This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa File: 71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa (raw, json) Hash identifier: dJfu7CpiEvGoVk19w6Q1fcDqlxtar9yWs4C9AhMJ0oo= Subject key identifier: 0F:5D:BD:16:CC:AE:A3:1F:07:BB:8E:0D:FF:F7:7D:22:46:CB:C2:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871CFC5A74F815153B87540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:cf:c5:a7:4f:81:51:53:b8:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=151d5cea-2dc2-4b4e-9d53-a0a4dc7d1c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1e:63:aa:27:9f:e8:8a:07:8a:f8:ec:c9:b9: 5a:cd:16:a7:2e:ad:4b:9f:62:f4:0d:44:69:ff:5b: 31:85:3a:14:21:8c:82:24:f0:b7:6d:0d:de:f4:62: 40:8c:db:d6:f6:6f:9b:f9:25:d2:cc:53:a4:38:5c: dc:45:20:b9:0b:61:c4:42:e1:58:43:ea:58:8b:12: 58:01:40:a3:e6:cd:17:12:b9:26:72:37:f8:7f:6c: b2:1a:6d:6d:9a:5e:ec:1f:3e:28:6b:8b:ae:b2:ae: e5:54:47:4a:b1:8d:83:ad:95:10:29:a3:fd:29:5b: 30:d5:8a:b6:63:65:41:61:75:c8:fa:07:a9:ce:47: 93:be:93:20:aa:8c:a4:e4:81:1a:b2:0f:16:25:c2: 28:dd:73:38:8c:09:0e:be:83:b3:63:1b:a2:04:9f: 07:c8:6d:7f:90:80:88:9d:45:51:84:46:d6:d3:b4: 64:5e:91:ed:c8:23:0e:4d:86:94:aa:a7:fc:eb:0e: 12:22:d6:64:c3:1c:22:94:ff:01:64:32:d9:25:ea: c0:ed:d5:27:81:3c:eb:bd:cf:35:57:1c:3c:b3:6d: fe:5d:ef:34:9a:a7:88:7f:c8:af:58:4b:29:98:82: 67:16:7b:75:71:0c:c9:d2:f5:a3:f3:6f:31:f6:a2: 4d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:BD:16:CC:AE:A3:1F:07:BB:8E:0D:FF:F7:7D:22:46:CB:C2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4e:62:28:ba:2d:1d:c9:aa:61:eb:40:6f:f2:ac:0e:cf:76: f2:74:1e:e4:24:94:29:33:8c:20:84:fd:be:97:44:e7:72:b4: c7:43:1b:f1:4a:8c:16:8c:ee:65:ec:25:1f:ea:65:61:1d:c4: 56:bc:e3:ed:9a:95:aa:86:de:b8:c3:44:a5:76:64:2a:6d:6c: df:46:2c:00:c2:21:24:ec:6e:2b:9f:39:c5:47:be:cd:a1:f5: 2d:ec:5a:cd:92:c2:da:82:b4:83:64:24:1f:27:05:76:e6:f9: 0f:f8:a9:bf:18:89:94:46:f0:b4:e5:19:7f:9b:f3:33:9b:2c: 6f:26:1c:9b:27:31:81:7d:3b:be:d1:aa:76:00:b0:ac:0c:cb: e1:58:65:8c:04:13:49:13:9d:06:7b:3e:5c:9b:68:65:70:82: 65:ed:37:ba:ba:b9:c8:a2:1e:3b:f8:47:3b:7c:09:4f:14:ae: ce:10:a1:4b:e4:0b:5e:87:dc:68:fa:58:1f:a2:93:1d:d1:be: 80:3e:a2:23:da:c4:be:08:4c:30:da:5e:16:92:fd:fa:56:bd: df:de:74:d9:86:58:4b:4e:5c:1b:70:26:18:66:af:78:b5:47: 89:f9:2b:ff:a3:9a:44:d6:f1:e4:7e:f1:c3:da:9e:5d:16:4d: 89:6a:bb:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcc/Fp0+BUVO4dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MTUxZDVjZWEtMmRjMi00YjRlLTlkNTMtYTBhNGRjN2QxYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh5jqief6IoHivjsyblazRanLq1Ln2L0DURp /1sxhToUIYyCJPC3bQ3e9GJAjNvW9m+b+SXSzFOkOFzcRSC5C2HEQuFYQ+pYixJY AUCj5s0XErkmcjf4f2yyGm1tml7sHz4oa4uusq7lVEdKsY2DrZUQKaP9KVsw1Yq2 Y2VBYXXI+gepzkeTvpMgqoyk5IEasg8WJcIo3XM4jAkOvoOzYxuiBJ8HyG1/kICI nUVRhEbW07RkXpHtyCMOTYaUqqf86w4SItZkwxwilP8BZDLZJerA7dUngTzrvc81 Vxw8s23+Xe80mqeIf8ivWEspmIJnFnt1cQzJ0vWj828x9qJNVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9dvRbMrqMfB7uODf/3fSJGy8LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzFmN2M0MGItMWJkOS0z OGE3LWE3YjctYzJjYmJlMmJkNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdOYii6LR3JqmHrQG/yrA7PdvJ0HuQklCkzjCCE/b6XROdytMdDG/FK jBaM7mXsJR/qZWEdxFa84+2alaqG3rjDRKV2ZCptbN9GLADCISTsbiufOcVHvs2h 9S3sWs2SwtqCtINkJB8nBXbm+Q/4qb8YiZRG8LTlGX+b8zObLG8mHJsnMYF9O77R qnYAsKwMy+FYZYwEE0kTnQZ7PlybaGVwgmXtN7q6uciiHjv4Rzt8CU8Urs4QoUvk C16H3Gj6WB+ikx3RvoA+oiPaxL4ITDDaXhaS/fpWvd/edNmGWEtOXBtwJhhmr3i1 R4n5K/+jmkTW8eR+8cPanl0WTYlqu2U= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:32 2026 by rpki-client