This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/877433fb-9b1d-369d-b268-53efc0e0a7e2.roa File: 877433fb-9b1d-369d-b268-53efc0e0a7e2.roa (raw, json) Hash identifier: d/GTpyQeBmwI3UzNb4eSAEd2QIqE1zs3Y+epkYYulEQ= Subject key identifier: 85:CC:DF:63:35:B1:E3:19:D7:F1:1C:2E:CF:25:99:36:EA:67:22:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C14BC339ECE45D5A550BBF850 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/877433fb-9b1d-369d-b268-53efc0e0a7e2.roa Signing time: Fri 05 Dec 2025 01:30:00 +0000 ROA not before: Fri 05 Dec 2025 01:30:00 +0000 ROA not after: Thu 05 Mar 2026 01:30:00 +0000 asID: 30036 IP address blocks: 173.24.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:bc:33:9e:ce:45:d5:a5:50:bb:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 5 01:30:00 2025 GMT Not After : Mar 5 01:30:00 2026 GMT Subject: CN=6bdbb1cc-7912-4e71-a0c9-02362252b176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:57:cb:58:fa:36:84:af:59:d2:a2:bb:22: e6:ad:b1:a5:2b:57:ca:6f:cf:83:29:90:f9:3c:ef: f1:d2:a1:9e:c8:71:21:74:89:1b:0c:3e:d1:23:78: 9b:6c:9d:a3:32:de:8e:01:f6:08:e0:42:81:e2:f9: 0b:cd:4f:99:5c:08:4e:0a:c8:c3:72:be:4c:22:3f: 19:cc:e0:d8:a2:5d:e2:1f:44:12:c7:85:3b:34:80: 52:3c:48:27:00:f1:08:97:24:75:32:83:44:6d:d4: c5:02:73:63:93:58:92:22:d6:80:b2:bb:22:d3:4c: 13:e1:c1:c8:df:64:74:48:89:6e:37:1c:6c:e4:98: 4e:77:b4:53:32:41:80:80:b4:ed:63:dc:58:da:50: b0:6e:d4:4b:39:48:69:eb:83:b5:a1:98:34:f8:4f: 56:1f:a2:7d:0f:74:5a:15:01:7f:71:93:a4:88:1a: 31:f2:5c:c1:8e:06:08:a3:b3:c3:ee:37:82:ac:15: cf:e6:51:f2:45:63:18:71:1b:a5:d0:23:3b:d2:36: 4c:45:43:ef:27:1e:1d:2c:61:e7:4c:db:70:5b:10: 1d:df:f1:f9:b7:f5:85:3a:d1:d6:3b:29:74:27:48: 58:4f:95:8e:46:50:4e:21:16:89:63:e5:92:c5:e6: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CC:DF:63:35:B1:E3:19:D7:F1:1C:2E:CF:25:99:36:EA:67:22:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/877433fb-9b1d-369d-b268-53efc0e0a7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:52:1d:42:23:d0:88:07:5b:50:d1:6a:fd:23:a7:cc:b6:1a: 56:91:d1:9b:23:8a:78:23:46:d8:e5:48:53:ed:1f:a3:cf:e1: f9:95:ae:a8:4a:1c:a8:41:d5:f2:5e:0f:8c:fb:4c:1c:63:b4: 27:fc:b2:04:22:58:df:2b:36:b8:eb:4d:e7:61:9f:1e:c2:50: af:dd:e0:1b:3a:2e:42:d0:e4:ee:2f:5b:a1:d2:e6:4f:f0:4a: d3:12:97:9e:6a:a5:c7:39:e9:c1:98:85:8f:a2:3d:2f:26:e6: 98:2d:38:c1:b1:ec:8c:7d:c9:7f:be:c9:50:7d:cd:a0:c9:39: bd:fa:e7:45:8c:5f:53:10:55:90:53:10:d4:24:98:eb:6c:1a: 98:32:e5:e3:6d:d8:0d:01:ae:1a:27:db:5f:06:82:bd:45:da: c7:6f:96:4d:5c:3f:75:cb:8e:8f:c9:68:59:e4:dd:96:8e:ce: d6:2e:22:46:d8:24:07:e8:3f:6f:f2:bb:52:c5:dd:23:c1:96: 45:35:9c:be:d3:56:88:43:60:7b:28:6e:54:dd:49:dc:a9:a2: f0:cb:e6:5a:de:2d:c8:5c:cf:de:30:2d:3c:e6:be:fd:d6:2a: ee:18:56:c1:1c:7e:45:79:f2:fb:33:f6:77:cc:d7:ff:a5:3c: 49:2e:ba:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUvDOezkXVpVC7+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwNTAxMzAwMFoXDTI2MDMwNTAxMzAwMFowLzEtMCsGA1UEAxMk NmJkYmIxY2MtNzkxMi00ZTcxLWEwYzktMDIzNjIyNTJiMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq1Xy1j6NoSvWdKiuyLmrbGlK1fKb8+DKZD5 PO/x0qGeyHEhdIkbDD7RI3ibbJ2jMt6OAfYI4EKB4vkLzU+ZXAhOCsjDcr5MIj8Z zODYol3iH0QSx4U7NIBSPEgnAPEIlyR1MoNEbdTFAnNjk1iSItaAsrsi00wT4cHI 32R0SIluNxxs5JhOd7RTMkGAgLTtY9xY2lCwbtRLOUhp64O1oZg0+E9WH6J9D3Ra FQF/cZOkiBox8lzBjgYIo7PD7jeCrBXP5lHyRWMYcRul0CM70jZMRUPvJx4dLGHn TNtwWxAd3/H5t/WFOtHWOyl0J0hYT5WORlBOIRaJY+WSxeZI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXM32M1seMZ1/EcLs8lmTbqZyJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODc3NDMzZmItOWIxZC0z NjlkLWIyNjgtNTNlZmMwZTBhN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNSHUIj0IgHW1DRav0jp8y2GlaR0ZsjingjRtjlSFPtH6PP4fmVrqhK HKhB1fJeD4z7TBxjtCf8sgQiWN8rNrjrTedhnx7CUK/d4Bs6LkLQ5O4vW6HS5k/w StMSl55qpcc56cGYhY+iPS8m5pgtOMGx7Ix9yX++yVB9zaDJOb3650WMX1MQVZBT ENQkmOtsGpgy5eNt2A0Brhon218Ggr1F2sdvlk1cP3XLjo/JaFnk3ZaOztYuIkbY JAfoP2/yu1LF3SPBlkU1nL7TVohDYHsoblTdSdypovDL5lreLchcz94wLTzmvv3W Ku4YVsEcfkV58vsz9nfM1/+lPEkuuhs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:27:20 2025 by rpki-client