This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa File: 157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa (raw, json) Hash identifier: FU58NU9XTd4v6DcRsf+RM4mjyD8rLFkGmjvPLgxUf6o= Subject key identifier: E6:73:F4:18:32:7A:84:70:95:47:00:5F:98:FA:13:D2:69:71:C0:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C487127D42DE0F92BF354A6C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:27:d4:2d:e0:f9:2b:f3:54:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=c4fab82c-c09a-4d4b-a856-a3cab7760014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:a0:32:8c:c5:da:ed:2d:0d:80:a8:0f:36: 59:c1:c7:65:e7:28:8b:ca:60:80:17:73:04:8a:c5: f2:d1:af:98:fe:df:f4:67:46:ba:23:37:f9:f4:bf: 70:db:0d:0b:03:0f:0c:11:2d:c5:92:d4:05:88:1a: b7:04:ba:82:af:4c:67:89:59:e8:14:84:30:f2:ca: e6:c0:e1:8e:61:bd:f0:ce:ef:a5:b0:f7:38:f8:f9: 8d:28:d9:a4:fd:ec:f6:95:27:c0:db:09:b5:cc:d1: 58:99:19:63:22:db:e3:46:ce:81:e9:3d:d6:4b:80: 73:b1:25:23:de:d0:54:38:25:2d:f9:a5:bf:7c:32: 77:3c:75:91:8a:e6:de:92:4d:ed:aa:48:ff:99:e4: 34:5d:84:49:da:74:ef:62:de:4e:a6:f8:85:e0:44: c9:4f:86:93:1c:96:f2:ed:94:82:90:3d:63:36:64: 0e:78:7e:eb:cb:15:64:18:ca:62:63:b3:cd:b6:8e: 39:c1:fb:6f:9e:b3:ee:5f:08:d3:f8:e2:fc:6f:86: 16:dd:1c:52:d6:cb:c7:0f:5f:cc:4e:86:d3:66:26: 31:6e:1d:3a:cb:b6:ba:dc:35:f2:99:41:be:16:d3: f8:9c:f4:61:d6:f6:c4:55:17:b5:23:05:e8:64:34: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:73:F4:18:32:7A:84:70:95:47:00:5F:98:FA:13:D2:69:71:C0:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:83:58:6b:a7:2d:a7:1d:2d:8c:96:a0:ea:ab:05:8a:1e:24: 42:38:78:b9:35:56:18:ad:eb:f5:01:0a:af:1a:cf:55:b2:72: 95:0a:e7:b4:24:1c:83:b9:0e:0e:ad:86:86:d4:f7:d3:76:e1: 22:ae:3d:ad:2b:c3:40:21:a4:02:4a:0f:e0:0b:8f:1e:a7:4b: 1d:54:27:d7:5d:a0:d0:83:45:1b:a6:7e:92:57:ac:2f:d5:14: 30:cd:2e:f8:0b:c0:e6:63:a2:9c:e5:1e:1f:8f:a8:9c:9e:01: 89:93:f8:a6:92:17:55:fb:3d:1a:fa:52:c1:16:39:5b:97:4d: eb:17:2a:fe:35:d0:d3:39:11:32:6e:1a:2c:ee:f8:d5:f8:73: eb:c3:f8:1a:ba:2e:4b:1f:96:06:59:3e:e2:38:9d:b3:8c:be: 63:46:d6:7e:92:7e:99:b7:99:90:7b:4a:64:85:5e:75:51:cc: 5b:e1:7a:e4:5f:2c:d6:73:9c:d0:01:73:97:bd:1e:bf:79:58: f4:93:2e:7d:e4:33:16:b6:3e:5b:e6:8f:4d:10:56:6a:26:ac: 27:13:19:fb:c8:37:66:47:62:d2:0a:cf:4a:ab:39:db:e9:a0: af:1b:67:e2:58:86:44:35:cf:7d:5a:f6:87:68:fc:c8:dc:77: 11:72:3e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcSfULeD5K/NUpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YzRmYWI4MmMtYzA5YS00ZDRiLWE4NTYtYTNjYWI3NzYwMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXagMozF2u0tDYCoDzZZwcdl5yiLymCAF3ME isXy0a+Y/t/0Z0a6Izf59L9w2w0LAw8MES3FktQFiBq3BLqCr0xniVnoFIQw8srm wOGOYb3wzu+lsPc4+PmNKNmk/ez2lSfA2wm1zNFYmRljItvjRs6B6T3WS4BzsSUj 3tBUOCUt+aW/fDJ3PHWRiubekk3tqkj/meQ0XYRJ2nTvYt5OpviF4ETJT4aTHJby 7ZSCkD1jNmQOeH7ryxVkGMpiY7PNto45wftvnrPuXwjT+OL8b4YW3RxS1svHD1/M TobTZiYxbh06y7a63DXymUG+FtP4nPRh1vbEVRe1IwXoZDRuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZz9BgyeoRwlUcAX5j6E9JpccCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTU3ZjhjNTQtYTZkYS0z YjBmLTlkOTAtOGFlNDcyYzhkMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSDWGunLacdLYyWoOqrBYoeJEI4eLk1Vhit6/UBCq8az1WycpUK57Qk HIO5Dg6thobU99N24SKuPa0rw0AhpAJKD+ALjx6nSx1UJ9ddoNCDRRumfpJXrC/V FDDNLvgLwOZjopzlHh+PqJyeAYmT+KaSF1X7PRr6UsEWOVuXTesXKv410NM5ETJu Gizu+NX4c+vD+Bq6LksflgZZPuI4nbOMvmNG1n6Sfpm3mZB7SmSFXnVRzFvheuRf LNZznNABc5e9Hr95WPSTLn3kMxa2Plvmj00QVmomrCcTGfvIN2ZHYtIKz0qrOdvp oK8bZ+JYhkQ1z31a9odo/MjcdxFyPtE= -----END CERTIFICATE-----Generated at Sun Jan 11 17:08:29 2026 by rpki-client