This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa File: 295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa (raw, json) Hash identifier: hYxeOhml3kDrlk9zU+5y3mQOOdAeL6/ACn3ou0+y7L8= Subject key identifier: 23:CC:7C:2F:8E:A2:1B:7D:DD:BC:60:36:9C:6A:D9:69:DC:03:07:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C06D5FAF852F08DC6CD637D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d5:fa:f8:52:f0:8d:c6:cd:63:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=2de2a042-b84c-404e-8308-9d9c2a84a3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:f7:7e:b7:f5:95:9a:6f:6a:73:e1:bb:ec: d0:e9:7e:86:ab:e3:1d:3a:a2:1f:4f:fa:3b:e8:14: 4f:15:0d:a4:3a:c2:78:e2:26:f6:ae:4c:ed:be:85: 03:18:33:b4:09:25:24:d5:a3:e9:de:49:9f:37:af: 84:b5:4c:91:cc:ff:52:d6:27:97:4a:3c:0a:ec:9b: 47:4b:b9:b6:cf:19:0c:4e:4c:9b:39:60:ca:df:58: 29:80:dd:eb:18:c7:b6:89:8b:58:34:71:69:49:c6: 25:4e:cb:74:b3:fe:c9:72:8d:fd:bc:62:32:a4:b2: cd:9f:de:45:2b:56:03:05:f4:03:1b:ee:16:72:f3: e6:7e:45:52:88:ba:32:58:66:fe:ea:55:5a:24:a7: ad:25:c9:99:45:f4:4c:d9:75:ad:c9:f9:85:d5:67: b5:69:12:5e:47:64:68:18:28:03:e8:91:02:bf:47: df:68:fa:c8:4e:22:a3:f9:61:0b:0a:80:27:21:1a: 27:47:47:4b:d9:61:c9:a6:6c:b8:e5:de:1a:77:62: 4f:e3:36:ce:e2:52:fd:9f:18:2e:49:66:02:b5:e7: 0a:6a:88:5d:24:6a:b6:79:40:14:cb:08:2f:73:bf: 89:1f:a7:c9:6d:fa:b5:0e:fe:bd:ab:67:f4:0d:ba: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:7C:2F:8E:A2:1B:7D:DD:BC:60:36:9C:6A:D9:69:DC:03:07:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:05:b4:fe:4d:25:1c:10:b6:7d:ff:ee:74:34:3d:66:c4:b8: 7b:cd:cd:85:dc:80:a0:75:23:15:0e:b3:ec:e2:a8:86:e2:fb: bb:ae:9e:80:d0:d5:4a:a9:b4:81:90:34:4b:db:48:27:c7:a1: 9c:cd:13:9d:c9:4d:dc:24:82:8d:7a:54:f6:56:23:c0:4f:99: 4f:cd:e9:a5:9d:95:aa:7e:b9:96:a5:f5:e0:69:3f:07:0f:dd: 70:2b:08:b1:88:e9:7d:60:70:2b:55:48:89:52:be:c5:4e:51: 9c:f1:89:22:36:6a:96:c2:bd:be:e5:d7:1d:89:4a:25:f7:8f: 39:46:4f:7d:75:01:ab:43:5c:25:98:ef:3b:82:80:2d:8d:67: 75:db:f4:2f:23:22:d8:b4:83:2a:3d:b9:51:f0:e4:a4:19:08: 40:e8:3f:cf:f5:b2:f4:3b:03:28:2a:d9:79:32:1c:b7:e9:07: dd:f1:9a:8c:ee:be:7d:47:26:71:6e:67:8c:6f:bc:88:ff:a4: 4d:1d:a2:a6:a0:56:0f:b7:70:bc:7e:c4:f3:4d:18:1b:08:2e: e5:ed:17:c4:57:26:3b:dd:71:03:bc:81:50:0c:ce:b4:ee:fd: 3d:76:89:54:db:5f:ea:b5:89:45:18:2f:08:b4:00:47:24:48: 4e:83:47:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1fr4UvCNxs1jfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk MmRlMmEwNDItYjg0Yy00MDRlLTgzMDgtOWQ5YzJhODRhM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFn3frf1lZpvanPhu+zQ6X6Gq+MdOqIfT/o7 6BRPFQ2kOsJ44ib2rkztvoUDGDO0CSUk1aPp3kmfN6+EtUyRzP9S1ieXSjwK7JtH S7m2zxkMTkybOWDK31gpgN3rGMe2iYtYNHFpScYlTst0s/7Jco39vGIypLLNn95F K1YDBfQDG+4WcvPmfkVSiLoyWGb+6lVaJKetJcmZRfRM2XWtyfmF1We1aRJeR2Ro GCgD6JECv0ffaPrITiKj+WELCoAnIRonR0dL2WHJpmy45d4ad2JP4zbO4lL9nxgu SWYCtecKaohdJGq2eUAUywgvc7+JH6fJbfq1Dv69q2f0DbpM0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPMfC+Ooht93bxgNpxq2WncAwf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk1Y2IzYjMtMGFjZS0z NmU1LTk1NTAtNGIzMmI3YTQ2NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIFtP5NJRwQtn3/7nQ0PWbEuHvNzYXcgKB1IxUOs+ziqIbi+7uunoDQ 1UqptIGQNEvbSCfHoZzNE53JTdwkgo16VPZWI8BPmU/N6aWdlap+uZal9eBpPwcP 3XArCLGI6X1gcCtVSIlSvsVOUZzxiSI2apbCvb7l1x2JSiX3jzlGT311AatDXCWY 7zuCgC2NZ3Xb9C8jIti0gyo9uVHw5KQZCEDoP8/1svQ7Aygq2XkyHLfpB93xmozu vn1HJnFuZ4xvvIj/pE0doqagVg+3cLx+xPNNGBsILuXtF8RXJjvdcQO8gVAMzrTu /T12iVTbX+q1iUUYLwi0AEckSE6DR5w= -----END CERTIFICATE-----Generated at Sun Dec 7 01:24:47 2025 by rpki-client