This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa File: 122c6bfa-a998-31cf-82a5-f32b6525309e.roa (raw, json) Hash identifier: OnCR8VfXFwzPmGtTnpQY54IsTlDazV+Z3Jjmh98gJEc= Subject key identifier: A5:73:3B:0A:6A:2D:DB:42:1E:30:E5:62:AF:EE:AE:A2:16:89:85:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5A967478DFE8A9DCCA766100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.29.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:74:78:df:e8:a9:dc:ca:76:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=06df3829-2214-4eec-ac92-82f1851c6256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:41:bc:3f:db:fb:ee:ca:49:27:55:a0:0e: 9b:f7:4a:90:b6:53:13:14:86:1c:7b:96:22:d5:e5: 31:b3:4c:e9:02:6f:c1:36:3a:97:42:71:df:b3:62: 1a:30:c3:1e:76:b8:9f:e4:19:27:85:e5:13:3e:84: a1:32:fd:f3:1e:d8:ca:1a:89:04:21:1c:e4:c8:e5: f4:47:15:8c:d0:aa:79:2a:14:a5:d6:58:bb:24:be: c6:cb:f1:3c:08:24:d1:83:60:8d:c6:92:97:2c:ba: 56:4c:d4:d4:27:4f:9d:25:0e:0a:32:89:fe:a8:19: 89:02:1d:06:c2:05:41:8c:49:9b:16:2f:7d:5e:33: d5:9b:15:b1:2d:03:4d:84:b4:70:5a:72:19:b7:6b: d5:7b:59:69:b6:0e:1a:84:b5:46:ce:ae:cf:7b:75: 5e:fc:ff:20:20:de:3c:14:b1:f1:a7:3d:d0:4f:74: bf:25:db:e8:36:5d:9a:e5:8c:3b:54:32:00:ac:cf: c7:9f:51:64:7d:45:93:07:f6:4c:ad:ea:50:af:9f: 8d:b6:36:e4:8c:58:a8:c4:cf:c2:06:3d:cc:f9:b3: a7:48:bc:66:c5:44:78:e8:6a:e9:c7:78:55:7f:30: 5f:92:e5:af:9a:37:b5:cf:e6:54:22:84:23:33:22: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:73:3B:0A:6A:2D:DB:42:1E:30:E5:62:AF:EE:AE:A2:16:89:85:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2d:5c:44:bb:32:d0:aa:73:c2:41:fa:d1:c9:ac:6f:56:95: 53:4b:47:a1:2e:51:29:7c:4a:9c:ec:24:ce:05:78:af:3f:10: 5c:e3:31:84:0a:5f:76:3a:11:04:cc:4a:af:bd:02:bc:d9:6b: a4:11:1e:61:72:4e:8f:27:8e:6a:dd:99:38:22:ab:5a:74:a0: 48:70:1c:ed:1e:ad:11:86:ae:d2:fe:46:21:f5:49:b7:68:f3: 17:0f:5d:98:f1:c1:38:38:6a:8a:29:5c:9a:e1:fc:c2:d8:e1: a4:b0:5c:4f:03:49:63:09:de:50:e8:11:2f:3b:39:fc:25:11: 78:3a:15:54:4f:61:93:2c:d6:2c:af:66:cb:d1:79:e4:8e:1e: 51:27:bc:e3:db:e3:06:b7:78:26:50:a0:af:d5:10:ac:53:c2: 03:69:f0:98:be:57:8f:f2:c4:b4:e9:ad:18:f7:3f:54:df:56: c8:d3:6a:67:96:f5:05:7c:27:08:e2:a2:aa:bc:c6:16:fb:4b: c8:42:33:96:0f:2f:9d:4a:f7:97:ef:70:32:31:ff:6d:61:08: e1:0c:4a:0b:e5:5a:cc:e8:a1:5f:1b:e6:9b:18:12:8c:81:05: 1e:39:e2:ba:07:a1:28:87:c1:fc:2a:23:ed:81:44:58:c7:d5: 41:83:e6:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExalnR43+ip3Mp2YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk MDZkZjM4MjktMjIxNC00ZWVjLWFjOTItODJmMTg1MWM2MjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE9BvD/b++7KSSdVoA6b90qQtlMTFIYce5Yi 1eUxs0zpAm/BNjqXQnHfs2IaMMMedrif5BknheUTPoShMv3zHtjKGokEIRzkyOX0 RxWM0Kp5KhSl1li7JL7Gy/E8CCTRg2CNxpKXLLpWTNTUJ0+dJQ4KMon+qBmJAh0G wgVBjEmbFi99XjPVmxWxLQNNhLRwWnIZt2vVe1lptg4ahLVGzq7Pe3Ve/P8gIN48 FLHxpz3QT3S/JdvoNl2a5Yw7VDIArM/Hn1FkfUWTB/ZMrepQr5+NtjbkjFioxM/C Bj3M+bOnSLxmxUR46Grpx3hVfzBfkuWvmje1z+ZUIoQjMyIZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVzOwpqLdtCHjDlYq/urqIWiYW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTIyYzZiZmEtYTk5OC0z MWNmLTgyYTUtZjMyYjY1MjUzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAActXES7MtCqc8JB+tHJrG9WlVNLR6EuUSl8SpzsJM4FeK8/EFzjMYQK X3Y6EQTMSq+9ArzZa6QRHmFyTo8njmrdmTgiq1p0oEhwHO0erRGGrtL+RiH1Sbdo 8xcPXZjxwTg4aoopXJrh/MLY4aSwXE8DSWMJ3lDoES87OfwlEXg6FVRPYZMs1iyv ZsvReeSOHlEnvOPb4wa3eCZQoK/VEKxTwgNp8Ji+V4/yxLTprRj3P1TfVsjTameW 9QV8Jwjioqq8xhb7S8hCM5YPL51K95fvcDIx/21hCOEMSgvlWszooV8b5psYEoyB BR454roHoSiHwfwqI+2BRFjH1UGD5rA= -----END CERTIFICATE-----Generated at Sun Jan 11 09:46:59 2026 by rpki-client