This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa File: 3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa (raw, json) Hash identifier: 8xIkP20l5V6z6mccEJY93Ra4hHyKAKpE+DHOejzHSxI= Subject key identifier: 08:BA:F4:43:42:49:3E:49:56:6B:B5:0B:74:70:E0:6F:C8:F6:92:4E Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F4328584C3BE13899F646E8E9D240D180 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 18013 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:38:99:f6:46:e8:e9:d2:40:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=3b765476-6dba-4b08-b116-41e0ab0d0e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:a7:71:33:d4:b7:0e:4c:b8:1a:84:ef:31: b9:80:ac:71:f3:ed:65:2d:0c:60:58:1a:95:1c:9e: 6d:01:31:b1:12:ca:0e:e5:95:1d:4a:7b:b2:e6:2d: 66:a5:86:7b:c3:a7:90:18:fa:6a:34:03:80:8c:a5: a1:dc:62:e1:05:a1:92:02:fb:cf:31:56:f1:23:6b: 0d:e8:07:c2:ed:a8:f8:cb:bb:cf:32:23:c9:07:45: 3b:46:f1:59:53:59:e5:fd:21:37:fe:f6:af:ef:32: df:5d:2d:f1:ef:f7:6c:44:c1:db:a4:f2:7a:1b:d2: 10:09:76:91:d4:f3:b9:64:8f:58:fd:74:c1:4c:da: 9f:39:cf:82:9c:ee:9a:44:d9:5f:34:cf:dc:03:38: c6:73:09:70:18:4f:05:3d:2c:4e:4c:c2:e3:35:8d: f0:46:c2:c1:d8:38:29:43:69:19:a4:3f:c2:8c:ab: 28:fd:d2:4f:07:e2:c8:50:f5:d6:ff:f7:85:0f:3c: 90:79:a6:e8:e4:89:77:d0:fc:46:c8:7a:8d:87:c1: 2e:69:36:31:94:41:19:b0:0b:1d:71:84:5d:23:f4: 6a:9c:6a:f8:8c:c1:df:9d:23:2b:63:e3:f5:4e:26: 99:4d:be:a5:3f:fe:54:f5:c4:16:89:0c:18:e6:35: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:F4:43:42:49:3E:49:56:6B:B5:0B:74:70:E0:6F:C8:F6:92:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a2:3b:e9:ca:64:60:48:e1:5f:b0:fc:7a:4f:e1:21:3e:a1: 34:6a:90:0a:e9:7e:46:fe:90:79:fe:17:60:2f:b2:ed:41:f8: 46:5d:a0:df:16:86:d7:82:a9:51:6f:80:cb:be:bd:22:51:cc: 8c:bf:7f:a0:11:8e:63:fc:12:a7:be:cb:45:d8:e5:3e:bf:e0: e1:ae:f5:40:48:06:59:30:72:02:8e:18:67:99:dd:4b:63:50: 5c:04:9f:fe:09:3b:b0:4f:f4:cb:ed:3a:6a:bc:52:67:7f:ff: 9b:8b:d0:b0:6d:8b:88:d4:aa:44:7b:2a:df:0f:b5:c3:bf:68: 95:2e:1d:cf:47:92:da:82:ae:05:fd:9c:cc:2c:08:f7:92:fa: ef:24:66:eb:6d:64:ac:15:5f:e7:97:12:01:19:1a:7b:e5:c1: 41:c6:8d:ac:1f:52:12:a3:6f:eb:c1:50:c4:88:9f:94:6e:cd: e8:8c:40:79:da:ee:a4:19:1c:1c:60:f1:b4:3e:34:76:cf:44: 54:77:d9:63:55:28:66:14:55:1f:8a:7b:18:f9:ff:41:68:47: aa:1e:b3:e3:af:c1:3f:52:58:45:a7:21:35:c6:5e:e8:a4:c9: 7f:2d:47:b3:18:37:36:d4:da:1e:28:3e:77:7f:46:04:5d:ec: e6:2c:14:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74TiZ9kbo6dJA0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk M2I3NjU0NzYtNmRiYS00YjA4LWIxMTYtNDFlMGFiMGQwZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NyncTPUtw5MuBqE7zG5gKxx8+1lLQxgWBqV HJ5tATGxEsoO5ZUdSnuy5i1mpYZ7w6eQGPpqNAOAjKWh3GLhBaGSAvvPMVbxI2sN 6AfC7aj4y7vPMiPJB0U7RvFZU1nl/SE3/vav7zLfXS3x7/dsRMHbpPJ6G9IQCXaR 1PO5ZI9Y/XTBTNqfOc+CnO6aRNlfNM/cAzjGcwlwGE8FPSxOTMLjNY3wRsLB2Dgp Q2kZpD/CjKso/dJPB+LIUPXW//eFDzyQeabo5Il30PxGyHqNh8EuaTYxlEEZsAsd cYRdI/RqnGr4jMHfnSMrY+P1TiaZTb6lP/5U9cQWiQwY5jUYFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi69ENCST5JVmu1C3Rw4G/I9pJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvM2EyMzNiOWEtZGIzMC0z OTQzLWEzMGMtNGMwZmUwZDJkZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOiO+nKZGBI4V+w/HpP4SE+oTRqkArpfkb+kHn+F2Avsu1B+EZdoN8W hteCqVFvgMu+vSJRzIy/f6ARjmP8Eqe+y0XY5T6/4OGu9UBIBlkwcgKOGGeZ3Utj UFwEn/4JO7BP9MvtOmq8Umd//5uL0LBti4jUqkR7Kt8PtcO/aJUuHc9HktqCrgX9 nMwsCPeS+u8kZuttZKwVX+eXEgEZGnvlwUHGjawfUhKjb+vBUMSIn5RuzeiMQHna 7qQZHBxg8bQ+NHbPRFR32WNVKGYUVR+Kexj5/0FoR6oes+OvwT9SWEWnITXGXuik yX8tR7MYNzbU2h4oPnd/RgRd7OYsFEw= -----END CERTIFICATE-----Generated at Sat Dec 20 03:43:26 2025 by rpki-client