This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa File: e8a4a207-02cb-31d1-9839-b150437e40a7.roa (raw, json) Hash identifier: jiZI4TEsbEcnVHT8bcRdv0xV8g6+BZ+BOC/4I2Pc/Tw= Subject key identifier: 6F:66:24:CE:42:F8:53:EA:F9:D6:FB:A4:54:0E:A2:18:DF:70:65:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B126F0C39DBE0BEAAC9B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.24.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:26:f0:c3:9d:be:0b:ea:ac:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=196b7451-0b08-45e5-b118-7cd44ecb99a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:7c:eb:55:20:f1:fb:61:32:be:12:cb:19: 8d:59:1a:0b:ee:b3:59:de:32:14:dc:9a:de:90:35: f7:23:d0:38:73:02:2f:82:b1:73:d8:84:e9:a6:8b: f2:62:2b:9b:f4:91:a4:65:48:1c:dc:33:5c:b2:b2: 16:d8:53:44:a1:b2:52:07:13:f9:97:7f:61:28:57: 14:fa:8c:08:33:df:80:55:27:f7:b7:2a:2d:20:73: cc:ab:49:28:8b:4a:15:93:9e:ed:8a:4b:2b:12:ca: cf:81:36:3f:f0:72:dc:ec:45:82:b9:55:77:4a:71: 66:e0:5c:7b:66:c9:cf:38:cb:42:c3:4e:62:db:f7: f4:f7:57:30:91:60:cf:f1:83:48:d9:44:c9:c7:d4: af:8a:12:0a:58:9e:a0:91:2b:e2:6e:33:00:3d:5f: a0:05:b9:90:20:c7:66:fa:7e:1d:ef:8b:a9:6f:ab: 8f:f6:00:3c:33:0e:51:d2:bc:9d:a2:74:44:51:41: 69:83:cf:0a:8f:08:d6:61:bd:2a:46:b7:34:e7:cf: 63:d1:de:51:ca:53:89:50:87:90:eb:7b:cf:bf:c0: c7:de:c2:0e:a0:57:94:28:a8:59:b6:c0:a2:83:a8: 74:f3:c0:83:39:76:c3:a7:4f:84:58:6e:14:1a:c7: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:24:CE:42:F8:53:EA:F9:D6:FB:A4:54:0E:A2:18:DF:70:65:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:dd:a2:50:97:72:41:e9:08:9d:39:65:d4:35:d1:ff:a3:5d: 78:5a:fa:58:bf:1d:db:27:e1:10:b1:1d:a4:9e:b1:c1:8a:6b: ce:b9:f1:98:86:7e:0f:07:50:81:c8:88:99:bd:95:3d:57:d7: 84:92:51:34:03:2d:b1:6c:cd:4e:b4:29:53:f2:f1:e7:96:05: 6f:9c:2b:5c:85:5f:b4:8f:a6:9b:b7:47:04:c2:b6:1f:82:81: d6:63:26:64:3f:db:99:b6:7d:e8:e7:1d:66:0a:99:cd:6f:e8: 8a:41:78:76:8c:f6:b8:ea:87:c0:91:bf:78:0b:1a:85:ef:c4: 07:cd:d9:1c:45:d4:fc:2a:f8:e2:8e:e1:d0:96:3a:90:49:cb: f7:55:1c:2d:29:3a:71:9e:bc:13:65:fe:61:dd:f3:9c:f2:17: 6b:56:6b:ed:07:e6:43:1e:29:c2:6b:bd:13:9d:f8:2f:f2:da: ef:1a:65:5b:e5:1d:56:84:29:85:df:28:75:aa:ce:58:f3:29: ba:8f:75:20:6b:3c:a2:25:7d:9c:7c:33:52:e8:af:06:be:a8: 73:f1:9d:d1:3f:25:21:bc:c1:ad:85:f9:d5:cc:38:c7:ec:5b: b9:0a:2c:cd:f2:01:9a:94:35:63:fb:fc:c4:39:d5:08:0f:d2: be:34:0c:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sSbww52+C+qsm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MTk2Yjc0NTEtMGIwOC00NWU1LWIxMTgtN2NkNDRlY2I5OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dB861Ug8fthMr4SyxmNWRoL7rNZ3jIU3Jre kDX3I9A4cwIvgrFz2ITppovyYiub9JGkZUgc3DNcsrIW2FNEobJSBxP5l39hKFcU +owIM9+AVSf3tyotIHPMq0koi0oVk57tiksrEsrPgTY/8HLc7EWCuVV3SnFm4Fx7 ZsnPOMtCw05i2/f091cwkWDP8YNI2UTJx9SvihIKWJ6gkSvibjMAPV+gBbmQIMdm +n4d74upb6uP9gA8Mw5R0rydonREUUFpg88KjwjWYb0qRrc0589j0d5RylOJUIeQ 63vPv8DH3sIOoFeUKKhZtsCig6h088CDOXbDp0+EWG4UGsdcGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9mJM5C+FPq+db7pFQOohjfcGU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZThhNGEyMDctMDJjYi0z MWQxLTk4MzktYjE1MDQzN2U0MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHdolCXckHpCJ05ZdQ10f+jXXha+li/Hdsn4RCxHaSescGKa8658ZiG fg8HUIHIiJm9lT1X14SSUTQDLbFszU60KVPy8eeWBW+cK1yFX7SPppu3RwTCth+C gdZjJmQ/25m2fejnHWYKmc1v6IpBeHaM9rjqh8CRv3gLGoXvxAfN2RxF1Pwq+OKO 4dCWOpBJy/dVHC0pOnGevBNl/mHd85zyF2tWa+0H5kMeKcJrvROd+C/y2u8aZVvl HVaEKYXfKHWqzljzKbqPdSBrPKIlfZx8M1Lorwa+qHPxndE/JSG8wa2F+dXMOMfs W7kKLM3yAZqUNWP7/MQ51QgP0r40DB8= -----END CERTIFICATE-----Generated at Thu Dec 18 12:56:34 2025 by rpki-client