnNsjiIfNNS
0+qPkZfdrsdetCq6ORT/KMOjtGb4xL1aG0YIG/oUJoAvpnAhBE+62xXahD+mgmix
dWOB0O4+sGAEPXub3VpHMH5zwqXnhC8SBLPxFQECaj3CrUQP/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB2EEB+0IBmtWmga6ww0vPVitbnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk4OWZkNTUtMmQwMy0z
OWNlLWJiMmQtZTFhMTliMGRhOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjTeqXMpExh737LbEias6RPW7Irq5TPxEDkprbfGKN9Sjx/27zZp51s
R+rDVIi6WuQiU7Ad3WyYZyHG9eXmK09by2Eb0YPmHeQLvo9IVfpu+hPsJ9ys36Uz
inJiXqc+hKBVjYNdN/gOavXSXWtRpfU46Wmg/MdEbU0nUpwWOheMwev+/mjJ3l2D
4OKv64zrOLFHqGYZVHWGXzU/ukva3Hc7af8mCH+sVvfV9UDR72uSyAXjyBgvwFwF
jI2/SnevFl23Sxa6BbkFVC81Fls1bs0NLlbtpRigGvMQ8JQYEbzCEL4qIWQanOox
6DikDzOx/BDTPhaL6RQe3czUfIdDcig=
-----END CERTIFICATE-----
Generated at Thu Dec 18 10:30:14 2025 by rpki-client