This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d33b34a3-6eeb-3c60-9d65-d21d301d3fd6.roa File: d33b34a3-6eeb-3c60-9d65-d21d301d3fd6.roa (raw, json) Hash identifier: 49Ge26OXhEdAHhUJTWkBYpgMssngQcP6zL+7A4SUbMc= Subject key identifier: CE:A1:42:B8:AF:65:5B:3A:4E:C7:C4:43:1F:C7:8B:DA:6A:45:D2:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C1D2B7977CB44A47ACB712800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d33b34a3-6eeb-3c60-9d65-d21d301d3fd6.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.18.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:79:77:cb:44:a4:7a:cb:71:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=795eb6fa-559a-4155-b158-4fe51c11e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:76:53:dd:9d:3a:fd:8c:06:1c:83:90:c6: 9d:10:2e:42:aa:ce:ac:f3:37:97:61:15:84:37:c0: ef:6d:be:d0:00:77:5e:00:c0:f9:55:0a:9d:39:f8: ac:f7:05:49:3e:ac:fb:ca:e0:0a:6c:14:04:0c:e4: 96:3f:62:54:78:af:8b:85:91:65:9b:6b:02:d0:72: 7a:40:69:39:99:7f:e9:e2:81:40:2c:9c:01:5c:d0: 0b:0b:2d:94:22:04:07:d1:2c:40:fc:42:59:c0:f0: b4:44:49:b2:b9:dd:2c:e6:38:11:e3:85:82:d6:a3: ec:0b:37:29:3b:7b:ee:40:b7:75:12:87:f9:35:53: be:4d:3a:a3:9a:57:72:3d:00:eb:33:64:ed:0f:5c: 44:0a:d6:c3:5c:45:3d:7e:54:f8:bf:2c:85:87:ce: ac:65:f2:a7:2f:de:81:c9:64:e1:b3:b5:ec:d4:16: a2:4c:2c:db:3d:f2:ce:db:86:07:bd:f3:6d:ab:e6: b7:2c:38:68:aa:bc:af:30:76:83:9a:cd:80:98:89: e1:08:e2:e8:cb:76:96:b9:b5:47:58:ca:74:48:0c: 36:59:67:4a:93:de:c7:e8:a4:3f:72:52:bb:30:4e: d7:95:d0:51:89:df:bf:21:8e:36:fc:28:21:73:0b: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:42:B8:AF:65:5B:3A:4E:C7:C4:43:1F:C7:8B:DA:6A:45:D2:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d33b34a3-6eeb-3c60-9d65-d21d301d3fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:50:4b:24:0b:51:96:63:5f:f4:ff:17:20:e8:3d:cd:70:84: 7a:92:5c:53:12:5a:b1:fc:00:ae:7d:69:d3:27:89:a7:04:c6: fa:d3:ab:6f:db:f0:f6:e9:78:74:97:41:15:e1:fc:7d:b4:cd: b4:c9:49:e1:d1:79:f5:b3:9c:0e:d5:af:d7:80:65:57:30:c0: 3a:32:85:1a:38:26:1e:55:ac:14:eb:85:cc:50:13:41:cd:02: b4:17:88:a1:98:bb:4e:10:2a:85:2d:c5:5d:b0:97:e9:80:bd: 70:4c:48:e6:a4:a6:aa:e9:24:60:c5:34:5c:40:9a:c9:bb:6e: d0:1c:d1:a2:9d:9d:f4:8a:79:c1:d1:bc:ac:b7:6f:93:da:5c: ef:99:00:61:2e:42:0c:f0:1b:78:ac:23:f6:d2:13:10:c7:2a: 57:0b:03:a0:9a:3c:dc:3b:fc:a5:30:41:24:26:55:d3:07:e0: 2c:b2:b8:2e:b3:c2:62:7d:33:cd:9d:b0:d6:d4:48:e1:ed:d4: 6a:2e:05:ab:3c:8d:a3:ec:ae:cb:dd:ae:97:d6:ec:63:71:c9: 70:29:7a:0d:0a:e5:37:cf:e1:af:9c:50:84:28:0d:4f:ba:91: 0b:a0:9d:91:80:fa:c4:e1:8c:1f:c3:63:27:fc:a0:d8:7c:c1: 01:3a:d3:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3l3y0SkestxKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk Nzk1ZWI2ZmEtNTU5YS00MTU1LWIxNTgtNGZlNTFjMTFlNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmh2U92dOv2MBhyDkMadEC5Cqs6s8zeXYRWE N8Dvbb7QAHdeAMD5VQqdOfis9wVJPqz7yuAKbBQEDOSWP2JUeK+LhZFlm2sC0HJ6 QGk5mX/p4oFALJwBXNALCy2UIgQH0SxA/EJZwPC0REmyud0s5jgR44WC1qPsCzcp O3vuQLd1Eof5NVO+TTqjmldyPQDrM2TtD1xECtbDXEU9flT4vyyFh86sZfKnL96B yWThs7Xs1BaiTCzbPfLO24YHvfNtq+a3LDhoqryvMHaDms2AmInhCOLoy3aWubVH WMp0SAw2WWdKk97H6KQ/clK7ME7XldBRid+/IY42/Cghcwv0ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6hQrivZVs6TsfEQx/Hi9pqRdKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDMzYjM0YTMtNmVlYi0z YzYwLTlkNjUtZDIxZDMwMWQzZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtQSyQLUZZjX/T/FyDoPc1whHqSXFMSWrH8AK59adMniacExvrTq2/b 8PbpeHSXQRXh/H20zbTJSeHRefWznA7Vr9eAZVcwwDoyhRo4Jh5VrBTrhcxQE0HN ArQXiKGYu04QKoUtxV2wl+mAvXBMSOakpqrpJGDFNFxAmsm7btAc0aKdnfSKecHR vKy3b5PaXO+ZAGEuQgzwG3isI/bSExDHKlcLA6CaPNw7/KUwQSQmVdMH4CyyuC6z wmJ9M82dsNbUSOHt1GouBas8jaPsrsvdrpfW7GNxyXApeg0K5TfP4a+cUIQoDU+6 kQugnZGA+sThjB/DYyf8oNh8wQE6068= -----END CERTIFICATE-----Generated at Sat Dec 20 13:32:31 2025 by rpki-client