This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa File: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (raw, json) Hash identifier: KtFHTCaoRBg1pD1uM4anzeKYEaGe0L2oeOVLG+Ht6kM= Subject key identifier: 8E:2E:80:B4:F8:97:A3:43:64:42:E7:13:09:67:1C:A2:17:3D:86:20 Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584C364BA42C3C04B618422BA540 Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa Signing time: Wed 17 Dec 2025 02:00:31 +0000 ROA not before: Wed 17 Dec 2025 02:00:31 +0000 ROA not after: Tue 17 Mar 2026 01:00:31 +0000 asID: 25222 IP address blocks: 68.67.0.0/22 maxlen: 24 173.243.96.0/22 maxlen: 24 173.243.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:4b:a4:2c:3c:04:b6:18:42:2b:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Dec 17 02:00:31 2025 GMT Not After : Mar 17 01:00:31 2026 GMT Subject: CN=d45563e7-2af9-42f9-aa63-0825bedb36ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0f:e0:43:b9:9b:ec:d6:3a:50:5c:95:85:84: b8:d6:f4:c3:1f:37:f6:63:46:5b:a3:53:3b:0d:9e: 2b:da:90:c0:f6:77:e6:87:c2:f5:bb:38:0e:4b:18: 8b:08:89:56:2a:a5:31:48:8b:43:af:b0:3d:93:68: e5:06:19:a3:54:af:37:58:ae:55:11:12:8e:26:95: 1d:aa:5c:aa:31:a4:d8:55:00:bc:6f:c7:cf:cc:4c: 7d:27:b4:6f:63:25:a2:25:6b:1a:4c:5f:5e:4d:52: 16:68:e2:04:2e:9f:60:3d:a0:68:1a:e8:67:9d:a2: 77:76:6a:62:d4:73:77:bb:52:93:f3:2c:16:cb:21: 78:89:d5:75:a9:66:6f:46:e1:19:d0:cf:f3:1a:28: ba:bd:70:03:17:4c:8a:e6:1c:57:40:47:cb:14:85: ce:03:48:02:c3:c3:5a:d0:31:cb:54:95:36:ff:e7: 52:85:3f:07:74:05:cf:ae:85:07:c9:5d:77:06:50: ef:f6:9f:4e:dd:ee:2d:66:d5:42:c1:d6:11:48:85: 83:97:fe:8d:0d:88:67:d4:24:78:96:f8:1c:97:d3: a6:9b:86:78:9e:d8:49:2c:11:e3:2c:b7:d4:ab:87: 8e:2e:8d:9a:2d:0c:f7:a8:c8:39:d9:28:dd:05:ce: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2E:80:B4:F8:97:A3:43:64:42:E7:13:09:67:1C:A2:17:3D:86:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: 68.67.0.0/22 173.243.96.0/22 173.243.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:28:b1:65:d7:5e:8c:9a:c9:6c:1a:78:67:7e:9c:b4:ee:b1: e4:32:e7:30:e0:64:cc:e0:16:6c:f0:32:9c:fc:f1:37:c9:51: b9:9b:5f:a2:9c:4e:7e:d8:be:67:e0:5b:20:bb:f5:65:1c:bb: a6:be:46:d9:b3:58:d8:b7:8f:64:04:a1:47:09:23:b9:ff:97: 42:11:66:a6:1c:3c:e2:ea:03:33:b2:50:99:dc:b8:54:40:c4: 39:f2:6e:f3:94:6e:94:ec:15:02:52:81:ca:5c:04:e2:70:5b: 49:56:3a:10:7e:df:c9:b4:1d:02:a7:b8:87:72:b1:c2:77:0b: 5d:8c:95:7a:ff:87:68:05:04:65:8f:51:27:b0:a9:16:02:dd: 64:07:bb:42:80:96:5c:fa:4a:4f:5d:84:a9:73:6d:d1:d9:08: 1e:cf:89:63:53:5c:b9:db:c8:f8:55:86:bf:f0:db:3a:1c:9e: 1a:e6:ec:e9:4e:1f:d0:a5:da:e5:7d:0a:28:95:9f:b2:5d:2c: 34:b6:89:1f:15:74:b2:fc:92:f2:70:5c:f6:0a:8c:c1:d1:af: 41:dd:30:97:d9:a7:47:d6:ea:81:eb:33:46:0f:65:fb:28:67: 2d:ce:db:ea:d2:48:e1:66:a6:bf:2b:50:00:ec:33:f0:4d:0d: ce:44:f2:cf -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEw2S6QsPAS2GEIrpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI1MTIxNzAyMDAzMVoXDTI2MDMxNzAxMDAzMVowLzEtMCsGA1UEAxMk ZDQ1NTYzZTctMmFmOS00MmY5LWFhNjMtMDgyNWJlZGIzNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ/gQ7mb7NY6UFyVhYS41vTDHzf2Y0Zbo1M7 DZ4r2pDA9nfmh8L1uzgOSxiLCIlWKqUxSItDr7A9k2jlBhmjVK83WK5VERKOJpUd qlyqMaTYVQC8b8fPzEx9J7RvYyWiJWsaTF9eTVIWaOIELp9gPaBoGuhnnaJ3dmpi 1HN3u1KT8ywWyyF4idV1qWZvRuEZ0M/zGii6vXADF0yK5hxXQEfLFIXOA0gCw8Na 0DHLVJU2/+dShT8HdAXProUHyV13BlDv9p9O3e4tZtVCwdYRSIWDl/6NDYhn1CR4 lvgcl9Omm4Z4nthJLBHjLLfUq4eOLo2aLQz3qMg52SjdBc7F3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFI4ugLT4l6NDZELnEwlnHKIXPYYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvNDgzMTRmM2UtZTJhZC0z ZDY2LWEzNTktOGNjZmQ4ZDI1OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCREMAAwQC rfNgAwQBrfNqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG4osWXXXoyayWwaeGd+nLTuseQy5zDgZMzgFmzw Mpz88TfJUbmbX6KcTn7YvmfgWyC79WUcu6a+RtmzWNi3j2QEoUcJI7n/l0IRZqYc POLqAzOyUJncuFRAxDnybvOUbpTsFQJSgcpcBOJwW0lWOhB+38m0HQKnuIdyscJ3 C12MlXr/h2gFBGWPUSewqRYC3WQHu0KAllz6Sk9dhKlzbdHZCB7PiWNTXLnbyPhV hr/w2zocnhrm7OlOH9Cl2uV9CiiVn7JdLDS2iR8VdLL8kvJwXPYKjMHRr0HdMJfZ p0fW6oHrM0YPZfsoZy3O2+rSSOFmpr8rUADsM/BNDc5E8s8= -----END CERTIFICATE-----Generated at Sun Dec 21 17:11:55 2025 by rpki-client