This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa File: 2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa (raw, json) Hash identifier: gdO25UP12JCknnyNDYgLm4f+Ul3N9RIxy0bogvtCCSg= Subject key identifier: 7F:E6:5B:70:32:58:03:70:9C:14:04:7F:C6:AB:0A:11:94:E5:9F:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C0DD0F8AD3D8D16DCA9E72660 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 19905 IP address blocks: 173.28.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:f8:ad:3d:8d:16:dc:a9:e7:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=c7e8d19f-eda3-49bc-8995-ea3cb32fff01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e9:03:63:9b:8b:ba:81:a8:32:00:92:6c:d7: 10:e7:df:54:0b:8a:48:ac:e3:44:e4:38:f4:89:2d: 80:cb:6f:96:1f:1d:c1:4b:63:f3:b7:b5:e8:31:fb: ae:12:4c:3a:48:a7:df:ec:d2:2d:ab:d9:b3:04:c5: 54:da:84:26:72:a7:51:9c:de:72:5c:a2:1b:d2:1f: 38:f3:06:41:43:db:c5:f5:63:73:3e:80:67:37:ca: 7f:ef:a4:43:7a:52:b5:c9:17:da:fc:3c:28:63:44: d2:61:9c:56:95:85:df:c4:c3:16:a4:f9:c0:6a:72: 5c:b7:45:f7:59:72:39:ee:3b:49:a3:f1:34:16:00: fa:f3:45:7b:83:0e:14:64:d7:55:2b:dc:85:5c:b0: 8f:20:31:2f:e6:d8:27:86:a5:e0:31:3b:2b:8d:3b: 5c:fd:6b:a1:2e:6b:92:59:ed:4e:6a:c2:25:2a:ac: b9:a8:7e:74:d0:d5:4b:b1:77:84:e1:e4:74:b9:c7: 3e:fa:85:a4:15:ca:22:5e:6a:f9:a0:76:1b:1b:55: 54:1f:79:6a:f0:54:0b:74:c8:c8:c2:be:a7:79:48: 9c:fe:7b:3e:a0:69:e8:dd:07:d6:5b:36:b2:81:34: 12:6b:2b:66:9f:44:be:d1:50:49:8a:9c:87:8a:b3: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:5B:70:32:58:03:70:9C:14:04:7F:C6:AB:0A:11:94:E5:9F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d7:e2:f4:4c:a2:a6:16:25:4e:45:e3:68:f2:3e:3c:7d:eb: 04:78:8d:00:d1:f3:ef:e9:3e:b6:cd:7a:39:08:13:27:9d:e7: 5c:82:c8:5c:a1:5b:ef:04:2a:05:81:89:91:c3:68:a6:82:bb: 22:5d:8c:c3:4a:5a:35:7e:45:27:69:1e:7f:09:ca:ba:ed:7e: 6b:bb:2b:c2:0d:93:a9:7d:4f:f0:3f:e8:f9:29:ef:31:63:f5: 70:e8:44:5b:ee:6a:f8:2b:47:41:af:6b:13:2a:e7:e6:1a:cf: 90:c0:6f:af:bd:6e:99:6a:ca:44:d7:9d:4a:22:47:31:b3:fe: 58:8c:91:1b:11:70:27:c6:b2:18:62:5f:a3:98:a3:f7:25:f7: a9:8d:e9:1b:d1:46:95:ab:ae:ee:23:d5:59:fa:f1:ac:c7:41: 99:28:2f:9c:6a:5f:01:40:77:e2:18:ad:e4:89:c5:d8:75:22: c4:b6:3b:52:f4:59:d4:56:19:bb:89:e6:d0:6c:6d:a8:b2:51: 88:ad:97:0f:a8:d5:24:ab:7f:2d:85:27:9e:65:27:99:68:2f: 00:05:fd:bd:8d:57:2b:48:fc:cb:e6:d2:82:1e:38:90:76:30: b9:44:40:31:b8:75:73:88:19:9f:89:7b:31:ef:52:80:c2:99: 3c:5f:79:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0PitPY0W3KnnJmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk YzdlOGQxOWYtZWRhMy00OWJjLTg5OTUtZWEzY2IzMmZmZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ukDY5uLuoGoMgCSbNcQ599UC4pIrONE5Dj0 iS2Ay2+WHx3BS2Pzt7XoMfuuEkw6SKff7NItq9mzBMVU2oQmcqdRnN5yXKIb0h84 8wZBQ9vF9WNzPoBnN8p/76RDelK1yRfa/DwoY0TSYZxWlYXfxMMWpPnAanJct0X3 WXI57jtJo/E0FgD680V7gw4UZNdVK9yFXLCPIDEv5tgnhqXgMTsrjTtc/WuhLmuS We1OasIlKqy5qH500NVLsXeE4eR0ucc++oWkFcoiXmr5oHYbG1VUH3lq8FQLdMjI wr6neUic/ns+oGno3QfWWzaygTQSaytmn0S+0VBJipyHirNfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/mW3AyWANwnBQEf8arChGU5Z/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZiOThjY2ItN2E0Yi0z ODFiLWJjMjItYThhOTdkNGVlYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPX4vRMoqYWJU5F42jyPjx96wR4jQDR8+/pPrbNejkIEyed51yCyFyh W+8EKgWBiZHDaKaCuyJdjMNKWjV+RSdpHn8Jyrrtfmu7K8INk6l9T/A/6Pkp7zFj 9XDoRFvuavgrR0GvaxMq5+Yaz5DAb6+9bplqykTXnUoiRzGz/liMkRsRcCfGshhi X6OYo/cl96mN6RvRRpWrru4j1Vn68azHQZkoL5xqXwFAd+IYreSJxdh1IsS2O1L0 WdRWGbuJ5tBsbaiyUYitlw+o1SSrfy2FJ55lJ5loLwAF/b2NVytI/Mvm0oIeOJB2 MLlEQDG4dXOIGZ+JezHvUoDCmTxfeQo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:23:20 2025 by rpki-client