This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa File: 1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa (raw, json) Hash identifier: VwazU9o7HVmqxKG2hNNPmxATHabNGgxqiFujk+ZliWI= Subject key identifier: 80:27:50:ED:48:F7:96:93:4C:ED:86:CD:6B:7C:AE:8A:84:CE:9E:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A677F0745531A573F1F5C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:77:f0:74:55:31:a5:73:f1:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=745c15f5-328e-47a8-8814-2b7f314d81dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:43:53:93:13:7f:55:d1:b5:3e:02:f9:21: 25:88:cb:b3:e9:21:d8:fa:b7:be:dd:a5:b4:7e:9d: e3:eb:5b:31:c9:aa:60:75:bf:6b:af:4c:9f:99:80: bf:1b:74:07:a3:89:e9:5e:a6:f2:0f:55:11:2d:83: 0c:42:a6:12:7e:ba:97:5c:0e:e3:55:c4:73:14:82: 5a:84:bc:a1:56:24:b8:db:4e:c6:86:ad:66:39:b3: c3:3e:b4:65:5b:9d:73:d8:ac:34:ca:95:45:e9:97: 0e:83:72:1c:23:76:e3:29:23:20:9d:79:60:42:4b: 22:86:6e:da:94:6d:83:e3:ae:2b:31:9d:ee:6f:6e: c2:40:1c:86:54:fd:a3:5b:9c:25:a4:8d:7d:f1:d1: a2:f8:6d:cd:3d:b2:f0:4f:b6:d9:5c:94:ac:27:41: 03:8a:57:52:00:72:f0:62:f2:cc:ea:f3:a1:3b:26: 83:2c:3a:09:f7:04:b2:0a:08:b7:59:09:9b:f9:b1: 16:89:bd:92:9d:c9:16:d5:3a:5d:dc:20:a5:7c:e4: b2:b0:16:a2:1a:ef:78:52:f1:dd:50:9b:6c:88:5c: 50:1f:00:4e:4a:1e:7d:0c:75:f3:59:04:a4:9d:46: 52:67:b1:b7:03:60:cd:ba:4f:38:c9:00:75:49:40: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:27:50:ED:48:F7:96:93:4C:ED:86:CD:6B:7C:AE:8A:84:CE:9E:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:eb:b9:fa:6a:9e:7c:23:c5:83:91:d4:07:7f:a1:67:5c:0b: 5a:81:d0:48:c0:ab:56:e6:a7:65:b9:ab:f6:6b:e2:49:77:8a: 0b:84:7d:d4:b2:bc:58:ee:8b:a9:26:5f:26:2b:2f:f0:9b:85: cb:75:2b:80:0b:5c:22:d2:3a:7a:fe:be:a0:53:31:45:a6:77: bf:fa:06:c5:e7:96:6a:f4:a2:ce:aa:9f:b8:64:79:62:ba:20: 36:ee:a1:b6:5f:36:85:f9:92:ed:96:3d:a7:f1:c7:89:7b:f8: 5d:c5:5b:42:25:c3:a2:ae:22:d3:c1:b3:83:a0:04:b6:c4:40: 0c:32:42:b0:3f:c3:10:5f:35:cc:5a:fa:43:08:e5:3b:a4:bd: 8f:be:fb:63:ba:8a:2a:02:8b:f3:13:26:d5:8b:74:0f:74:cc: 91:61:f6:ae:52:87:62:8c:46:75:03:23:2c:c1:72:dc:a5:d6: 2e:bf:85:a5:4c:5f:6e:e8:89:65:e2:ba:fe:b9:ce:ea:37:6d: 59:84:8e:b0:3e:1b:76:e5:16:4b:09:c6:0b:1b:5e:8a:5a:17: fe:ad:dd:9b:c2:9c:8e:dd:a9:40:82:b7:83:dc:ff:4b:26:ed: 2c:88:ac:a7:5e:ce:b8:9c:61:8b:09:c2:45:65:c5:68:e1:e2: 57:dd:63:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpnfwdFUxpXPx9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NzQ1YzE1ZjUtMzI4ZS00N2E4LTg4MTQtMmI3ZjMxNGQ4MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXtDU5MTf1XRtT4C+SEliMuz6SHY+re+3aW0 fp3j61sxyapgdb9rr0yfmYC/G3QHo4npXqbyD1URLYMMQqYSfrqXXA7jVcRzFIJa hLyhViS4207Ghq1mObPDPrRlW51z2Kw0ypVF6ZcOg3IcI3bjKSMgnXlgQksihm7a lG2D464rMZ3ub27CQByGVP2jW5wlpI198dGi+G3NPbLwT7bZXJSsJ0EDildSAHLw YvLM6vOhOyaDLDoJ9wSyCgi3WQmb+bEWib2SnckW1Tpd3CClfOSysBaiGu94UvHd UJtsiFxQHwBOSh59DHXzWQSknUZSZ7G3A2DNuk84yQB1SUDl4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAnUO1I95aTTO2GzWt8roqEzp4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZhY2E3YWUtN2ExYS0z YjA1LWFjNjktM2YzNTlhZjM2YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjrufpqnnwjxYOR1Ad/oWdcC1qB0EjAq1bmp2W5q/Zr4kl3iguEfdSy vFjui6kmXyYrL/Cbhct1K4ALXCLSOnr+vqBTMUWmd7/6BsXnlmr0os6qn7hkeWK6 IDbuobZfNoX5ku2WPafxx4l7+F3FW0Ilw6KuItPBs4OgBLbEQAwyQrA/wxBfNcxa +kMI5TukvY+++2O6iioCi/MTJtWLdA90zJFh9q5Sh2KMRnUDIyzBctyl1i6/haVM X27oiWXiuv65zuo3bVmEjrA+G3blFksJxgsbXopaF/6t3ZvCnI7dqUCCt4Pc/0sm 7SyIrKdezricYYsJwkVlxWjh4lfdY48= -----END CERTIFICATE-----Generated at Sun Jan 11 09:46:04 2026 by rpki-client