This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b754e13-afea-3f6f-b341-04d616782a8a.roa File: 2b754e13-afea-3f6f-b341-04d616782a8a.roa (raw, json) Hash identifier: ld4fKnKntwd84Hc/rG1lSdvLP4a1PxU6cYi26b9Mrcw= Subject key identifier: 29:FF:1B:35:04:F6:BC:70:92:FE:C1:0B:C3:9D:06:BA:EF:31:77:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4176842599139CE0957A6540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b754e13-afea-3f6f-b341-04d616782a8a.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:84:25:99:13:9c:e0:95:7a:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=7e0642f1-8466-49ee-aa2d-646f3ca30fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:7a:87:9b:2f:74:fb:63:86:6c:e0:22:28: 88:96:b0:74:82:66:9c:56:2b:d9:89:9a:91:38:65: 46:04:1c:34:42:b0:9e:3e:1a:13:a3:59:99:dc:6f: 11:8c:a8:df:08:11:9a:3e:21:80:f5:c2:06:94:fd: 48:01:07:d2:b7:f0:04:25:fc:e9:f3:db:5a:46:8c: e2:77:df:dd:b0:50:1c:03:1d:e0:2e:0b:7b:59:b3: 87:83:1a:d1:e8:34:ba:6f:6c:30:2e:30:43:70:8a: 41:b5:89:3e:b5:11:17:03:97:81:1f:f4:5e:c5:33: b1:2d:09:d9:bb:45:25:07:68:e3:9e:0e:37:41:83: c1:ff:10:18:fa:26:eb:15:2c:f9:7c:6c:52:69:f0: 9f:3c:63:96:61:1c:45:16:d6:40:d9:39:1e:2b:f0: f0:d1:4e:43:2f:df:56:6a:99:93:87:ae:df:14:ef: 9a:fb:54:d6:ae:06:a3:2d:9c:d4:c6:6c:98:b4:2a: 05:19:18:bc:46:c8:36:f4:cf:9c:33:54:b8:7e:58: cd:ca:41:2c:f0:6f:dd:05:6c:a5:3c:d4:39:bb:17: 7d:14:e1:0e:46:d3:5c:ec:13:31:8e:35:87:71:60: e7:e6:05:b4:06:b5:45:7e:90:fe:f4:6b:e5:84:91: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FF:1B:35:04:F6:BC:70:92:FE:C1:0B:C3:9D:06:BA:EF:31:77:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b754e13-afea-3f6f-b341-04d616782a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b1:c8:80:b5:72:19:31:bf:ec:86:23:bd:04:04:c8:bb:7c: 24:f7:3a:2d:dc:e6:d9:18:42:73:1e:e9:d5:57:97:5b:8a:e2: ba:ba:61:69:de:dd:92:7d:f1:95:92:f5:18:6a:15:f1:9f:00: 32:61:82:1a:06:31:79:89:4f:55:1c:9d:a3:3d:99:2a:80:e4: 32:f6:9e:e8:d7:b1:24:01:c8:7f:0e:6f:2b:58:19:d3:2b:b0: b7:0e:37:41:4f:6a:af:6b:df:c4:83:dd:44:17:9c:b9:57:be: c0:88:ca:6d:5a:7a:33:a5:07:24:2c:c5:6c:c3:dd:0f:bb:0b: 3c:00:03:5c:80:50:a2:a4:48:95:ce:79:50:17:48:2c:07:d6: f1:9c:6c:8c:b9:43:ce:b2:93:71:ce:b3:30:e6:ed:93:ad:32: 35:8f:ea:52:e5:51:0c:ee:1b:d8:e6:cd:43:2c:fb:80:a5:fe: f1:4c:72:c4:9d:db:97:f6:83:26:32:74:e4:15:6f:10:a7:f5: dd:1f:59:3b:45:05:6c:a2:ac:32:5a:21:ac:29:fe:c3:c9:91: d7:e1:5e:72:07:b1:3b:85:0d:f3:44:4a:b3:8b:56:8b:37:8d: 92:ca:82:cd:45:f3:63:00:e3:c4:9e:51:a7:fb:f8:57:5f:7f: a5:a4:7a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdoQlmROc4JV6ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk N2UwNjQyZjEtODQ2Ni00OWVlLWFhMmQtNjQ2ZjNjYTMwZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDJ6h5svdPtjhmzgIiiIlrB0gmacVivZiZqR OGVGBBw0QrCePhoTo1mZ3G8RjKjfCBGaPiGA9cIGlP1IAQfSt/AEJfzp89taRozi d9/dsFAcAx3gLgt7WbOHgxrR6DS6b2wwLjBDcIpBtYk+tREXA5eBH/RexTOxLQnZ u0UlB2jjng43QYPB/xAY+ibrFSz5fGxSafCfPGOWYRxFFtZA2TkeK/Dw0U5DL99W apmTh67fFO+a+1TWrgajLZzUxmyYtCoFGRi8Rsg29M+cM1S4fljNykEs8G/dBWyl PNQ5uxd9FOEORtNc7BMxjjWHcWDn5gW0BrVFfpD+9GvlhJHCiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn/GzUE9rxwkv7BC8OdBrrvMXedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI3NTRlMTMtYWZlYS0z ZjZmLWIzNDEtMDRkNjE2NzgyYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHexyIC1chkxv+yGI70EBMi7fCT3Oi3c5tkYQnMe6dVXl1uK4rq6YWne 3ZJ98ZWS9RhqFfGfADJhghoGMXmJT1UcnaM9mSqA5DL2nujXsSQByH8ObytYGdMr sLcON0FPaq9r38SD3UQXnLlXvsCIym1aejOlByQsxWzD3Q+7CzwAA1yAUKKkSJXO eVAXSCwH1vGcbIy5Q86yk3HOszDm7ZOtMjWP6lLlUQzuG9jmzUMs+4Cl/vFMcsSd 25f2gyYydOQVbxCn9d0fWTtFBWyirDJaIawp/sPJkdfhXnIHsTuFDfNESrOLVos3 jZLKgs1F82MA48SeUaf7+Fdff6Wkep8= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:26 2026 by rpki-client