This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json) Hash identifier: RZXlkepCQlF+NvXJdqRrCh6pVbx7L+Z49yLN2Jdc+vU= Subject key identifier: 51:0A:25:BA:E2:2F:DA:B4:EA:92:10:BB:24:56:53:D4:DF:E8:F9:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C48712E2F94E84C63100A8E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:2e:2f:94:e8:4c:63:10:0a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=adaf9a4f-7aa7-451c-a755-0f0878563f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:41:a2:9c:8f:13:0c:54:66:4a:eb:a6:02: 1f:53:00:1b:2e:07:89:a3:2b:e1:2b:ea:f1:f2:23: b9:39:f0:17:01:b1:e6:69:dc:c9:1f:4b:20:4a:93: 98:7d:3e:ce:70:76:b4:82:dc:53:3a:e8:f6:b0:e7: 4a:13:0a:cd:0a:e0:0a:48:f1:c9:0a:d8:c2:55:d5: d1:fb:4d:92:2a:47:d0:af:40:73:19:7e:33:dd:69: 70:b3:24:36:23:44:30:f2:7b:6a:cb:9a:85:48:69: f8:dc:51:0a:12:8a:23:5e:24:37:f0:c8:43:e8:4f: f5:94:1e:20:2c:b4:ca:a9:04:be:8f:28:ee:eb:1c: fd:98:17:d7:87:2e:f8:02:7c:ce:ca:b9:91:a7:ac: 69:99:ee:eb:96:1e:98:fc:7e:2d:b3:7d:55:a5:e9: 6a:36:72:c4:a7:26:f9:37:26:26:8e:bf:26:ac:46: ae:b0:0d:0e:41:d4:3b:e0:35:60:28:c5:90:0e:6c: 5a:cc:27:dd:e0:78:c7:94:72:50:eb:17:1c:a3:f1: 2d:33:20:23:a5:61:38:25:a1:72:55:d8:e8:aa:bc: c3:f6:5b:53:0e:fe:63:94:16:cd:59:c0:88:5e:0b: bd:bd:2f:07:94:52:4c:8c:60:3d:82:41:61:1b:15: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:25:BA:E2:2F:DA:B4:EA:92:10:BB:24:56:53:D4:DF:E8:F9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6b:e3:0d:e7:d8:04:f4:12:32:a7:c9:ab:e1:0c:7b:f9:5a: 38:e6:e9:80:6e:01:c4:c6:02:1a:cc:8b:6f:7f:0a:75:9b:d8: 5f:5d:53:91:0a:51:d2:ac:82:f1:61:49:24:2b:2f:e1:f7:10: 38:9c:1c:05:f9:1a:cd:b4:f8:7a:13:9b:cd:45:01:6a:a9:82: 84:1e:3b:61:cb:47:fd:54:79:95:a7:ce:24:98:d4:c6:dc:7e: bb:b6:f8:ff:c2:bc:af:ed:16:8e:78:dc:a6:28:c2:16:52:6b: b3:47:6c:8f:76:70:53:b9:f5:f1:93:7a:d1:80:49:6c:ee:99: ee:2c:bf:ef:09:be:e2:4b:4f:46:07:98:46:be:70:ec:1f:8d: dc:9a:b6:cb:0d:3a:b5:a9:4a:a5:ea:57:ec:56:35:07:8d:99: 2f:ca:15:5b:e1:1b:f8:4e:30:77:ba:29:a1:de:09:48:be:ec: b3:a3:af:f7:9a:0a:1f:b0:db:04:a1:e8:5e:ce:c4:f3:32:ea: 3f:9a:db:08:07:1f:8e:82:31:cc:2b:3a:36:ff:aa:a6:1a:ca: e5:cc:18:e4:58:ab:03:8c:14:22:c5:5f:67:24:ca:6e:2a:5b: 1a:9c:b9:79:c0:df:4a:f0:2e:16:61:c7:20:27:b3:89:6a:57: 3f:14:dd:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcS4vlOhMYxAKjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YWRhZjlhNGYtN2FhNy00NTFjLWE3NTUtMGYwODc4NTYzZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktlBopyPEwxUZkrrpgIfUwAbLgeJoyvhK+rx 8iO5OfAXAbHmadzJH0sgSpOYfT7OcHa0gtxTOuj2sOdKEwrNCuAKSPHJCtjCVdXR +02SKkfQr0BzGX4z3WlwsyQ2I0Qw8ntqy5qFSGn43FEKEoojXiQ38MhD6E/1lB4g LLTKqQS+jyju6xz9mBfXhy74AnzOyrmRp6xpme7rlh6Y/H4ts31VpelqNnLEpyb5 NyYmjr8mrEausA0OQdQ74DVgKMWQDmxazCfd4HjHlHJQ6xcco/EtMyAjpWE4JaFy VdjoqrzD9ltTDv5jlBbNWcCIXgu9vS8HlFJMjGA9gkFhGxXEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEKJbriL9q06pIQuyRWU9Tf6PmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5r4w3n2AT0EjKnyavhDHv5Wjjm6YBuAcTGAhrMi29/CnWb2F9dU5EK UdKsgvFhSSQrL+H3EDicHAX5Gs20+HoTm81FAWqpgoQeO2HLR/1UeZWnziSY1Mbc fru2+P/CvK/tFo543KYowhZSa7NHbI92cFO59fGTetGASWzume4sv+8JvuJLT0YH mEa+cOwfjdyatssNOrWpSqXqV+xWNQeNmS/KFVvhG/hOMHe6KaHeCUi+7LOjr/ea Ch+w2wSh6F7OxPMy6j+a2wgHH46CMcwrOjb/qqYayuXMGORYqwOMFCLFX2ckym4q WxqcuXnA30rwLhZhxyAns4lqVz8U3Uc= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:59 2026 by rpki-client