This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa File: aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa (raw, json) Hash identifier: w96HXGRe5pbdNin6pdqn/Jsl2WUK+IcYAchKVjxaIpE= Subject key identifier: 4C:68:7E:04:31:66:80:40:1D:28:0B:D2:E1:53:EC:21:AB:C7:14:20 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584C3BE135464CDEDC2C540AA580 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 32043 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:35:46:4c:de:dc:2c:54:0a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=40a75f86-4e64-4b7b-8c80-5095129dd970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:5e:6e:37:2b:c5:17:fc:41:50:99:52:8f: 6a:bf:2e:f4:f8:6f:b6:aa:a9:6f:ff:c3:e0:fd:3d: 22:e6:6e:c8:70:78:74:8e:ce:f5:7b:7c:47:e6:5e: 51:20:11:3e:ab:97:e0:7e:6f:ec:c8:3a:21:89:5c: ff:ce:4f:4d:7b:7e:bb:41:65:7b:19:f2:b1:c2:a6: 05:f4:88:4b:fb:74:b7:90:52:39:5f:56:ef:f3:41: f3:e0:73:8c:88:9d:82:bf:a3:f5:4f:36:5a:12:33: 85:d4:3f:18:31:36:8d:32:ac:48:95:d1:7f:a7:05: b7:07:30:89:c9:4b:55:54:43:a8:31:52:cb:70:63: ce:80:65:9e:33:e9:4d:1c:f7:8e:b0:f6:e2:84:ba: 15:89:42:3c:9f:3a:4d:a3:4c:93:35:8a:52:02:81: cc:79:f9:db:cd:12:39:50:b0:49:b5:0e:42:fb:43: 6d:d9:c5:ca:0e:9d:1e:94:98:e7:5b:a6:65:0e:3a: a1:84:25:cb:b0:85:e1:c6:f6:f1:52:68:5c:94:38: ce:5f:13:86:13:3d:0d:0e:4a:78:8a:2a:95:e9:45: d8:7a:49:6d:8a:6a:90:85:dc:3d:7e:7d:30:d2:c1: 87:e7:29:9b:ad:24:6e:12:3b:69:14:fe:33:5c:2d: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:68:7E:04:31:66:80:40:1D:28:0B:D2:E1:53:EC:21:AB:C7:14:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:31:fa:34:af:53:9f:79:04:33:92:99:e7:75:32:92:4d:88: 65:fc:30:d6:a8:b3:64:69:d1:b1:08:00:72:83:4d:42:f0:3b: 1f:1f:55:77:0e:d2:f1:83:b4:83:e3:21:10:7e:9c:65:33:21: cb:bd:10:bd:f8:31:7e:c5:83:70:b6:6e:c5:dd:ab:2c:f6:8b: 98:cd:b6:8e:a1:5f:25:81:34:ec:c1:36:d0:39:ee:3e:07:1d: cd:d1:93:ee:73:46:c3:6b:fc:92:c2:31:e2:84:a5:02:3c:33: 76:df:1e:3a:9b:9e:50:28:97:ca:3f:55:ae:36:cf:24:1f:d3: 04:65:0b:ea:d1:6d:b4:d2:05:35:f6:fa:c8:19:51:92:32:a2: ee:97:4d:6f:af:7b:25:23:7e:e6:02:18:c8:6d:07:23:0c:49: 43:3c:79:50:74:12:b7:42:1b:38:a5:5b:66:29:da:e7:74:c1: 01:56:74:f6:6a:06:65:1a:e4:d4:87:dc:30:07:73:bd:46:b9: 79:4b:d4:44:ad:16:ca:a4:1e:a6:c6:66:6d:98:b1:b6:ca:e0: 03:90:0e:51:a1:b9:e2:d2:50:f0:21:1b:bb:cc:3f:d3:b2:60: 9e:8d:17:c1:9a:32:ac:3a:17:ed:00:06:77:c6:13:82:6a:30: 38:97:c4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74TVGTN7cLFQKpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk NDBhNzVmODYtNGU2NC00YjdiLThjODAtNTA5NTEyOWRkOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF5ebjcrxRf8QVCZUo9qvy70+G+2qqlv/8Pg /T0i5m7IcHh0js71e3xH5l5RIBE+q5fgfm/syDohiVz/zk9Ne367QWV7GfKxwqYF 9IhL+3S3kFI5X1bv80Hz4HOMiJ2Cv6P1TzZaEjOF1D8YMTaNMqxIldF/pwW3BzCJ yUtVVEOoMVLLcGPOgGWeM+lNHPeOsPbihLoViUI8nzpNo0yTNYpSAoHMefnbzRI5 ULBJtQ5C+0Nt2cXKDp0elJjnW6ZlDjqhhCXLsIXhxvbxUmhclDjOXxOGEz0NDkp4 iiqV6UXYekltimqQhdw9fn0w0sGH5ymbrSRuEjtpFP4zXC1/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExofgQxZoBAHSgL0uFT7CGrxxQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWFmOWE1ZjEtYmZkOC0z MzIzLWFkYWYtN2Q5OTFkYmFjY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQx+jSvU595BDOSmed1MpJNiGX8MNaos2Rp0bEIAHKDTULwOx8fVXcO 0vGDtIPjIRB+nGUzIcu9EL34MX7Fg3C2bsXdqyz2i5jNto6hXyWBNOzBNtA57j4H Hc3Rk+5zRsNr/JLCMeKEpQI8M3bfHjqbnlAol8o/Va42zyQf0wRlC+rRbbTSBTX2 +sgZUZIyou6XTW+veyUjfuYCGMhtByMMSUM8eVB0ErdCGzilW2Yp2ud0wQFWdPZq BmUa5NSH3DAHc71GuXlL1EStFsqkHqbGZm2YsbbK4AOQDlGhueLSUPAhG7vMP9Oy YJ6NF8GaMqw6F+0ABnfGE4JqMDiXxDE= -----END CERTIFICATE-----Generated at Thu Dec 25 21:25:51 2025 by rpki-client