This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa File: 6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa (raw, json) Hash identifier: hMIuBneBTsj6jf5PHFmgeZEAFWD1a19MPNYiPcDR4nQ= Subject key identifier: 43:67:C4:61:8F:B2:3F:AB:67:1F:7D:64:64:4D:40:16:2B:85:7E:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A66B65994975C17B7ED800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:6b:65:99:49:75:c1:7b:7e:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=47d4f50a-3be0-4503-bdc9-05f422f92ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:d8:43:14:cc:a5:f3:f7:29:97:8c:f5:9d: 32:84:7b:c4:b8:58:90:9d:1a:c8:af:8c:a1:0a:14: b3:77:88:4e:0e:be:ca:79:46:03:e0:18:ee:56:c5: 0a:22:19:7f:99:5e:73:af:86:35:3e:0a:ce:84:e5: b4:05:da:98:c2:9d:46:86:eb:70:d6:35:59:30:21: 88:99:29:80:d2:f8:09:a8:79:fa:5c:06:28:99:73: 5f:8c:30:8d:10:61:c0:9e:0f:e6:88:64:f9:a1:43: 56:f0:d4:45:01:83:19:3e:03:f8:db:bb:e7:0e:9a: 8b:ce:93:d1:c5:46:99:7f:26:a1:ca:05:5f:47:92: ec:9e:aa:fc:80:9a:e9:ea:21:22:de:27:dd:0f:f5: ac:20:3d:e6:38:d0:66:d5:c9:5c:e5:e3:b1:55:37: e2:97:a0:50:bf:e0:35:f8:6a:07:bd:d8:69:99:64: d5:a1:b3:2b:85:58:46:b5:68:b3:18:40:2c:8a:9b: 57:ea:c2:29:f6:a3:19:88:4d:08:3b:ba:67:48:21: 47:d3:03:2d:4d:67:0f:29:30:dc:ce:8a:17:33:c1: 1f:63:8c:64:5c:ff:63:c9:e7:7d:18:e4:a3:5f:12: 09:3d:1a:17:85:c4:eb:33:fc:65:92:98:fb:41:48: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:C4:61:8F:B2:3F:AB:67:1F:7D:64:64:4D:40:16:2B:85:7E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:65:06:ef:d0:50:2a:b6:36:18:22:83:b5:5e:62:1e:21:71: 6e:c1:a0:1d:82:cf:dd:3a:a5:f4:40:0f:2e:ad:45:e2:d4:90: f8:2a:d1:93:c5:99:49:c8:91:86:bb:fb:fa:db:9c:05:5f:39: fb:19:e7:50:f2:31:97:11:91:cd:00:9f:64:7c:a6:11:9f:ec: 75:d7:5e:45:78:6d:ca:e9:3d:01:53:b7:71:de:e4:4e:15:f2: 18:a6:5d:13:6c:cc:7e:46:ef:4d:c8:ba:58:5f:59:09:23:ca: 67:ce:fd:da:d2:26:9a:40:89:20:db:a5:35:27:ff:2d:d9:33: 68:c5:8d:e8:31:90:0d:9e:c8:36:f7:4a:8c:04:9a:02:38:20: 1d:85:c5:81:48:34:53:97:75:99:ba:e4:a4:4f:0b:5e:d4:4a: 01:5c:5a:76:1f:b3:39:e7:02:b4:8e:41:f4:0a:9a:5e:7e:21: 0d:71:38:f7:01:35:e0:d6:e5:04:2b:5c:d6:2f:f6:2e:55:d5: 9e:71:10:8e:1b:79:1e:05:9b:29:02:2f:01:f8:b3:a7:d0:8e: bc:27:51:37:d0:7b:89:f7:b6:9f:c5:e4:89:c8:f0:91:06:86: 72:4b:6a:96:8f:32:97:39:f1:ee:e0:a6:46:dd:1a:52:db:02: de:6d:ec:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpmtlmUl1wXt+2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NDdkNGY1MGEtM2JlMC00NTAzLWJkYzktMDVmNDIyZjkyZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2vYQxTMpfP3KZeM9Z0yhHvEuFiQnRrIr4yh ChSzd4hODr7KeUYD4BjuVsUKIhl/mV5zr4Y1PgrOhOW0BdqYwp1Ghutw1jVZMCGI mSmA0vgJqHn6XAYomXNfjDCNEGHAng/miGT5oUNW8NRFAYMZPgP427vnDpqLzpPR xUaZfyahygVfR5Lsnqr8gJrp6iEi3ifdD/WsID3mONBm1clc5eOxVTfil6BQv+A1 +GoHvdhpmWTVobMrhVhGtWizGEAsiptX6sIp9qMZiE0IO7pnSCFH0wMtTWcPKTDc zooXM8EfY4xkXP9jyed9GOSjXxIJPRoXhcTrM/xlkpj7QUgb1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENnxGGPsj+rZx99ZGRNQBYrhX4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmRjNzA2NjYtZDFkNi0z ZTI4LThlNjYtYmYzNjljYzc4YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJlBu/QUCq2Nhgig7VeYh4hcW7BoB2Cz906pfRADy6tReLUkPgq0ZPF mUnIkYa7+/rbnAVfOfsZ51DyMZcRkc0An2R8phGf7HXXXkV4bcrpPQFTt3He5E4V 8himXRNszH5G703IulhfWQkjymfO/drSJppAiSDbpTUn/y3ZM2jFjegxkA2eyDb3 SowEmgI4IB2FxYFINFOXdZm65KRPC17USgFcWnYfsznnArSOQfQKml5+IQ1xOPcB NeDW5QQrXNYv9i5V1Z5xEI4beR4FmykCLwH4s6fQjrwnUTfQe4n3tp/F5InI8JEG hnJLapaPMpc58e7gpkbdGlLbAt5t7Mo= -----END CERTIFICATE-----Generated at Sun Jan 11 16:29:17 2026 by rpki-client