This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa File: f1b86a0a-93ba-368e-9650-058271f8c2a3.roa (raw, json) Hash identifier: jCq9CVJPL7eohtvJPcOXm6o3Xtk5d2a2een93tO8siU= Subject key identifier: EC:C0:7E:15:0C:9B:F3:B6:D7:D6:D4:E2:DE:5C:86:EC:E8:F2:D3:AE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A82AACB9F202EB20A92400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2a:ac:b9:f2:02:eb:20:a9:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=a2878793-1e97-470b-87eb-78a4ef78314e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:0c:19:06:18:81:bf:fe:a3:5e:ef:4a:cf: ed:af:2f:3b:89:af:0b:a7:f8:ac:87:37:0f:6b:98: 1e:de:9b:46:d1:ed:07:79:ff:b4:39:04:e6:ca:76: 36:0c:cc:9f:32:62:b0:de:f9:64:83:3e:89:69:f0: ee:55:71:84:46:c6:a4:06:61:72:b1:a4:8d:9d:0e: 84:99:0f:72:7b:fb:d7:25:e1:82:f4:34:f1:d4:df: ed:d7:ef:f6:91:0d:dc:45:49:ae:92:9b:28:a5:e4: fb:47:72:de:87:94:69:fa:8b:ef:26:d7:8f:30:5e: b6:0f:9c:18:76:49:8f:e4:56:25:96:64:bb:29:28: 27:c3:c3:0f:92:10:78:f9:51:b7:08:a7:de:e2:e6: bb:a2:cd:85:8c:43:04:35:36:6c:2c:ad:b9:57:16: ac:5c:23:bd:ea:a1:15:71:62:f7:51:0a:70:c9:06: d9:ea:91:c8:53:6f:18:3c:c9:ee:ba:ff:67:b0:11: e2:a0:4b:3f:e1:af:10:f8:bb:5c:ab:0e:79:eb:3d: 9d:f6:14:03:4b:c1:87:9c:f2:e5:44:77:ac:56:9b: 1d:3e:10:ba:0d:bb:62:03:7a:e6:1c:a8:8b:d8:85: 9b:cf:d6:88:d5:df:76:e7:de:8e:04:08:1e:1f:c1: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C0:7E:15:0C:9B:F3:B6:D7:D6:D4:E2:DE:5C:86:EC:E8:F2:D3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4d:6f:4e:7f:6d:64:f4:bd:bd:db:38:71:b0:e8:b7:b8:f6: 74:70:05:7a:31:3f:15:d1:f1:be:73:83:1b:5e:64:5d:91:6b: d3:8e:fb:78:8a:af:63:cd:f7:aa:6f:e4:2e:2c:99:75:fe:21: 2a:ce:ed:b7:5d:2a:81:2b:72:c4:5f:f8:f5:46:9c:41:c6:16: 95:a5:cc:74:41:60:41:8a:4d:74:63:ab:31:04:d6:55:ba:d5: 17:8b:b5:db:d7:19:5e:b2:88:6f:12:83:3d:b5:64:00:40:0e: 49:c1:cc:93:ac:25:01:9b:16:c3:9c:0c:a0:98:84:7c:10:52: 6a:83:9c:62:60:5b:d8:33:cb:04:07:10:2c:5b:d9:af:c8:ce: 07:84:88:99:5e:26:f9:76:ac:16:bd:75:e6:91:a5:06:7f:7f: 94:2d:c0:be:f3:c5:f1:1f:65:b8:68:b4:0d:af:b4:e5:ec:8b: a1:d6:80:41:70:dd:9a:68:88:ee:46:11:76:81:8c:ae:4e:f1: af:18:88:40:9c:24:0a:b7:d1:e7:ea:a6:95:6c:f2:30:21:cd: ca:e9:98:86:b5:3d:ff:4a:dd:be:e8:ab:06:60:74:e1:13:2c: 90:0d:9c:ad:18:c4:6d:1a:fb:80:20:63:08:b1:84:34:05:07: 51:f0:41:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCqsufIC6yCpJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YTI4Nzg3OTMtMWU5Ny00NzBiLTg3ZWItNzhhNGVmNzgzMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEYMGQYYgb/+o17vSs/try87ia8Lp/ishzcP a5ge3ptG0e0Hef+0OQTmynY2DMyfMmKw3vlkgz6JafDuVXGERsakBmFysaSNnQ6E mQ9ye/vXJeGC9DTx1N/t1+/2kQ3cRUmukpsopeT7R3Leh5Rp+ovvJtePMF62D5wY dkmP5FYllmS7KSgnw8MPkhB4+VG3CKfe4ua7os2FjEMENTZsLK25VxasXCO96qEV cWL3UQpwyQbZ6pHIU28YPMnuuv9nsBHioEs/4a8Q+Ltcqw556z2d9hQDS8GHnPLl RHesVpsdPhC6DbtiA3rmHKiL2IWbz9aI1d92596OBAgeH8H7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzAfhUMm/O219bU4t5chuzo8tOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjFiODZhMGEtOTNiYS0z NjhlLTk2NTAtMDU4MjcxZjhjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhNb05/bWT0vb3bOHGw6Le49nRwBXoxPxXR8b5zgxteZF2Ra9OO+3iK r2PN96pv5C4smXX+ISrO7bddKoErcsRf+PVGnEHGFpWlzHRBYEGKTXRjqzEE1lW6 1ReLtdvXGV6yiG8Sgz21ZABADknBzJOsJQGbFsOcDKCYhHwQUmqDnGJgW9gzywQH ECxb2a/IzgeEiJleJvl2rBa9deaRpQZ/f5QtwL7zxfEfZbhotA2vtOXsi6HWgEFw 3ZpoiO5GEXaBjK5O8a8YiECcJAq30efqppVs8jAhzcrpmIa1Pf9K3b7oqwZgdOET LJANnK0YxG0a+4AgYwixhDQFB1HwQbU= -----END CERTIFICATE-----Generated at Wed Dec 24 10:33:09 2025 by rpki-client