This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1972a54-b3d0-3a99-9592-99693f401f5c.roa File: d1972a54-b3d0-3a99-9592-99693f401f5c.roa (raw, json) Hash identifier: qARSzcnbaQmgs25VsqEe4b8Rp6f+XI+vJuYQOAbe9BE= Subject key identifier: A4:DA:22:ED:AB:6B:7F:9E:D5:E8:5C:93:74:47:85:4A:D7:EB:0E:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C26F0EECD5BB547D3AF6E7400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1972a54-b3d0-3a99-9592-99693f401f5c.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 173.31.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:ee:cd:5b:b5:47:d3:af:6e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=fb732bff-8a9a-4414-a6e6-bf73344f053e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:4f:56:c5:3e:7c:43:eb:e6:79:89:7c:dd: cf:d5:d1:8b:59:86:33:29:5d:52:9b:68:46:9a:36: 7d:ef:d9:af:fd:45:f4:ea:67:31:23:97:3d:4f:bf: 0f:e4:9c:a7:69:16:d6:dd:56:70:8b:5e:2f:8e:21: fe:ac:10:67:c2:55:ab:39:d3:02:6e:1b:c9:eb:40: 3f:6d:d1:80:20:c8:3e:2c:21:8e:f4:7c:4e:1f:54: 61:54:4f:a1:d9:2b:10:ff:8d:7f:69:41:40:ef:b6: 7f:41:de:a6:d3:39:08:b9:2d:07:a6:c5:c9:15:e7: ef:f1:45:3a:2b:af:89:f4:25:33:5c:a4:22:a2:be: 3c:7e:e9:a2:6d:38:cf:57:b3:42:08:0b:1b:fb:ce: 99:95:cf:c1:a7:b6:d2:cd:1f:cd:9d:28:88:42:e6: 91:9d:d3:d7:f1:8e:b0:40:a6:63:2f:47:c4:7d:74: 06:67:e0:0a:55:36:97:0f:2e:4e:4a:d9:02:d6:42: 64:5a:8d:5d:9e:b0:06:53:52:d4:3f:49:9c:a5:cd: 8e:95:a8:ca:5a:32:3a:a7:92:09:99:0c:7e:98:e6: 16:0d:ca:84:be:29:fb:ab:d5:ea:7b:15:8a:ff:27: c4:24:35:ce:1c:15:80:ac:1c:21:02:e5:99:fc:b8: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DA:22:ED:AB:6B:7F:9E:D5:E8:5C:93:74:47:85:4A:D7:EB:0E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1972a54-b3d0-3a99-9592-99693f401f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0b:d8:d0:9c:af:90:a8:9d:d8:17:b4:a0:71:6f:16:76:84: fd:46:da:42:03:41:13:fd:0b:5a:0c:95:73:d8:51:34:02:99: 45:b0:f0:8b:41:ea:c8:14:f4:6d:66:bd:e5:6d:d1:aa:4e:62: 5b:4e:3d:71:ef:70:05:39:f9:37:53:4a:d2:c2:d7:2b:75:45: cd:ca:5c:99:42:3f:a0:ae:1a:e1:43:a8:39:9e:23:d1:62:98: a3:d6:74:09:7f:71:ca:05:39:fc:64:32:96:77:48:1c:55:a1: 91:54:21:79:67:03:84:17:66:30:56:cd:8c:82:71:e6:5a:88: cd:71:c1:44:9b:0a:c8:5e:db:ba:a6:8b:3b:a3:ad:78:67:ff: 24:1e:66:76:94:71:0a:a8:5f:ac:3e:59:da:4f:bd:0f:ce:90: cd:3c:73:1f:84:24:c9:7b:9c:e5:d3:51:63:95:05:81:04:4e: 1c:dd:d8:57:f6:f0:4e:a9:ad:2b:a5:25:08:28:7d:f4:21:f3: 97:35:ae:bd:89:00:ca:f9:c9:66:9e:ad:aa:01:be:8e:2f:3e: f1:41:bb:eb:80:db:86:31:ca:ff:79:d7:bd:25:65:4d:d3:da: 7d:6a:42:d1:9e:4e:c3:27:78:3c:d0:84:b8:67:55:38:95:0a: c4:9c:6b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8O7NW7VH069udAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZmI3MzJiZmYtOGE5YS00NDE0LWE2ZTYtYmY3MzM0NGYwNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWtPVsU+fEPr5nmJfN3P1dGLWYYzKV1Sm2hG mjZ979mv/UX06mcxI5c9T78P5JynaRbW3VZwi14vjiH+rBBnwlWrOdMCbhvJ60A/ bdGAIMg+LCGO9HxOH1RhVE+h2SsQ/41/aUFA77Z/Qd6m0zkIuS0HpsXJFefv8UU6 K6+J9CUzXKQior48fumibTjPV7NCCAsb+86Zlc/Bp7bSzR/NnSiIQuaRndPX8Y6w QKZjL0fEfXQGZ+AKVTaXDy5OStkC1kJkWo1dnrAGU1LUP0mcpc2OlajKWjI6p5IJ mQx+mOYWDcqEvin7q9XqexWK/yfEJDXOHBWArBwhAuWZ/LjaEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTaIu2ra3+e1ehck3RHhUrX6w7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDE5NzJhNTQtYjNkMC0z YTk5LTk1OTItOTk2OTNmNDAxZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgL2NCcr5CondgXtKBxbxZ2hP1G2kIDQRP9C1oMlXPYUTQCmUWw8ItB 6sgU9G1mveVt0apOYltOPXHvcAU5+TdTStLC1yt1Rc3KXJlCP6CuGuFDqDmeI9Fi mKPWdAl/ccoFOfxkMpZ3SBxVoZFUIXlnA4QXZjBWzYyCceZaiM1xwUSbCshe27qm izujrXhn/yQeZnaUcQqoX6w+WdpPvQ/OkM08cx+EJMl7nOXTUWOVBYEEThzd2Ff2 8E6prSulJQgoffQh85c1rr2JAMr5yWaeraoBvo4vPvFBu+uA24Yxyv95170lZU3T 2n1qQtGeTsMneDzQhLhnVTiVCsSca4s= -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:34 2025 by rpki-client