This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd072e5-9e09-3e63-807c-1fbb14ce4ae1.roa File: 3fd072e5-9e09-3e63-807c-1fbb14ce4ae1.roa (raw, json) Hash identifier: GGxqVOTYYaz9T8qAJm9yvAzMJ24r7WTE/jepS2mXE+4= Subject key identifier: 3A:FC:A5:A4:BD:B8:91:73:19:F4:B7:2E:F7:DC:0F:B9:23:4F:02:9C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8246ACD44C987813D4C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd072e5-9e09-3e63-807c-1fbb14ce4ae1.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.29.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:24:6a:cd:44:c9:87:81:3d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=cbd19438-f3f2-4372-abb4-e4fa5e127735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:cf:ca:86:ae:3d:3b:af:00:86:1f:9c:78: 73:e9:ee:58:03:c3:27:c1:be:e6:24:5a:8b:d3:16: 70:12:e4:55:ef:8c:0d:61:bf:44:39:de:53:83:7f: 90:26:38:c7:3d:62:90:64:ca:0b:dd:47:5b:0b:ca: a0:0d:d6:d2:22:d1:78:b6:0e:6c:ae:fb:95:50:7f: 51:d9:5d:13:c0:c6:fa:ad:6f:34:88:0b:4c:9c:f4: 15:00:d1:95:c7:a8:81:c3:a5:4c:f7:95:02:1b:f1: 25:73:ef:06:94:b7:4d:77:f2:08:95:a1:87:c4:7b: bf:dd:65:42:43:7f:5f:3e:c5:5e:6c:7b:e2:4d:68: 2f:ca:a8:cc:f4:96:7a:51:34:b6:36:5f:04:af:8e: 2a:4c:05:ad:cf:e1:75:e8:a8:7a:f0:e8:3b:73:a4: e8:33:7b:e9:5d:27:0b:64:ec:43:9f:46:39:5a:e1: a3:05:35:73:f1:a2:d3:9b:f1:6f:9b:a5:1d:3f:72: b3:aa:bf:a4:77:3f:8b:e5:2a:7a:d4:1b:a7:50:2c: 6b:74:63:fc:22:d2:d1:d8:82:1a:64:ac:b6:1c:d1: 2f:51:2e:65:fd:4a:ef:28:65:56:07:07:e5:0c:9d: a8:df:d3:06:cf:68:e3:ec:59:0a:ef:cd:e6:4c:1f: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:A5:A4:BD:B8:91:73:19:F4:B7:2E:F7:DC:0F:B9:23:4F:02:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd072e5-9e09-3e63-807c-1fbb14ce4ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:49:d0:13:5c:f1:be:a5:a3:0d:6d:ff:70:27:ad:6a:4e:7b: 13:b2:c0:e9:1d:5b:f2:28:49:60:d9:31:6f:9e:eb:bc:d6:ba: 63:8a:ad:f2:1d:c5:67:64:d3:8f:2e:ca:fd:7e:58:9c:bb:31: c9:f4:37:92:e8:73:de:ae:da:13:c4:9a:b2:e5:fd:ec:24:58: a2:8e:29:80:bb:81:5a:fe:60:e2:eb:46:48:74:0b:2b:96:a5: 1c:37:fb:6d:cb:2a:5c:58:06:36:95:6c:7d:84:c2:42:d2:ca: f6:ec:99:7e:f4:37:9b:84:1a:cc:d5:56:40:7d:83:dc:e2:f8: f0:63:16:a6:83:05:9a:31:12:1a:a3:eb:96:f4:c4:6e:06:1d: 26:67:24:ee:f0:7f:57:d2:87:b6:83:a8:74:60:35:74:e6:38: 1b:ea:6b:35:99:13:a3:de:7d:19:cd:08:ee:05:0f:81:de:62: d6:d8:b7:f5:90:1f:85:ac:51:4f:bf:c4:06:65:41:c7:fc:10: 66:f1:25:23:71:08:4e:ef:99:b9:52:15:68:ff:e1:31:bb:07: 48:86:3f:ff:d9:2f:c5:8e:2f:a6:8d:39:c0:32:82:7c:67:a8: de:38:79:5b:e6:57:a3:f3:c0:c1:3d:23:9d:6c:54:a2:2d:08: 54:91:27:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCRqzUTJh4E9TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Y2JkMTk0MzgtZjNmMi00MzcyLWFiYjQtZTRmYTVlMTI3NzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSzPyoauPTuvAIYfnHhz6e5YA8Mnwb7mJFqL 0xZwEuRV74wNYb9EOd5Tg3+QJjjHPWKQZMoL3UdbC8qgDdbSItF4tg5srvuVUH9R 2V0TwMb6rW80iAtMnPQVANGVx6iBw6VM95UCG/Elc+8GlLdNd/IIlaGHxHu/3WVC Q39fPsVebHviTWgvyqjM9JZ6UTS2Nl8Er44qTAWtz+F16Kh68Og7c6ToM3vpXScL ZOxDn0Y5WuGjBTVz8aLTm/Fvm6UdP3Kzqr+kdz+L5Sp61BunUCxrdGP8ItLR2IIa ZKy2HNEvUS5l/UrvKGVWBwflDJ2o39MGz2jj7FkK783mTB9AYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr8paS9uJFzGfS3LvfcD7kjTwKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZkMDcyZTUtOWUwOS0z ZTYzLTgwN2MtMWZiYjE0Y2U0YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVJ0BNc8b6low1t/3AnrWpOexOywOkdW/IoSWDZMW+e67zWumOKrfId xWdk048uyv1+WJy7Mcn0N5Loc96u2hPEmrLl/ewkWKKOKYC7gVr+YOLrRkh0CyuW pRw3+23LKlxYBjaVbH2EwkLSyvbsmX70N5uEGszVVkB9g9zi+PBjFqaDBZoxEhqj 65b0xG4GHSZnJO7wf1fSh7aDqHRgNXTmOBvqazWZE6PefRnNCO4FD4HeYtbYt/WQ H4WsUU+/xAZlQcf8EGbxJSNxCE7vmblSFWj/4TG7B0iGP//ZL8WOL6aNOcAygnxn qN44eVvmV6PzwME9I51sVKItCFSRJ/Q= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:07 2026 by rpki-client