This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa File: 3d429698-2bfc-3eae-8d85-55492090ea2a.roa (raw, json) Hash identifier: iHW55dhrlRbEkppbJqKT+oXEgDYsIIwbPonqVj30ujI= Subject key identifier: 79:42:11:6B:E9:F4:75:E4:96:BB:A2:4D:65:70:6A:07:00:B7:E8:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BF34B282AB3B57390F26AC000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.21.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:28:2a:b3:b5:73:90:f2:6a:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=1e57b390-51df-4ae2-a9a3-8ca3581739c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:f2:52:ec:14:5d:c0:1d:ed:be:6f:93:84: 64:97:83:46:08:8a:a2:b2:58:7e:dc:76:63:94:78: 4f:1c:fc:3a:2c:09:17:0f:e7:f2:aa:54:c8:78:f9: e7:71:83:9b:65:dc:3b:1c:3b:ed:12:ac:70:f1:7c: 32:cf:4d:60:b7:8a:8c:36:bc:83:ab:0a:fc:d5:4e: ad:c7:7d:ed:a6:38:8e:c5:4b:46:d4:fc:57:df:c5: a0:95:9c:18:5d:11:d3:56:64:a6:8f:71:e7:cb:a6: c3:08:fb:38:56:77:57:e0:1f:2a:c4:0f:13:d0:cf: e2:6a:84:54:9f:1d:07:89:21:c6:4c:0b:11:ee:70: 01:c8:8a:bb:4b:55:99:cc:0a:a0:eb:37:bf:d6:9f: 78:e5:49:36:45:ce:eb:7c:73:1f:c3:47:81:69:16: 0a:50:03:8d:64:cf:c6:d2:7b:d0:6f:aa:0e:d8:c3: 3d:9f:5b:4c:45:a8:30:43:cc:33:fc:65:65:69:9d: 58:e3:4a:eb:a1:50:62:f7:77:0c:63:87:ec:7b:60: f0:2d:37:f5:00:3e:e2:1c:24:ce:04:04:67:42:8c: 2d:9b:c1:d3:fd:3c:a6:08:f0:ad:64:fb:59:9c:9a: 61:14:ef:63:29:0a:84:01:13:26:95:67:4f:f3:22: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:11:6B:E9:F4:75:E4:96:BB:A2:4D:65:70:6A:07:00:B7:E8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:50:8d:55:d6:2c:25:3f:9e:8a:6d:7b:92:2b:14:95:d7:8b: d3:4c:e2:fa:a8:e3:6f:f4:63:c0:9e:47:60:bf:4a:1c:ea:54: ec:4a:66:1a:48:dc:c3:ac:ad:1f:41:58:7c:f7:78:1b:af:eb: 6b:a2:0e:60:d8:b3:5c:cb:dc:78:04:5b:7b:87:67:76:81:35: 45:cf:79:16:cb:dc:15:35:ec:c9:91:70:8d:53:10:27:86:98: 14:9e:ed:bf:bc:54:bc:f4:7a:1e:ec:b6:f4:df:2a:ca:9a:3c: b7:03:e0:78:b6:8d:f1:18:9d:3f:a0:ad:81:09:37:eb:49:b8: 12:af:68:5d:c2:d8:54:5b:0b:f0:43:03:b2:2f:31:cf:c0:82: 30:ca:6c:f2:ec:ba:ea:69:c7:21:27:65:6d:d2:b9:20:57:bb: 0a:52:9a:eb:5b:e1:ae:fb:c1:c6:c7:af:ba:2f:a5:a4:c2:aa: 04:51:37:38:49:2c:e0:c9:03:ba:43:c9:ff:e3:aa:0c:ae:b2: cc:4b:df:df:bb:a3:cf:6f:af:68:28:60:53:45:3f:dc:da:e7: a5:28:c3:09:0b:46:3e:d4:c8:54:77:22:1c:b5:c5:aa:11:74: a3:ef:07:e3:36:a2:1e:c3:08:93:22:95:5f:ac:c1:23:3e:e5: 90:34:e6:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSygqs7VzkPJqwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk MWU1N2IzOTAtNTFkZi00YWUyLWE5YTMtOGNhMzU4MTczOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBnyUuwUXcAd7b5vk4Rkl4NGCIqislh+3HZj lHhPHPw6LAkXD+fyqlTIePnncYObZdw7HDvtEqxw8Xwyz01gt4qMNryDqwr81U6t x33tpjiOxUtG1PxX38WglZwYXRHTVmSmj3Hny6bDCPs4VndX4B8qxA8T0M/iaoRU nx0HiSHGTAsR7nAByIq7S1WZzAqg6ze/1p945Uk2Rc7rfHMfw0eBaRYKUAONZM/G 0nvQb6oO2MM9n1tMRagwQ8wz/GVlaZ1Y40rroVBi93cMY4fse2DwLTf1AD7iHCTO BARnQowtm8HT/TymCPCtZPtZnJphFO9jKQqEARMmlWdP8yI1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlCEWvp9HXklruiTWVwagcAt+iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q0Mjk2OTgtMmJmYy0z ZWFlLThkODUtNTU0OTIwOTBlYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRQjVXWLCU/nopte5IrFJXXi9NM4vqo42/0Y8CeR2C/ShzqVOxKZhpI 3MOsrR9BWHz3eBuv62uiDmDYs1zL3HgEW3uHZ3aBNUXPeRbL3BU17MmRcI1TECeG mBSe7b+8VLz0eh7stvTfKsqaPLcD4Hi2jfEYnT+grYEJN+tJuBKvaF3C2FRbC/BD A7IvMc/AgjDKbPLsuuppxyEnZW3SuSBXuwpSmutb4a77wcbHr7ovpaTCqgRRNzhJ LODJA7pDyf/jqgyussxL39+7o89vr2goYFNFP9za56UowwkLRj7UyFR3Ihy1xaoR dKPvB+M2oh7DCJMilV+swSM+5ZA05mo= -----END CERTIFICATE-----Generated at Tue Nov 25 09:08:31 2025 by rpki-client