This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa File: 969878da-bed4-396c-a9aa-8380a6b47039.roa (raw, json) Hash identifier: OsZx8hkV15ZpbVGfHb8fixISQYSeMpDsgbL9czHhtmk= Subject key identifier: 99:64:1A:18:E0:0E:64:87:3F:3F:5F:DD:30:D7:43:38:8B:A9:CB:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A81CA5D4CB891F37368800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.25.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:1c:a5:d4:cb:89:1f:37:36:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c58bb0fa-5732-45cb-9719-93697285429a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:1b:6f:60:7f:2c:38:f4:29:2b:ec:65:bb: 6b:8c:4e:ab:10:e5:f3:cd:8b:06:f0:27:1c:e6:e9: 18:9c:99:61:68:01:4b:a9:5c:cc:2b:b3:79:e5:6b: a8:fe:06:86:46:df:2f:fb:27:39:35:5f:41:d3:31: fa:db:65:81:e5:83:78:13:0b:98:c7:67:db:80:ee: e7:33:95:7a:87:fc:69:44:9b:fa:c7:da:f0:72:b6: 71:24:cc:d2:92:77:d5:11:a7:f6:d2:43:40:27:d6: 00:dc:9f:02:9c:36:dd:d7:df:7d:5b:43:85:45:89: 11:c8:09:63:2c:59:70:2f:26:8c:80:a6:57:f4:f5: b6:f1:f8:4b:7f:7c:8e:fb:9e:6d:8d:78:01:d4:0c: ba:d5:a7:ca:53:f1:07:9a:83:6a:db:46:60:76:0e: ce:a3:13:e9:1b:7f:59:07:77:46:f1:1f:2b:04:32: b5:27:d8:e3:e2:89:0a:96:a9:a5:83:96:a5:77:47: e6:f2:e3:ea:b1:b9:4a:49:bf:16:37:48:a5:b4:24: 0f:d1:cd:a5:75:b4:51:c5:2e:82:55:9d:d4:4c:61: 9e:25:c1:d4:c0:63:43:55:0e:62:89:e8:b5:e6:85: d8:b1:cf:21:d1:79:64:00:b6:ee:c9:9c:43:d4:b0: 59:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:64:1A:18:E0:0E:64:87:3F:3F:5F:DD:30:D7:43:38:8B:A9:CB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:83:0c:38:7d:32:c6:6b:bf:d8:7b:e2:32:26:ef:c3:85:42: c0:f9:a4:41:42:8b:32:8b:6b:c7:ba:a3:1c:52:be:e9:92:6e: 85:23:29:fa:a3:cd:13:87:86:6a:8a:59:73:85:ad:79:70:45: e5:cc:d2:51:cb:e5:4f:84:9d:2a:bd:8c:df:06:57:b7:79:da: a9:e4:c3:de:0d:5f:4c:61:f5:c2:49:1a:58:36:51:0c:2c:42: 4a:a2:f1:f2:8f:aa:b2:4a:1b:a2:47:2d:f2:9a:07:4a:e7:95: b1:20:f4:ab:40:16:dd:6d:32:cd:92:e6:fa:9a:a3:bb:1b:ca: 11:b4:e9:b1:1f:84:ed:27:ae:b7:bf:00:1c:77:cd:6f:fd:ad: 50:5f:29:6e:5e:a6:53:6b:e7:d6:f4:e4:c9:a0:b1:92:ea:b7: 89:46:8c:1a:3a:4f:29:4d:38:f9:59:ed:28:cb:a6:6f:97:8a: ca:a5:cc:ca:12:ee:10:2e:59:63:f3:41:f2:bf:8a:7c:42:ab: 70:f9:21:9e:a2:3c:4e:2b:39:c8:aa:e9:eb:18:31:0b:d4:e7: a1:4e:96:ba:6d:53:53:62:a6:58:f9:70:64:12:f3:3d:3d:a7: c1:a9:c0:05:7d:e0:26:7a:ee:89:57:cd:96:51:0d:50:7a:a5: 0b:81:45:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqByl1MuJHzc2iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzU4YmIwZmEtNTczMi00NWNiLTk3MTktOTM2OTcyODU0MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAcbb2B/LDj0KSvsZbtrjE6rEOXzzYsG8Ccc 5ukYnJlhaAFLqVzMK7N55Wuo/gaGRt8v+yc5NV9B0zH622WB5YN4EwuYx2fbgO7n M5V6h/xpRJv6x9rwcrZxJMzSknfVEaf20kNAJ9YA3J8CnDbd1999W0OFRYkRyAlj LFlwLyaMgKZX9PW28fhLf3yO+55tjXgB1Ay61afKU/EHmoNq20Zgdg7OoxPpG39Z B3dG8R8rBDK1J9jj4okKlqmlg5ald0fm8uPqsblKSb8WN0iltCQP0c2ldbRRxS6C VZ3UTGGeJcHUwGNDVQ5iiei15oXYsc8h0XlkALbuyZxD1LBZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlkGhjgDmSHPz9f3TDXQziLqctiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY5ODc4ZGEtYmVkNC0z OTZjLWE5YWEtODM4MGE2YjQ3MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGDDDh9MsZrv9h74jIm78OFQsD5pEFCizKLa8e6oxxSvumSboUjKfqj zROHhmqKWXOFrXlwReXM0lHL5U+EnSq9jN8GV7d52qnkw94NX0xh9cJJGlg2UQws Qkqi8fKPqrJKG6JHLfKaB0rnlbEg9KtAFt1tMs2S5vqao7sbyhG06bEfhO0nrre/ ABx3zW/9rVBfKW5eplNr59b05MmgsZLqt4lGjBo6TylNOPlZ7SjLpm+XisqlzMoS 7hAuWWPzQfK/inxCq3D5IZ6iPE4rOciq6esYMQvU56FOlrptU1Niplj5cGQS8z09 p8GpwAV94CZ67olXzZZRDVB6pQuBRaM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:49:42 2026 by rpki-client