This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa File: 989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa (raw, json) Hash identifier: 6Ja2Ug3P5z2liCJgL0yCuoZ9DheVe1wA+9mJ9w36UIw= Subject key identifier: E8:7F:49:E6:3A:FD:9F:65:DB:21:2F:F0:FD:FE:66:05:38:39:87:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBCE1E669DDDD5486A3EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:ce:1e:66:9d:dd:d5:48:6a:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=580e1b8b-116d-44da-a30e-f785d5fa1cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:53:84:4b:e0:df:5f:0d:48:47:49:63:bb: 57:05:1a:3f:85:45:18:ff:7b:7b:53:79:78:d6:32: 8b:a1:14:40:c1:9c:48:94:f6:8f:e8:d4:e8:34:90: ff:e0:8b:19:14:78:8c:28:d3:6e:5f:61:dd:b0:d3: 53:14:68:ed:8b:7e:3a:0c:7b:82:7a:3c:a5:ac:0d: b8:db:0b:50:2a:dc:2d:68:17:11:45:b9:7a:52:b9: 8d:13:1a:1f:98:c4:44:0f:b0:45:45:2d:99:65:b5: 82:33:ba:15:01:0d:f4:17:16:7f:30:2e:c1:9b:64: 90:eb:c8:95:04:6a:d6:b9:2f:1f:b6:c4:17:4f:1f: 12:1d:d4:ad:7d:68:18:6b:ac:8f:29:b0:5d:00:e6: b7:56:b5:ef:ef:76:06:15:33:55:97:93:62:be:6f: c0:ca:e1:7c:c5:d7:7b:01:1a:c0:73:ad:75:5c:99: d4:5f:42:c2:3b:f3:9b:48:8d:67:c3:c8:19:75:77: ca:9f:1e:dd:44:05:c6:f4:9f:f5:8a:19:1d:01:c2: 5a:7a:fa:89:89:d6:62:87:d2:26:43:87:ea:67:a8: e9:ae:d9:5a:ec:e7:e9:f9:fa:b0:d9:60:17:c2:14: bd:1e:83:13:67:93:70:83:cf:db:15:1f:15:c8:02: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7F:49:E6:3A:FD:9F:65:DB:21:2F:F0:FD:FE:66:05:38:39:87:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8b:fc:a6:46:ba:c8:91:80:ee:df:42:c1:e9:45:dd:e8:5a: 9f:f0:b2:1d:fa:b2:21:4d:1c:18:64:8f:57:ba:69:85:27:c5: 3d:7a:31:80:12:5f:1d:bf:33:dd:59:d4:fa:b4:0d:e0:a3:ba: 24:5a:b7:21:47:1d:e7:11:87:86:7f:3a:47:03:d0:ba:f8:66: e8:84:a1:e4:e2:12:7e:ad:58:5a:f5:f0:7c:85:03:a8:80:60: b6:34:8f:02:a2:60:6e:b2:58:f3:3b:f4:06:d0:e5:6e:5d:9f: 2b:32:85:73:c7:7d:ec:a4:50:2d:db:ac:05:c4:a1:26:9d:8b: b4:be:b3:30:18:99:90:3c:f9:3e:05:0d:92:6c:9a:32:6b:79: c2:0f:e4:c1:2c:d5:64:3c:d9:8e:36:b3:11:89:b7:c7:3f:97: 46:31:e6:46:ed:8f:2a:d0:17:41:79:94:7d:b0:d9:0a:3d:58: f1:0b:1e:d0:e7:6b:aa:d7:ca:fc:5b:23:51:e0:cb:01:ee:04: 29:e6:11:70:c4:9c:4f:a2:f1:2d:ca:95:04:22:96:50:c9:46: 90:c1:df:ec:ad:7c:47:32:de:db:12:42:b5:3d:c9:d6:41:f4: 35:48:81:93:69:3d:73:70:d4:90:83:86:86:f6:d4:0a:aa:43: 4e:b0:22:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC284eZp3d1UhqPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTgwZTFiOGItMTE2ZC00NGRhLWEzMGUtZjc4NWQ1ZmExY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLZThEvg318NSEdJY7tXBRo/hUUY/3t7U3l4 1jKLoRRAwZxIlPaP6NToNJD/4IsZFHiMKNNuX2HdsNNTFGjti346DHuCejylrA24 2wtQKtwtaBcRRbl6UrmNExofmMRED7BFRS2ZZbWCM7oVAQ30FxZ/MC7Bm2SQ68iV BGrWuS8ftsQXTx8SHdStfWgYa6yPKbBdAOa3VrXv73YGFTNVl5Nivm/AyuF8xdd7 ARrAc611XJnUX0LCO/ObSI1nw8gZdXfKnx7dRAXG9J/1ihkdAcJaevqJidZih9Im Q4fqZ6jprtla7Ofp+fqw2WAXwhS9HoMTZ5Nwg8/bFR8VyAIoFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh/SeY6/Z9l2yEv8P3+ZgU4OYcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTg5ZjdmYzEtMWViNS0z ZDJmLTkxYmYtYTZlNTY1N2NhMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOL/KZGusiRgO7fQsHpRd3oWp/wsh36siFNHBhkj1e6aYUnxT16MYAS Xx2/M91Z1Pq0DeCjuiRatyFHHecRh4Z/OkcD0Lr4ZuiEoeTiEn6tWFr18HyFA6iA YLY0jwKiYG6yWPM79AbQ5W5dnysyhXPHfeykUC3brAXEoSadi7S+szAYmZA8+T4F DZJsmjJrecIP5MEs1WQ82Y42sxGJt8c/l0Yx5kbtjyrQF0F5lH2w2Qo9WPELHtDn a6rXyvxbI1HgywHuBCnmEXDEnE+i8S3KlQQillDJRpDB3+ytfEcy3tsSQrU9ydZB 9DVIgZNpPXNw1JCDhob21AqqQ06wIjc= -----END CERTIFICATE-----Generated at Sun Jan 25 07:59:03 2026 by rpki-client