This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4606e7dc-2e96-337f-b5a2-665e565f71b1.roa File: 4606e7dc-2e96-337f-b5a2-665e565f71b1.roa (raw, json) Hash identifier: 1b+eLOJFGPt3cQ4gLNZqcgg8+1YNyMG0Scd9NUpnYfQ= Subject key identifier: 78:C2:D1:A1:5A:C8:64:9A:07:66:7B:13:29:71:98:26:23:54:23:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C02A61FFFF842406582321780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4606e7dc-2e96-337f-b5a2-665e565f71b1.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.17.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:1f:ff:f8:42:40:65:82:32:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=a9d895e6-39f0-430a-a7fb-b39e666d3b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:6a:04:e1:70:5e:54:21:a6:4a:5f:a8:ad: bb:20:19:2f:09:1c:4f:28:e1:06:07:56:0b:c1:06: 9e:67:92:4b:a2:84:6f:8f:44:20:d4:5b:b5:63:07: 20:59:92:33:14:7b:35:67:f8:eb:34:1b:d9:01:d8: d2:7e:2f:01:b8:cb:3b:c1:80:5e:5b:00:19:00:0e: d1:06:1d:2c:d7:9f:fd:10:9c:fd:19:e4:5d:c1:05: 7a:8e:39:6f:8a:10:76:d6:bf:ef:8e:af:cf:3b:05: 94:a4:3a:50:f3:17:51:b7:3a:db:81:08:dc:ce:ac: 20:b4:32:8a:1c:3d:4b:eb:c8:58:72:99:a7:b0:f9: e8:84:8f:5f:0a:a8:de:04:5f:90:0e:d4:4f:da:9d: ab:99:dd:0a:87:ef:69:8e:6d:9e:2f:3f:31:53:cd: 72:03:6c:ca:42:40:9f:8f:d9:39:ac:90:51:81:d9: a1:68:71:57:6c:05:16:98:98:4f:3b:bd:20:5d:79: f9:3d:7d:a4:93:64:55:9a:b0:e1:bb:76:14:c9:ee: 03:be:4e:a3:59:67:be:5a:e5:67:8b:47:d2:29:b0: b7:3c:f9:88:41:5a:b8:3e:e1:69:22:0f:30:75:21: 0e:4d:9e:2a:27:d9:4b:ea:a8:aa:d4:f4:7b:0a:cc: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C2:D1:A1:5A:C8:64:9A:07:66:7B:13:29:71:98:26:23:54:23:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4606e7dc-2e96-337f-b5a2-665e565f71b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7a:f2:e0:c0:6e:4b:fb:15:fd:6c:e6:5b:b4:ba:72:ed:f8: 69:f4:77:fa:7f:69:af:eb:e8:17:57:3e:71:82:85:c4:15:6c: 25:39:e0:6d:71:3f:08:df:2d:bd:f7:31:c4:61:d5:4f:c7:93: 6f:81:18:96:fb:62:bd:75:f2:51:1e:91:47:80:8a:25:4c:df: f7:a6:08:54:b3:ed:00:d4:55:f9:8f:68:38:e2:75:c1:ab:4d: 51:ff:6d:f1:8f:15:c7:de:ad:83:af:e1:47:46:ea:9b:38:82: 56:e3:19:59:e8:e2:d1:de:4f:83:4f:cf:78:9e:18:09:1a:df: 6b:07:c1:8f:5d:f9:b5:18:42:69:1c:94:b5:59:23:77:c7:e8: d9:bb:12:97:8f:1f:1a:dc:cd:0a:81:ff:5f:5f:67:a4:5d:6d: 4b:d0:d6:46:ce:63:dd:d4:f0:6d:4e:8f:3b:d6:dd:fe:a6:4a: 98:53:1e:c1:f3:0f:e0:58:a0:d0:eb:41:4c:3f:41:27:30:34: 99:fd:77:43:5b:1e:79:a5:56:a0:73:52:e1:7d:bd:52:40:1a: d2:42:18:f4:5d:0e:39:80:20:bf:53:28:55:5e:eb:22:9a:5b: 9a:25:13:b0:c0:6d:e7:7b:36:4f:5b:8b:00:f6:6a:c9:80:72: 08:a9:d1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwCph//+EJAZYIyF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk YTlkODk1ZTYtMzlmMC00MzBhLWE3ZmItYjM5ZTY2NmQzYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBBqBOFwXlQhpkpfqK27IBkvCRxPKOEGB1YL wQaeZ5JLooRvj0Qg1Fu1YwcgWZIzFHs1Z/jrNBvZAdjSfi8BuMs7wYBeWwAZAA7R Bh0s15/9EJz9GeRdwQV6jjlvihB21r/vjq/POwWUpDpQ8xdRtzrbgQjczqwgtDKK HD1L68hYcpmnsPnohI9fCqjeBF+QDtRP2p2rmd0Kh+9pjm2eLz8xU81yA2zKQkCf j9k5rJBRgdmhaHFXbAUWmJhPO70gXXn5PX2kk2RVmrDhu3YUye4Dvk6jWWe+WuVn i0fSKbC3PPmIQVq4PuFpIg8wdSEOTZ4qJ9lL6qiq1PR7CsxORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjC0aFayGSaB2Z7EylxmCYjVCMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDYwNmU3ZGMtMmU5Ni0z MzdmLWI1YTItNjY1ZTU2NWY3MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl68uDAbkv7Ff1s5lu0unLt+Gn0d/p/aa/r6BdXPnGChcQVbCU54G1x PwjfLb33McRh1U/Hk2+BGJb7Yr118lEekUeAiiVM3/emCFSz7QDUVfmPaDjidcGr TVH/bfGPFcferYOv4UdG6ps4glbjGVno4tHeT4NPz3ieGAka32sHwY9d+bUYQmkc lLVZI3fH6Nm7EpePHxrczQqB/19fZ6RdbUvQ1kbOY93U8G1OjzvW3f6mSphTHsHz D+BYoNDrQUw/QScwNJn9d0NbHnmlVqBzUuF9vVJAGtJCGPRdDjmAIL9TKFVe6yKa W5olE7DAbed7Nk9biwD2asmAcgip0SU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:26 2025 by rpki-client