This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55dc025d-1a58-3985-8e3c-11cde573740d.roa File: 55dc025d-1a58-3985-8e3c-11cde573740d.roa (raw, json) Hash identifier: QIOdS6uu+xw4oQwJ4GHu2gDwVXPubeS5YoJotHpKx6s= Subject key identifier: 20:34:3F:97:F3:44:AC:D2:E6:B9:69:06:53:B0:B3:AD:CE:D7:4A:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871D35FCF138F495F42B900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55dc025d-1a58-3985-8e3c-11cde573740d.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:d3:5f:cf:13:8f:49:5f:42:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=3c7629aa-050e-4602-bc47-aaecae5a6d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:22:2e:38:70:05:19:7c:fe:06:e9:35:d6: d2:7f:b6:da:5f:78:77:8f:46:22:7b:2a:dc:b6:92: f1:ec:7c:84:82:31:ea:a7:be:8b:13:1b:fc:26:6e: 29:6c:a6:41:d0:4f:ad:3e:0a:2d:9f:cf:21:61:d3: f2:ab:67:c3:c4:c5:fe:78:e5:8d:e0:50:18:69:20: f5:73:50:26:b4:11:66:86:37:dc:ea:de:3d:e3:73: 83:26:77:ba:2e:01:91:46:e7:d0:00:8d:ac:59:3e: 84:dd:bb:ef:2b:2b:c8:f7:67:d0:40:22:b7:af:45: af:04:ac:df:21:64:bd:a6:4e:8e:04:28:74:8d:6e: 4d:88:ea:ea:1c:61:27:be:2c:2a:84:b1:57:c1:03: 5b:48:c1:19:b3:98:13:61:b3:95:27:39:bf:b7:22: fa:c2:3e:bc:0f:12:e6:d2:52:77:c4:62:98:3c:23: bd:ed:be:8c:86:f0:6f:c1:29:50:82:52:a1:3d:ef: 31:62:15:a6:62:be:c7:52:a0:52:fc:09:61:b7:37: b4:22:28:7b:8f:49:07:c0:72:e2:06:6d:86:44:a7: 23:87:ca:b1:47:0a:9a:ff:81:28:a9:2f:72:99:00: 66:c9:33:6c:2d:18:e5:d0:dc:76:a5:a3:c9:40:da: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:3F:97:F3:44:AC:D2:E6:B9:69:06:53:B0:B3:AD:CE:D7:4A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55dc025d-1a58-3985-8e3c-11cde573740d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:02:7c:e6:40:76:92:c2:e3:59:0c:6a:17:74:20:17:80:20: 9e:78:82:cc:21:4b:d0:3e:ae:02:06:8c:78:2a:5a:19:b5:a4: 4a:c0:c3:22:ea:ac:f8:b6:61:de:5c:9e:51:d3:1c:b9:5a:11: cf:68:11:bb:c0:7f:55:3f:a1:9d:e2:aa:f2:41:ac:61:0a:57: be:70:ab:3a:36:58:a5:28:18:47:16:1d:c5:00:a0:1e:ea:8a: 2b:76:26:df:4c:72:9f:ae:29:c3:2f:a2:fd:98:b4:29:39:4c: 82:40:cf:dc:4c:94:50:54:ba:52:5d:0e:89:4c:4e:e4:c6:19: 16:ea:cb:32:e7:ec:ab:7b:99:eb:f8:8c:f5:4e:4e:b3:b2:42: de:aa:cd:dd:0b:92:91:eb:9f:8d:f6:0d:a2:64:53:94:4e:42: 2c:a7:19:cf:9a:4d:f2:85:0b:a4:ef:8c:ae:39:38:c3:b2:5b: 30:db:7e:50:11:46:20:bc:e5:42:c7:e3:5b:8d:e0:7d:42:d6: b0:e3:ab:95:18:a5:85:4e:d3:cb:09:71:5d:85:47:5a:b8:1a: 71:5d:f9:11:2c:23:7d:b4:93:8e:57:d1:eb:ae:90:eb:37:dc: 29:f4:e6:89:6e:ab:02:81:5b:6f:ef:1e:a4:7a:5f:df:0f:18: cf:bf:c1:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcdNfzxOPSV9CuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk M2M3NjI5YWEtMDUwZS00NjAyLWJjNDctYWFlY2FlNWE2ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms8iLjhwBRl8/gbpNdbSf7baX3h3j0Yieyrc tpLx7HyEgjHqp76LExv8Jm4pbKZB0E+tPgotn88hYdPyq2fDxMX+eOWN4FAYaSD1 c1AmtBFmhjfc6t4943ODJne6LgGRRufQAI2sWT6E3bvvKyvI92fQQCK3r0WvBKzf IWS9pk6OBCh0jW5NiOrqHGEnviwqhLFXwQNbSMEZs5gTYbOVJzm/tyL6wj68DxLm 0lJ3xGKYPCO97b6MhvBvwSlQglKhPe8xYhWmYr7HUqBS/Alhtze0Iih7j0kHwHLi Bm2GRKcjh8qxRwqa/4EoqS9ymQBmyTNsLRjl0Nx2paPJQNr5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA0P5fzRKzS5rlpBlOws63O10rHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTVkYzAyNWQtMWE1OC0z OTg1LThlM2MtMTFjZGU1NzM3NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcCfOZAdpLC41kMahd0IBeAIJ54gswhS9A+rgIGjHgqWhm1pErAwyLq rPi2Yd5cnlHTHLlaEc9oEbvAf1U/oZ3iqvJBrGEKV75wqzo2WKUoGEcWHcUAoB7q iit2Jt9Mcp+uKcMvov2YtCk5TIJAz9xMlFBUulJdDolMTuTGGRbqyzLn7Kt7mev4 jPVOTrOyQt6qzd0LkpHrn432DaJkU5ROQiynGc+aTfKFC6TvjK45OMOyWzDbflAR RiC85ULH41uN4H1C1rDjq5UYpYVO08sJcV2FR1q4GnFd+REsI320k45X0euukOs3 3Cn05oluqwKBW2/vHqR6X98PGM+/wQU= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:50 2026 by rpki-client