This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1211bb0a-b59b-3c66-ae37-de638e7aabe7.roa File: 1211bb0a-b59b-3c66-ae37-de638e7aabe7.roa (raw, json) Hash identifier: 2AyHpWeWnXuOn6ida6Yhiv8MUF/JXHK94JsKvC2r9f0= Subject key identifier: 88:2D:3F:DA:77:5D:C6:F0:9A:E7:5D:0C:78:A5:14:75:BE:45:83:A0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBE227BE9B5FE235BC3620 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1211bb0a-b59b-3c66-ae37-de638e7aabe7.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.20.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e2:27:be:9b:5f:e2:35:bc:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2bc67edc-120e-4b23-82f7-b78b384bef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:e4:2c:6a:b6:9a:17:ec:c0:b1:aa:09:65: cd:bd:1f:c1:5e:70:70:d3:6e:19:d5:84:fb:4f:60: 97:b0:e9:61:5c:70:a0:23:76:5e:57:a9:7e:7b:28: ee:2c:5a:03:73:05:0b:fa:fc:6a:04:25:e1:2a:6d: 59:fd:ea:2c:13:a3:7b:86:20:1c:0e:94:37:89:31: f8:06:30:68:4e:ed:d8:b5:1f:c1:54:7b:32:9b:49: f9:fb:d9:31:87:85:6c:ce:98:4a:ae:7b:48:57:1a: 5c:e8:6f:ee:3b:57:20:f9:3b:8f:08:92:a3:58:6e: 3c:ff:d0:10:2a:94:27:3a:ba:f3:3c:97:3b:9e:04: c4:12:a5:ac:2a:1b:45:2a:28:b3:ce:5c:32:1c:69: 12:7d:1b:5f:2e:e0:a4:61:c1:8c:08:48:e1:f1:f8: 70:89:84:3c:d0:3e:61:ea:fd:d6:54:42:0e:ec:d2: b7:92:9f:2d:3d:ca:4b:f2:62:7a:de:29:fe:f2:c3: a1:d3:06:a3:12:75:02:f9:e1:e3:e2:31:12:b4:d9: 4b:05:7e:0f:42:26:76:fc:91:9a:02:48:bf:a6:b2: 1d:77:45:60:c8:eb:7c:b1:5f:e9:34:ec:bd:d4:98: 2c:56:d6:1b:21:74:2a:2f:b3:01:6f:ed:a0:47:23: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:3F:DA:77:5D:C6:F0:9A:E7:5D:0C:78:A5:14:75:BE:45:83:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1211bb0a-b59b-3c66-ae37-de638e7aabe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0b:d7:1d:b6:9f:df:27:19:28:f1:3e:4d:00:c9:fb:25:67: ce:00:f0:ba:7e:2c:99:d2:8b:d1:6d:2e:eb:2c:49:76:1b:23: 6c:5f:0c:54:db:f0:2c:89:e3:c0:3f:ff:97:13:d4:c5:49:d7: 26:a9:ab:8e:7b:04:51:d6:1f:29:31:ff:09:e4:a9:1e:64:b1: cf:9e:63:14:c1:98:86:11:e5:16:05:e1:b4:34:43:18:30:15: c2:65:e2:b4:65:3f:2c:71:ba:40:da:a9:4a:e5:ec:7e:52:f5: bb:aa:89:ed:66:cc:59:9f:6f:73:18:2b:2f:2f:dc:5b:75:9c: 6f:32:10:c8:62:63:8b:22:58:6a:10:d6:e4:c7:de:2c:c2:01: 5b:4e:3a:4f:09:2f:4d:5a:e1:92:b4:c9:65:85:5f:d3:4c:13: 2d:3f:bb:12:68:94:fa:10:60:a5:6e:7a:1d:71:d0:aa:7f:ff: ce:1f:49:d4:3f:5b:05:d4:be:ff:59:96:78:5d:39:3a:60:28: 48:f1:f4:04:f0:3a:95:f0:ba:3a:c7:3a:e5:01:4c:e1:c2:a7: ba:d2:6d:d4:d3:60:38:6b:ca:a5:d9:87:42:08:e1:e6:94:17: 64:fb:c0:3b:e3:46:55:ae:82:4a:cf:de:c8:32:fc:6d:db:1b: 22:e3:bc:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+Invptf4jW8NiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmJjNjdlZGMtMTIwZS00YjIzLTgyZjctYjc4YjM4NGJlZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthrkLGq2mhfswLGqCWXNvR/BXnBw024Z1YT7 T2CXsOlhXHCgI3ZeV6l+eyjuLFoDcwUL+vxqBCXhKm1Z/eosE6N7hiAcDpQ3iTH4 BjBoTu3YtR/BVHsym0n5+9kxh4VszphKrntIVxpc6G/uO1cg+TuPCJKjWG48/9AQ KpQnOrrzPJc7ngTEEqWsKhtFKiizzlwyHGkSfRtfLuCkYcGMCEjh8fhwiYQ80D5h 6v3WVEIO7NK3kp8tPcpL8mJ63in+8sOh0wajEnUC+eHj4jEStNlLBX4PQiZ2/JGa Aki/prIdd0VgyOt8sV/pNOy91JgsVtYbIXQqL7MBb+2gRyNg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgtP9p3XcbwmuddDHilFHW+RYOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTIxMWJiMGEtYjU5Yi0z YzY2LWFlMzctZGU2MzhlN2FhYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIML1x22n98nGSjxPk0AyfslZ84A8Lp+LJnSi9FtLussSXYbI2xfDFTb 8CyJ48A//5cT1MVJ1yapq457BFHWHykx/wnkqR5ksc+eYxTBmIYR5RYF4bQ0Qxgw FcJl4rRlPyxxukDaqUrl7H5S9buqie1mzFmfb3MYKy8v3Ft1nG8yEMhiY4siWGoQ 1uTH3izCAVtOOk8JL01a4ZK0yWWFX9NMEy0/uxJolPoQYKVueh1x0Kp//84fSdQ/ WwXUvv9ZlnhdOTpgKEjx9ATwOpXwujrHOuUBTOHCp7rSbdTTYDhryqXZh0II4eaU F2T7wDvjRlWugkrP3sgy/G3bGyLjvMc= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:39 2026 by rpki-client