This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/865ea585-5b3f-37fc-a214-e2f696966605.roa File: 865ea585-5b3f-37fc-a214-e2f696966605.roa (raw, json) Hash identifier: PTSyexBx4NPaB96H8Ms8SQ0WzqGtn+jKVwlI9GkS58U= Subject key identifier: B1:77:FC:17:64:4F:9F:9C:D9:E1:57:23:6F:49:A3:9E:AB:90:D0:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C170FC4EB7E0D74C9A52C3500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/865ea585-5b3f-37fc-a214-e2f696966605.roa Signing time: Fri 05 Dec 2025 21:30:00 +0000 ROA not before: Fri 05 Dec 2025 21:30:00 +0000 ROA not after: Thu 05 Mar 2026 21:30:00 +0000 asID: 19905 IP address blocks: 173.25.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:0f:c4:eb:7e:0d:74:c9:a5:2c:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 5 21:30:00 2025 GMT Not After : Mar 5 21:30:00 2026 GMT Subject: CN=d53c0afd-ca13-4558-b683-e04806a542bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:cb:c1:97:ba:5f:77:a2:ca:d5:fc:e6:45: f0:38:31:2b:9e:ca:53:71:39:5f:70:f5:03:fd:d7: 01:b5:52:13:22:64:d0:83:d1:be:c8:61:fc:88:c6: 31:37:38:81:f1:c6:cd:29:fd:b8:bc:12:84:cf:b3: 86:b2:d1:0d:cb:83:bc:4a:13:ce:e9:0b:89:b0:c8: c5:e6:89:ee:40:d3:5d:92:9e:3d:ae:ad:e7:b4:78: 67:22:5e:88:13:f2:a9:9a:f8:22:5b:22:a0:bf:38: 30:0c:ce:57:29:29:7c:1c:90:fd:dc:2c:cd:20:7c: 05:d8:0f:5f:9b:70:6a:69:58:45:87:d9:65:22:41: 89:ed:38:6b:7f:d7:cc:27:f9:d7:a3:58:1c:03:a5: a0:3d:fc:ea:5e:5a:dc:a8:ce:a7:d6:67:ea:16:6e: 41:fc:86:04:45:c7:66:78:a4:ae:1c:af:7e:22:a5: 0f:0f:92:33:e6:aa:5d:dd:5c:5d:57:0f:d0:29:b7: 85:fe:de:bf:f3:d9:9a:77:a2:98:2e:4b:99:b8:5b: dd:c7:f3:ea:2f:13:29:18:ab:37:b3:00:ae:69:31: b6:23:5f:23:ac:63:92:26:74:66:5c:85:3d:ae:43: 82:b2:60:52:1b:71:29:cb:ae:63:c8:41:e9:21:fc: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:77:FC:17:64:4F:9F:9C:D9:E1:57:23:6F:49:A3:9E:AB:90:D0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/865ea585-5b3f-37fc-a214-e2f696966605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c5:13:b7:89:87:88:cb:b9:7e:44:75:86:3f:c2:99:e2:7a: 40:6f:1a:f3:6f:e7:29:44:4e:0b:89:7e:85:00:45:7d:ee:2b: b5:d4:c3:83:91:09:a4:d4:b1:a1:62:76:f5:4f:1d:d3:b4:80: b9:a6:71:e1:79:e1:2a:dc:0a:fb:e4:0f:be:24:ef:77:c6:c7: 1a:0f:f4:f6:b3:60:dd:bd:4d:42:51:b1:81:32:35:87:b6:27: f3:44:df:d6:0a:e1:90:26:57:d0:39:c7:d5:57:80:31:3e:ce: e7:0b:0c:b4:04:d9:d8:70:db:25:c1:6f:d2:d3:13:60:d4:8a: c8:d6:fd:12:3f:76:e1:83:76:3a:d8:37:36:4b:2d:22:0e:a4: dc:34:a3:2b:8e:8e:06:d5:e7:e5:7c:c2:1c:d9:2a:42:f4:e4: 31:be:e7:82:32:39:46:44:b4:dd:8d:55:4d:ea:bf:a9:68:69: 36:34:e4:ac:49:f8:bf:c8:81:d3:82:a6:0f:16:20:64:f2:ae: ad:e0:80:62:82:1c:e2:16:2f:ae:77:78:59:d0:52:7c:17:e4: d1:14:41:8b:69:70:6f:e9:42:a3:3b:9e:2b:15:e8:5b:d4:c7: a3:f1:7a:17:91:06:c7:3c:ab:79:8d:d5:4e:c4:2a:c8:9a:41: 21:39:a2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwXD8Trfg10yaUsNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwNTIxMzAwMFoXDTI2MDMwNTIxMzAwMFowLzEtMCsGA1UEAxMk ZDUzYzBhZmQtY2ExMy00NTU4LWI2ODMtZTA0ODA2YTU0MmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/3LwZe6X3eiytX85kXwODErnspTcTlfcPUD /dcBtVITImTQg9G+yGH8iMYxNziB8cbNKf24vBKEz7OGstENy4O8ShPO6QuJsMjF 5onuQNNdkp49rq3ntHhnIl6IE/KpmvgiWyKgvzgwDM5XKSl8HJD93CzNIHwF2A9f m3BqaVhFh9llIkGJ7Thrf9fMJ/nXo1gcA6WgPfzqXlrcqM6n1mfqFm5B/IYERcdm eKSuHK9+IqUPD5Iz5qpd3VxdVw/QKbeF/t6/89mad6KYLkuZuFvdx/PqLxMpGKs3 swCuaTG2I18jrGOSJnRmXIU9rkOCsmBSG3Epy65jyEHpIfw7BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF3/BdkT5+c2eFXI29Jo56rkNC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODY1ZWE1ODUtNWIzZi0z N2ZjLWEyMTQtZTJmNjk2OTY2NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbFE7eJh4jLuX5EdYY/wpniekBvGvNv5ylETguJfoUARX3uK7XUw4OR CaTUsaFidvVPHdO0gLmmceF54SrcCvvkD74k73fGxxoP9PazYN29TUJRsYEyNYe2 J/NE39YK4ZAmV9A5x9VXgDE+zucLDLQE2dhw2yXBb9LTE2DUisjW/RI/duGDdjrY NzZLLSIOpNw0oyuOjgbV5+V8whzZKkL05DG+54IyOUZEtN2NVU3qv6loaTY05KxJ +L/IgdOCpg8WIGTyrq3ggGKCHOIWL653eFnQUnwX5NEUQYtpcG/pQqM7nisV6FvU x6PxeheRBsc8q3mN1U7EKsiaQSE5oss= -----END CERTIFICATE-----Generated at Sun Dec 7 07:32:44 2025 by rpki-client