This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b42203b-7bcd-3d46-a7e9-6bfaff0f563d.roa File: 1b42203b-7bcd-3d46-a7e9-6bfaff0f563d.roa (raw, json) Hash identifier: qmQWg3Ib3j0eHkb2w4U3i6a7BfCR2WHf4vzNIMYii2w= Subject key identifier: 8B:5E:F0:EA:68:84:2C:F7:16:A6:75:A8:18:4C:15:05:C5:F7:0E:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBFAE0CA505E5BE4A02D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b42203b-7bcd-3d46-a7e9-6bfaff0f563d.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:fa:e0:ca:50:5e:5b:e4:a0:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=fb788049-17db-4757-9a4a-2c6bea39ec3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:1e:49:8e:68:fc:23:d8:fc:54:a3:bc:19: 55:79:34:f5:e9:c0:06:5f:8f:cb:b7:49:bc:6c:6c: 6a:c1:57:72:8c:fc:e0:f3:4d:c9:b7:59:f4:7c:70: c0:1d:83:28:01:e5:a9:5d:c8:61:7b:a4:e4:3a:bd: 69:b9:9d:77:8e:af:93:68:fc:60:31:64:0f:41:8f: 34:3d:4c:64:c3:09:e2:bb:86:d5:21:8a:86:bf:30: 8c:bf:e6:15:bc:b9:08:2f:96:2a:5f:9c:44:4d:d7: 4f:50:2e:ec:a1:4e:bc:b2:5f:1d:9c:37:d3:66:ed: 5f:5f:e2:2c:e3:c1:f8:83:57:4b:21:a3:e8:99:29: 4f:e3:ce:ae:d2:20:0f:99:00:77:2b:52:88:9d:f1: 4c:f3:63:89:96:27:68:43:ae:e6:6e:d1:9d:6f:06: 62:95:1d:a8:78:be:06:b9:db:a5:a5:81:92:b1:75: 67:2e:a5:7e:91:06:55:e9:dd:f9:36:bd:3b:22:8f: 6d:d7:dd:98:a9:c1:f5:59:7b:62:ff:2f:fb:07:8b: d4:6a:3b:33:c0:37:bf:57:2c:b9:a2:02:f6:06:fe: 05:44:7e:17:0b:a8:aa:bb:18:fd:8b:e5:7c:4b:02: a5:63:69:82:f5:c3:8b:02:11:f9:b6:e6:7f:68:ac: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5E:F0:EA:68:84:2C:F7:16:A6:75:A8:18:4C:15:05:C5:F7:0E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b42203b-7bcd-3d46-a7e9-6bfaff0f563d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b7:ed:a8:be:40:54:17:eb:fe:13:14:a9:27:b7:15:36:b3: a7:23:33:a9:91:a8:b4:ba:66:de:4d:7b:a6:91:87:1d:c8:7e: 66:59:64:d8:b1:2a:b4:37:89:69:35:a3:52:c7:78:a3:15:ae: cc:6f:7e:11:d3:07:75:d9:cd:75:6e:12:cb:e1:df:da:41:50: f6:2f:d1:81:f5:3a:bb:e3:22:1d:10:51:68:04:20:ed:06:7a: 32:bd:19:a9:54:cb:0d:c7:44:1b:04:4c:06:88:29:ac:3d:9f: 65:7f:79:7f:32:88:de:07:37:eb:4c:20:9a:bb:84:07:69:aa: 47:0b:f9:52:12:64:52:98:bc:08:7d:cb:20:2f:03:85:79:24: 06:04:c3:95:85:74:4b:03:fa:f1:ca:20:be:3c:86:44:6e:0c: 11:65:7e:b9:0f:8b:70:1e:00:65:b9:99:e7:e3:46:87:31:8d: 8d:c6:49:00:23:51:55:ea:42:24:9d:b4:f9:c6:ff:c3:53:03: 73:10:70:63:46:07:49:e6:e3:b4:41:b3:0b:22:a4:dc:ac:68: 48:98:e5:cd:e2:4f:0b:49:d9:73:2f:1e:25:03:f3:d3:2f:44: c6:cb:fd:46:0a:d1:a6:33:c4:de:2c:ee:67:63:03:8f:b2:11: 4c:59:44:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/rgylBeW+SgLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmI3ODgwNDktMTdkYi00NzU3LTlhNGEtMmM2YmVhMzllYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs4eSY5o/CPY/FSjvBlVeTT16cAGX4/Lt0m8 bGxqwVdyjPzg803Jt1n0fHDAHYMoAeWpXchhe6TkOr1puZ13jq+TaPxgMWQPQY80 PUxkwwniu4bVIYqGvzCMv+YVvLkIL5YqX5xETddPUC7soU68sl8dnDfTZu1fX+Is 48H4g1dLIaPomSlP486u0iAPmQB3K1KInfFM82OJlidoQ67mbtGdbwZilR2oeL4G udulpYGSsXVnLqV+kQZV6d35Nr07Io9t192YqcH1WXti/y/7B4vUajszwDe/Vyy5 ogL2Bv4FRH4XC6iquxj9i+V8SwKlY2mC9cOLAhH5tuZ/aKzaUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIte8OpohCz3FqZ1qBhMFQXF9w6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWI0MjIwM2ItN2JjZC0z ZDQ2LWE3ZTktNmJmYWZmMGY1NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe37ai+QFQX6/4TFKkntxU2s6cjM6mRqLS6Zt5Ne6aRhx3IfmZZZNix KrQ3iWk1o1LHeKMVrsxvfhHTB3XZzXVuEsvh39pBUPYv0YH1OrvjIh0QUWgEIO0G ejK9GalUyw3HRBsETAaIKaw9n2V/eX8yiN4HN+tMIJq7hAdpqkcL+VISZFKYvAh9 yyAvA4V5JAYEw5WFdEsD+vHKIL48hkRuDBFlfrkPi3AeAGW5mefjRocxjY3GSQAj UVXqQiSdtPnG/8NTA3MQcGNGB0nm47RBswsipNysaEiY5c3iTwtJ2XMvHiUD89Mv RMbL/UYK0aYzxN4s7mdjA4+yEUxZRLc= -----END CERTIFICATE-----Generated at Sun Jan 11 16:57:20 2026 by rpki-client