This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa File: 2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa (raw, json) Hash identifier: 1pxtRA84Atuy9yr+0c1yIXVKk8CbPsAN7qcBY9msxF0= Subject key identifier: 8F:0E:88:F8:69:43:F3:99:D1:9C:3E:53:79:B8:FD:EB:A5:F8:B5:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBF9A324B376DA2E20E200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f9:a3:24:b3:76:da:2e:20:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=232e7b5b-4377-4798-ac63-d498b393acf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:f0:6f:07:29:6a:92:08:03:f3:be:eb:24: db:4f:f1:1d:05:e5:37:0c:20:54:f9:8e:2a:0c:77: 36:a3:12:af:8f:a5:4e:a4:a5:f7:69:d4:6d:a8:e5: 70:51:d0:74:31:8f:d5:ae:41:b2:7a:bf:10:12:cd: 49:04:72:af:7f:73:aa:34:92:bf:91:c3:77:2c:03: 76:a3:3c:4b:fd:db:c2:ed:06:4a:54:0a:01:6c:93: 7e:38:a4:33:e8:a4:10:c6:9f:33:22:e1:aa:09:66: 70:4f:a2:51:33:d3:6c:36:3d:9e:ea:40:ce:63:f0: 56:18:51:4b:bc:77:0d:a7:e2:bf:11:eb:be:13:d7: 88:01:0b:22:84:15:8c:dc:fc:c2:a7:ef:34:c3:c2: 4e:e6:d8:2b:b1:31:81:3a:42:af:80:18:01:57:84: eb:80:6b:82:b1:2c:88:f8:45:a3:82:78:11:6f:bc: a5:14:f4:e3:d9:21:e3:85:dd:4d:0c:98:e4:ea:b6: 96:ea:cd:b2:f1:0c:cd:73:96:db:5b:16:41:97:8f: 6b:56:58:96:3a:93:bb:04:fa:8f:e7:11:dd:88:71: de:4b:35:c8:5c:86:e8:6f:3a:0c:bf:76:a5:fd:c2: a8:9a:b5:8f:fe:22:7b:51:2f:c3:a5:7a:cf:cc:b4: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0E:88:F8:69:43:F3:99:D1:9C:3E:53:79:B8:FD:EB:A5:F8:B5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:48:eb:ef:e2:02:5a:64:6b:bc:d0:4b:96:ff:6c:be:da:4b: fc:7c:d8:71:5d:cd:3e:ce:77:84:47:cb:d1:c5:9b:4f:5f:14: 56:6e:83:ac:38:f4:5b:33:30:05:f0:59:17:13:03:24:0a:fb: 60:2c:4a:b3:e1:7c:e6:6f:d9:a7:af:fe:9f:3b:11:06:c7:c6: 17:91:51:5c:89:04:5e:56:fe:bc:dd:d2:9e:d5:9d:c5:42:f6: b3:0d:56:0a:d6:36:7f:9a:91:87:aa:c8:75:7d:a3:d3:68:29: 68:73:5f:b9:52:dd:8e:65:38:0f:a3:d7:49:1e:53:36:b6:9e: 19:37:a6:d0:43:3c:77:9f:6f:56:6a:7a:39:93:f8:2f:ed:af: d1:e3:3d:b8:9e:a8:04:f8:75:9d:53:c8:97:cb:dd:91:93:c5: 92:7a:0f:ed:c8:41:fa:cd:3e:65:ca:18:48:c9:cc:7c:a0:20: 1e:4f:26:bd:58:09:53:a8:fd:f9:96:70:bf:07:4d:33:8a:22: 9f:43:3c:42:40:77:11:b6:24:5d:0f:ce:4a:87:f6:9d:a8:c8: 36:f4:d3:53:f0:98:f5:e7:72:d7:34:59:7c:58:72:fc:6d:c1: bf:8c:ca:16:75:a0:7c:c5:61:b0:05:11:ba:b1:1e:ad:75:d7: ac:5e:fc:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/mjJLN22i4g4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MjMyZTdiNWItNDM3Ny00Nzk4LWFjNjMtZDQ5OGIzOTNhY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCHwbwcpapIIA/O+6yTbT/EdBeU3DCBU+Y4q DHc2oxKvj6VOpKX3adRtqOVwUdB0MY/VrkGyer8QEs1JBHKvf3OqNJK/kcN3LAN2 ozxL/dvC7QZKVAoBbJN+OKQz6KQQxp8zIuGqCWZwT6JRM9NsNj2e6kDOY/BWGFFL vHcNp+K/Eeu+E9eIAQsihBWM3PzCp+80w8JO5tgrsTGBOkKvgBgBV4TrgGuCsSyI +EWjgngRb7ylFPTj2SHjhd1NDJjk6raW6s2y8QzNc5bbWxZBl49rVliWOpO7BPqP 5xHdiHHeSzXIXIbobzoMv3al/cKomrWP/iJ7US/DpXrPzLSH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8OiPhpQ/OZ0Zw+U3m4/eul+LWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZlNDg4Y2ItNjM4Ni0z Y2VhLWJhNGYtZmUxYzRhYzY2MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhI6+/iAlpka7zQS5b/bL7aS/x82HFdzT7Od4RHy9HFm09fFFZug6w4 9FszMAXwWRcTAyQK+2AsSrPhfOZv2aev/p87EQbHxheRUVyJBF5W/rzd0p7VncVC 9rMNVgrWNn+akYeqyHV9o9NoKWhzX7lS3Y5lOA+j10keUza2nhk3ptBDPHefb1Zq ejmT+C/tr9HjPbieqAT4dZ1TyJfL3ZGTxZJ6D+3IQfrNPmXKGEjJzHygIB5PJr1Y CVOo/fmWcL8HTTOKIp9DPEJAdxG2JF0PzkqH9p2oyDb001PwmPXnctc0WXxYcvxt wb+MyhZ1oHzFYbAFEbqxHq1116xe/EE= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:21 2026 by rpki-client