This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa File: 5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa (raw, json) Hash identifier: /nza2fNeQEY6ulpKTvoOLobVZLyT3EySwa0I4yUk6uY= Subject key identifier: C7:51:67:C3:3F:1D:4D:8F:6B:A0:29:F7:E8:E9:3C:5E:C7:FF:1A:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BDE5B1A329A2B0020F6F512C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa Signing time: Sat 15 Nov 2025 14:00:41 +0000 ROA not before: Sat 15 Nov 2025 14:00:41 +0000 ROA not after: Fri 13 Feb 2026 14:00:41 +0000 asID: 19905 IP address blocks: 173.29.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:de:5b:1a:32:9a:2b:00:20:f6:f5:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 15 14:00:41 2025 GMT Not After : Feb 13 14:00:41 2026 GMT Subject: CN=21edaa56-df23-4a4c-8089-a6b1e694e34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f0:4b:b9:50:17:96:62:21:66:3d:36:86:37: 02:43:9e:c0:7d:60:ea:cb:bf:45:d6:cf:e4:6a:53: c1:f7:91:03:94:b7:26:78:a1:b1:86:7f:16:08:0d: ad:95:28:88:22:45:05:cf:a7:f5:4f:0d:33:96:1c: 6b:22:f7:78:60:d3:89:fa:ab:25:c5:d8:03:ba:b9: 0f:e0:07:4b:15:f4:77:11:4a:9b:ce:83:9c:29:5e: 75:55:10:19:0b:b6:bf:f5:91:6b:fa:82:ce:df:86: be:3c:41:80:22:22:af:de:e3:b9:3a:8e:ef:08:7f: 71:ef:39:c4:17:4f:65:d7:89:49:cb:c2:d1:fc:91: fc:b9:7d:e2:45:1d:ac:aa:27:d8:90:01:15:40:91: 55:4d:23:b2:ff:bd:69:6b:b1:de:cb:81:ea:91:a9: 87:d1:d4:5a:51:40:fc:47:93:96:bb:1a:fa:74:76: 14:bd:78:ed:0b:09:99:92:c6:b5:86:69:79:ab:3d: 3a:11:54:da:24:cd:f4:5f:09:60:9b:da:16:95:10: 12:27:bb:d8:d3:22:bd:1c:ce:50:70:62:65:c5:f6: cf:46:e6:ab:ef:de:51:a5:e7:79:53:de:c4:d4:24: 9b:8b:db:a2:f0:c2:41:64:11:3c:f2:54:14:99:0c: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:51:67:C3:3F:1D:4D:8F:6B:A0:29:F7:E8:E9:3C:5E:C7:FF:1A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ab:cb:6b:a6:35:2f:38:50:7a:85:25:b5:19:5f:b4:82:f8: 77:73:71:5d:a9:9b:13:84:b1:25:1a:25:52:95:7c:3d:24:9c: 58:95:c2:72:30:0d:70:b8:bc:0b:9d:05:f4:f5:5e:fa:82:6f: 1b:59:19:ff:b8:9b:db:c2:d8:9e:d7:71:23:31:9e:d2:61:bc: a8:1e:94:e9:aa:74:0a:4f:ec:95:f5:fa:61:f4:bc:0e:cf:37: 33:ce:90:29:6a:dd:1d:c9:7f:f8:2a:ff:c2:df:64:78:29:00: 6e:92:72:67:06:cf:15:e7:ce:7a:3b:26:53:37:8d:d8:8b:16: 59:b7:98:3c:c6:d1:16:4f:09:70:49:cc:11:29:18:36:30:2b: 72:bf:69:56:1e:80:0d:ef:79:3a:7f:75:09:3e:47:1c:3d:42: 47:3c:57:7f:89:c3:32:72:e8:1a:38:a3:8c:5b:a6:4c:5d:46: 3f:06:35:89:f0:91:22:7b:24:79:3d:d0:e8:d1:ff:25:1e:39: 69:02:b2:12:7b:75:98:84:54:8b:2c:b8:fc:18:07:3a:6e:61: 01:b5:79:0c:cc:6f:bc:e2:5a:f7:b9:d9:c0:bb:10:0e:3b:b0: 30:9e:d2:f5:bd:81:9a:de:4a:5f:9e:15:09:52:07:cf:1a:a7: 28:0b:43:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEveWxoymisAIPb1EsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNTE0MDA0MVoXDTI2MDIxMzE0MDA0MVowLzEtMCsGA1UEAxMk MjFlZGFhNTYtZGYyMy00YTRjLTgwODktYTZiMWU2OTRlMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvBLuVAXlmIhZj02hjcCQ57AfWDqy79F1s/k alPB95EDlLcmeKGxhn8WCA2tlSiIIkUFz6f1Tw0zlhxrIvd4YNOJ+qslxdgDurkP 4AdLFfR3EUqbzoOcKV51VRAZC7a/9ZFr+oLO34a+PEGAIiKv3uO5Oo7vCH9x7znE F09l14lJy8LR/JH8uX3iRR2sqifYkAEVQJFVTSOy/71pa7Hey4HqkamH0dRaUUD8 R5OWuxr6dHYUvXjtCwmZksa1hml5qz06EVTaJM30Xwlgm9oWlRASJ7vY0yK9HM5Q cGJlxfbPRuar795Rped5U97E1CSbi9ui8MJBZBE88lQUmQxzMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdRZ8M/HU2Pa6Ap9+jpPF7H/xpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU4MTBlN2YtYTlmNi0z ZjM5LWI0ZWYtMWYwYzFjODQ0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGry2umNS84UHqFJbUZX7SC+HdzcV2pmxOEsSUaJVKVfD0knFiVwnIw DXC4vAudBfT1XvqCbxtZGf+4m9vC2J7XcSMxntJhvKgelOmqdApP7JX1+mH0vA7P NzPOkClq3R3Jf/gq/8LfZHgpAG6ScmcGzxXnzno7JlM3jdiLFlm3mDzG0RZPCXBJ zBEpGDYwK3K/aVYegA3veTp/dQk+Rxw9Qkc8V3+JwzJy6Bo4o4xbpkxdRj8GNYnw kSJ7JHk90OjR/yUeOWkCshJ7dZiEVIssuPwYBzpuYQG1eQzMb7ziWve52cC7EA47 sDCe0vW9gZreSl+eFQlSB88apygLQyU= -----END CERTIFICATE-----Generated at Tue Nov 25 10:29:28 2025 by rpki-client