This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f6873f6-add8-33d8-ba78-fb6d56387a26.roa File: 4f6873f6-add8-33d8-ba78-fb6d56387a26.roa (raw, json) Hash identifier: UoOMrXx3aC5VlJ/kVPtaf1Bs4ksGzuJU2cS9ymj9S60= Subject key identifier: 5B:91:A7:2D:08:0F:F1:98:B0:85:F9:50:EB:F7:35:5D:E2:45:BB:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C09A0A266606419F964E56500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f6873f6-add8-33d8-ba78-fb6d56387a26.roa Signing time: Mon 01 Dec 2025 02:00:30 +0000 ROA not before: Mon 01 Dec 2025 02:00:30 +0000 ROA not after: Sun 01 Mar 2026 02:00:30 +0000 asID: 30036 IP address blocks: 173.19.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:09:a0:a2:66:60:64:19:f9:64:e5:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 1 02:00:30 2025 GMT Not After : Mar 1 02:00:30 2026 GMT Subject: CN=1834be69-4627-4556-8380-0d95b82469f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:84:61:78:c8:b2:32:31:f7:13:2d:8e:41:f6: 7d:98:27:8d:dd:4e:da:30:b8:0b:59:67:14:0a:57: 87:8f:93:30:9b:b8:e5:06:4d:bd:88:25:72:b1:69: c6:c6:cb:de:06:4d:73:af:48:7a:e3:73:b3:31:b9: ce:3a:45:65:71:a6:b1:0c:ad:b2:9d:ea:da:8a:90: a7:c6:ad:e3:18:6b:a3:39:fd:8e:13:04:1e:1b:aa: 2a:21:26:38:93:32:d3:f4:20:bf:13:4b:9c:c2:25: 34:2f:53:f0:15:57:7f:55:be:23:ad:90:96:09:c8: 4c:f7:a0:c3:0d:48:f5:df:c8:12:a4:ec:ac:af:4c: 97:e5:57:d3:a7:60:18:64:3d:e3:00:3f:0b:dc:8d: fd:93:2d:31:8c:6a:d6:81:3d:fd:2f:43:59:65:56: a3:81:1a:a4:5d:cc:e2:4c:e5:9e:2f:da:d6:7e:ad: e9:b5:ad:03:3a:3a:fc:d1:33:94:d0:5f:64:d7:79: e2:f8:97:71:14:5e:1f:e2:b6:a4:84:a0:81:72:7e: 8b:c6:44:51:52:7c:d5:03:89:48:61:b7:13:a2:30: 91:84:6f:ba:3a:4d:42:13:a0:ea:ef:6b:a1:6d:a8: cd:95:d7:7c:4b:52:9f:31:c0:21:84:26:55:bb:88: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:A7:2D:08:0F:F1:98:B0:85:F9:50:EB:F7:35:5D:E2:45:BB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f6873f6-add8-33d8-ba78-fb6d56387a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:93:c7:2a:ef:64:e3:ac:d7:cf:a7:0e:56:c8:30:56:38: d9:e4:b1:cf:7b:87:ce:e9:09:84:42:e2:e7:6b:bf:4f:cd:41: 6d:bf:27:2f:73:65:b8:81:64:dc:59:aa:13:25:dc:60:65:ae: 90:38:a1:b8:58:75:ad:65:30:3c:18:1a:91:a2:94:37:12:e8: db:b2:8d:ba:f0:ee:17:82:b2:2c:95:65:ec:b4:07:12:ee:0c: 4a:9c:b8:6f:b3:08:99:e3:69:20:21:95:1f:43:21:ab:03:f2: 40:10:d1:c5:64:2f:54:9f:88:3b:64:46:11:0c:35:1a:79:d7: 2c:5a:2e:1a:d9:24:94:c0:0f:36:b5:dd:ef:08:26:57:00:82: 1b:c2:55:ed:6b:ea:ae:ca:c8:44:5a:88:f1:05:12:65:05:4e: 0a:f1:f0:73:a8:93:bc:d8:0f:ee:62:b1:d8:91:88:ac:af:36: 65:13:6c:91:ae:3a:08:1c:70:a0:28:ba:e6:7d:09:f1:58:2f: c2:72:f4:b8:ab:ed:cd:d6:4f:84:31:f8:a9:27:42:7d:0a:a9: 7e:1d:b9:b8:56:bd:37:b6:37:33:82:c2:5d:8a:8e:d2:ff:c2: 81:bf:61:ed:04:31:aa:e5:7c:3b:44:61:0f:86:92:b2:42:d3: a2:5e:9a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwJoKJmYGQZ+WTlZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk MTgzNGJlNjktNDYyNy00NTU2LTgzODAtMGQ5NWI4MjQ2OWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIRheMiyMjH3Ey2OQfZ9mCeN3U7aMLgLWWcU CleHj5Mwm7jlBk29iCVysWnGxsveBk1zr0h643OzMbnOOkVlcaaxDK2yneraipCn xq3jGGujOf2OEwQeG6oqISY4kzLT9CC/E0ucwiU0L1PwFVd/Vb4jrZCWCchM96DD DUj138gSpOysr0yX5VfTp2AYZD3jAD8L3I39ky0xjGrWgT39L0NZZVajgRqkXczi TOWeL9rWfq3pta0DOjr80TOU0F9k13ni+JdxFF4f4rakhKCBcn6LxkRRUnzVA4lI YbcTojCRhG+6Ok1CE6Dq72uhbajNldd8S1KfMcAhhCZVu4gc4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuRpy0ID/GYsIX5UOv3NV3iRbskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY2ODczZjYtYWRkOC0z M2Q4LWJhNzgtZmI2ZDU2Mzg3YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRO+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVxk8cq72TjrNfPpw5WyDBWONnksc97h87pCYRC4udrv0/NQW2/Jy9z ZbiBZNxZqhMl3GBlrpA4obhYda1lMDwYGpGilDcS6Nuyjbrw7heCsiyVZey0BxLu DEqcuG+zCJnjaSAhlR9DIasD8kAQ0cVkL1SfiDtkRhEMNRp51yxaLhrZJJTADza1 3e8IJlcAghvCVe1r6q7KyERaiPEFEmUFTgrx8HOok7zYD+5isdiRiKyvNmUTbJGu OggccKAouuZ9CfFYL8Jy9Lir7c3WT4Qx+KknQn0KqX4dubhWvTe2NzOCwl2KjtL/ woG/Ye0EMarlfDtEYQ+GkrJC06Jemi8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:15 2025 by rpki-client