This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa File: dbf3ccc6-818a-33aa-b232-2c839505e71f.roa (raw, json) Hash identifier: WYQT7G2Xl9gFKjjSYzIFfdziqOx/ZzGkFAT7fpS++Cs= Subject key identifier: 33:3E:C3:7C:EC:F6:AC:D6:53:EC:4F:87:98:5A:BE:FC:A8:13:EC:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8448858720B8676676780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.25.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:44:88:58:72:0b:86:76:67:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=309f905d-51b6-4742-bace-c45a322fd649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:06:86:e4:fc:30:78:23:f8:d2:49:aa:92: 1d:7b:3a:9b:0f:c0:80:6c:c3:aa:ac:ea:23:bb:d5: 09:48:28:ce:e3:2b:4c:ee:5f:1a:e5:43:ef:03:25: f7:9e:8f:fa:17:2e:15:c0:01:a1:fc:2a:3b:f6:52: 7e:de:7e:94:03:e4:00:26:51:03:fb:b4:a3:64:79: 64:81:8b:6d:fd:a1:57:80:b9:43:45:43:5d:5f:86: b4:03:63:95:7b:a0:85:a1:f4:21:d5:3a:fd:47:c8: db:16:c1:d0:bd:30:59:12:49:ab:d2:71:6b:6e:72: fd:a4:c1:90:e8:de:9a:a3:6d:67:f3:71:9d:3a:70: 6c:dd:e6:77:1e:01:00:a2:01:ba:06:81:b0:6b:32: 83:b9:52:e9:25:e5:ba:3a:5b:a5:69:cc:45:a9:b0: a8:82:4b:fd:6e:e4:01:b7:db:01:40:39:d0:18:93: a7:16:7f:de:6a:f3:0f:c3:16:0e:ed:9c:4f:e5:41: ab:c8:ad:7e:98:93:a3:83:1b:de:38:fe:8d:87:d0: be:eb:a3:fb:93:09:6e:9d:aa:1d:d0:62:ee:44:b2: 79:06:02:6e:b1:f7:87:ed:cb:d4:da:d5:ff:80:da: bf:6e:32:2d:3a:24:70:38:fa:b0:e4:87:3c:5b:e7: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:C3:7C:EC:F6:AC:D6:53:EC:4F:87:98:5A:BE:FC:A8:13:EC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:84:5d:20:c0:30:43:b3:4d:92:e3:49:91:9c:46:76:6c:89: 03:34:bf:89:e4:74:e1:5c:68:19:51:a9:f6:a7:0f:47:3f:1c: 55:05:ef:29:86:58:48:41:d6:94:7f:98:85:e2:43:a3:9d:4c: 96:43:e3:86:b4:28:15:aa:44:7d:6b:e4:2c:17:7f:0f:86:01: 38:5f:ad:27:af:35:e2:8f:5d:13:5e:13:d0:1b:01:2b:30:fa: b6:ae:c1:18:76:71:38:bd:30:ee:ef:84:ba:3d:0c:bf:cd:ec: 62:9f:2d:ee:93:cb:8c:17:f9:ea:ae:0a:c2:7f:3b:b3:1c:e9: 1d:f3:45:15:37:41:7a:1d:8a:2c:02:6c:5d:4c:bf:f0:a0:c9: fc:e3:b9:c4:85:fd:dc:68:2a:9c:37:89:4a:97:9c:f7:15:81: 16:d2:5b:e7:53:56:9b:56:73:e6:07:90:b2:17:48:5d:ad:b6: d3:e0:01:75:7c:d1:3a:d4:d4:da:39:7b:a5:28:de:22:41:f7: 60:70:33:0a:33:9c:67:57:a4:fe:59:5c:c4:0c:82:36:f9:9d: c5:64:bb:b3:ed:5e:82:bb:db:99:21:96:bf:c1:d7:1b:db:a1: e1:70:b0:7a:32:d9:5b:73:50:52:f4:2c:92:b0:df:90:8c:a3: 3c:e1:11:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqESIWHILhnZnZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzA5ZjkwNWQtNTFiNi00NzQyLWJhY2UtYzQ1YTMyMmZkNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8UGhuT8MHgj+NJJqpIdezqbD8CAbMOqrOoj u9UJSCjO4ytM7l8a5UPvAyX3no/6Fy4VwAGh/Co79lJ+3n6UA+QAJlED+7SjZHlk gYtt/aFXgLlDRUNdX4a0A2OVe6CFofQh1Tr9R8jbFsHQvTBZEkmr0nFrbnL9pMGQ 6N6ao21n83GdOnBs3eZ3HgEAogG6BoGwazKDuVLpJeW6OlulacxFqbCogkv9buQB t9sBQDnQGJOnFn/eavMPwxYO7ZxP5UGryK1+mJOjgxveOP6Nh9C+66P7kwlunaod 0GLuRLJ5BgJusfeH7cvU2tX/gNq/bjItOiRwOPqw5Ic8W+fafwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM+w3zs9qzWU+xPh5havvyoE+z7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGJmM2NjYzYtODE4YS0z M2FhLWIyMzItMmM4Mzk1MDVlNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGEXSDAMEOzTZLjSZGcRnZsiQM0v4nkdOFcaBlRqfanD0c/HFUF7ymG WEhB1pR/mIXiQ6OdTJZD44a0KBWqRH1r5CwXfw+GAThfrSevNeKPXRNeE9AbASsw +rauwRh2cTi9MO7vhLo9DL/N7GKfLe6Ty4wX+equCsJ/O7Mc6R3zRRU3QXodiiwC bF1Mv/CgyfzjucSF/dxoKpw3iUqXnPcVgRbSW+dTVptWc+YHkLIXSF2tttPgAXV8 0TrU1No5e6Uo3iJB92BwMwoznGdXpP5ZXMQMgjb5ncVku7PtXoK725khlr/B1xvb oeFwsHoy2VtzUFL0LJKw35CMozzhEWY= -----END CERTIFICATE-----Generated at Wed Dec 24 18:30:49 2025 by rpki-client