This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25bcd4-6549-30a2-8694-11118c3e89d4.roa File: 4f25bcd4-6549-30a2-8694-11118c3e89d4.roa (raw, json) Hash identifier: Z1mzpzJqrMLi0Qwl/OG0dve+isaRlZTIqbd38kdCZG8= Subject key identifier: 87:1C:13:9E:31:DF:1C:F4:3A:03:03:19:9A:17:0F:A0:00:58:FB:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C09A0AE96AA14CB6A91B5C7F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25bcd4-6549-30a2-8694-11118c3e89d4.roa Signing time: Mon 01 Dec 2025 02:00:30 +0000 ROA not before: Mon 01 Dec 2025 02:00:30 +0000 ROA not after: Sun 01 Mar 2026 02:00:30 +0000 asID: 19905 IP address blocks: 170.52.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:09:a0:ae:96:aa:14:cb:6a:91:b5:c7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 1 02:00:30 2025 GMT Not After : Mar 1 02:00:30 2026 GMT Subject: CN=182b4cef-8d07-4e21-9273-dda481374a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6c:e1:aa:6e:ea:80:1c:16:c4:05:ec:1f:fd: 47:db:7b:46:cf:b8:75:78:c8:2e:a1:73:d0:96:b0: b7:06:fd:a7:89:19:95:8f:61:ca:89:1b:63:b7:b5: ec:46:eb:75:2f:cc:8d:83:96:73:1b:b7:7f:03:63: 9f:1b:f6:c4:76:ad:13:12:e9:1f:59:25:07:de:91: be:fb:f0:a8:c6:45:6b:ab:4c:87:9b:96:33:1c:73: aa:d0:53:d1:a8:d0:02:7e:85:42:4a:eb:40:2c:3e: d7:65:42:83:54:75:b4:be:82:52:cb:7d:d2:2d:c1: 45:ca:1c:ce:da:0f:4e:2d:3f:af:53:b9:aa:f9:5e: 45:33:cf:87:41:69:38:c8:81:d7:8d:59:29:1d:55: 81:e9:ae:1d:48:b4:14:ab:68:d5:76:38:06:07:b8: 47:c1:e5:38:9e:bd:b9:97:a4:bd:fe:3e:58:f0:d9: d1:c6:51:8c:f3:40:c8:75:65:7f:8a:a7:90:53:06: 64:e4:db:d1:8b:8e:32:20:9d:e0:22:d6:88:d4:2a: 17:11:83:7b:34:85:3f:b3:72:42:e8:67:a8:2f:05: 59:11:c2:91:6b:a2:c9:22:11:6a:0a:37:a7:5f:b0: 50:02:00:3c:e1:ac:33:05:7f:4c:61:8a:05:22:d3: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1C:13:9E:31:DF:1C:F4:3A:03:03:19:9A:17:0F:A0:00:58:FB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25bcd4-6549-30a2-8694-11118c3e89d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6b:a9:f3:80:04:71:f4:bb:5d:81:13:85:78:7e:ba:61:fc: 3a:d0:70:83:c4:04:90:4b:d1:6a:09:28:cd:a0:6c:4c:4b:0a: 6e:a4:e9:9b:6d:20:48:be:aa:50:b0:e1:06:f1:45:af:5a:50: 67:cd:3c:3e:21:0b:f6:d8:8b:8a:6e:5e:b2:fe:48:09:dd:86: df:a2:d7:84:d3:48:db:9a:60:e0:a5:37:af:75:ac:fa:67:a3: d6:0c:a3:27:1e:a2:36:dc:af:21:ac:98:18:a4:bf:6e:6b:ff: ba:61:33:a7:62:e8:18:a5:45:79:b5:f6:95:d1:3c:ac:7b:fb: 30:73:22:30:70:38:6b:20:40:35:a5:29:e7:49:86:f7:e7:80: 91:69:bd:49:e5:3e:74:bc:de:83:7a:3f:13:5a:af:22:53:a6: f8:a6:ef:0e:bf:03:2f:15:49:0f:41:7d:b8:50:fd:85:b8:09: 02:c5:c5:1d:69:c1:ce:f1:43:e1:64:2a:23:01:f5:da:1f:f4: 2c:65:4c:96:db:ce:79:bf:88:8e:fb:4a:ee:be:9f:a0:38:fd: 94:9a:c7:b6:68:78:24:a9:45:22:ea:38:77:af:2b:17:92:82: 21:d8:56:69:ee:21:50:96:65:c0:42:18:f6:66:ab:f3:92:a6: 06:99:0b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwJoK6WqhTLapG1x/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk MTgyYjRjZWYtOGQwNy00ZTIxLTkyNzMtZGRhNDgxMzc0YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWzhqm7qgBwWxAXsH/1H23tGz7h1eMguoXPQ lrC3Bv2niRmVj2HKiRtjt7XsRut1L8yNg5ZzG7d/A2OfG/bEdq0TEukfWSUH3pG+ +/CoxkVrq0yHm5YzHHOq0FPRqNACfoVCSutALD7XZUKDVHW0voJSy33SLcFFyhzO 2g9OLT+vU7mq+V5FM8+HQWk4yIHXjVkpHVWB6a4dSLQUq2jVdjgGB7hHweU4nr25 l6S9/j5Y8NnRxlGM80DIdWV/iqeQUwZk5NvRi44yIJ3gItaI1CoXEYN7NIU/s3JC 6GeoLwVZEcKRa6LJIhFqCjenX7BQAgA84awzBX9MYYoFItOyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIccE54x3xz0OgMDGZoXD6AAWPsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGYyNWJjZDQtNjU0OS0z MGEyLTg2OTQtMTExMThjM2U4OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFprqfOABHH0u12BE4V4frph/DrQcIPEBJBL0WoJKM2gbExLCm6k6Ztt IEi+qlCw4QbxRa9aUGfNPD4hC/bYi4puXrL+SAndht+i14TTSNuaYOClN691rPpn o9YMoyceojbcryGsmBikv25r/7phM6di6BilRXm19pXRPKx7+zBzIjBwOGsgQDWl KedJhvfngJFpvUnlPnS83oN6PxNaryJTpvim7w6/Ay8VSQ9BfbhQ/YW4CQLFxR1p wc7xQ+FkKiMB9dof9CxlTJbbznm/iI77Su6+n6A4/ZSax7ZoeCSpRSLqOHevKxeS giHYVmnuIVCWZcBCGPZmq/OSpgaZC7I= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:33 2025 by rpki-client