This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7482eabb-2dca-3237-9847-9f9d0850bdf1.roa File: 7482eabb-2dca-3237-9847-9f9d0850bdf1.roa (raw, json) Hash identifier: 3qIa4mcRFnzbYtdFnTLeJWQvtMVOBrpKhUE0Qok4Hzg= Subject key identifier: 4C:62:5B:3C:A8:32:98:27:CE:5D:EF:F1:C1:75:49:D0:83:E6:7B:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A692C93A5F0AAFE6BC5E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7482eabb-2dca-3237-9847-9f9d0850bdf1.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:92:c9:3a:5f:0a:af:e6:bc:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=ba02abf1-bdc5-4311-b278-d70ffcaeb339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:c8:c1:30:cd:85:da:c8:b9:b7:f0:ed:23: ca:de:99:ed:fb:05:ea:87:2b:7b:1c:86:72:aa:ba: 6b:4f:8c:20:74:79:7f:32:39:7a:2f:7f:60:27:18: 8c:ae:d5:08:90:67:2a:b1:c5:02:c7:f3:26:7e:32: c7:c5:72:8e:c6:99:c8:2b:c9:04:52:5d:7b:19:0c: 69:13:e3:4e:e1:49:6c:da:e2:e2:16:25:d0:7c:fd: 24:8e:16:a3:b1:ba:db:d2:7b:81:7c:0a:e5:d0:28: 52:56:ae:5b:5f:61:b6:b5:7f:d4:0c:50:a5:01:3b: 93:22:eb:ed:2b:ae:28:09:5c:8d:3f:72:70:d8:b0: ae:d9:b1:94:df:8e:74:0c:c0:e8:c7:77:19:99:9f: 24:6b:fa:72:73:9c:d6:cb:19:3a:84:5e:d5:28:45: b7:40:95:22:25:63:e7:67:61:09:32:a4:2a:e7:2d: 1b:0c:b6:6b:a5:08:14:9f:87:2f:12:15:92:aa:b8: 78:07:32:cb:3c:a3:63:69:0e:fd:7c:bf:41:1d:1d: 81:b3:82:21:71:6d:3e:da:91:66:14:bc:fa:46:8d: 33:fa:f9:2a:c1:28:2c:7a:fe:11:00:6d:c7:c7:2e: 66:01:6a:42:6e:9d:58:de:0a:8a:1e:a7:9f:92:23: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:62:5B:3C:A8:32:98:27:CE:5D:EF:F1:C1:75:49:D0:83:E6:7B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7482eabb-2dca-3237-9847-9f9d0850bdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fe:81:04:e2:4a:c9:ab:f4:7c:63:60:33:2f:99:6d:19:65: d8:e0:ae:83:91:50:7a:47:1b:c5:29:51:18:ea:96:fe:cf:45: ad:d0:d7:76:b0:33:a4:78:0a:60:27:06:c6:e0:e6:28:7c:a8: ab:68:8f:dc:c1:b8:c6:3f:da:fd:97:ac:bf:8b:4a:3e:26:76: c4:4d:8a:d2:ac:4f:22:cb:3d:b8:42:bc:d0:36:fd:6f:17:01: 08:79:f1:06:a9:3f:6e:0a:70:65:80:90:89:1e:1c:22:14:20: 24:58:b8:e3:5f:06:57:39:de:b4:81:f5:e0:80:3b:4a:ae:56: 6a:b6:65:48:af:b6:7f:a0:ac:33:29:50:fe:73:3a:d2:9c:b2: 1c:b7:b9:8c:1c:33:c6:bb:99:ad:17:ae:d2:53:67:eb:89:a0: ed:6d:41:e5:15:04:39:70:9d:76:44:27:3e:3c:1a:b6:a6:60: aa:43:3c:6a:0e:d6:f6:24:5a:f6:db:9f:90:87:27:86:11:fd: 4c:42:3f:74:3e:78:a4:b9:77:52:fd:68:24:2d:d8:1a:3e:9b: 44:a9:3a:88:96:5e:9e:73:87:2f:14:ad:5c:3f:aa:d9:bc:43: 7f:57:7e:01:39:5b:61:6a:16:bd:36:05:74:d0:ca:8c:a0:04: 85:84:32:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFppLJOl8Kr+a8XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YmEwMmFiZjEtYmRjNS00MzExLWIyNzgtZDcwZmZjYWViMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneTIwTDNhdrIubfw7SPK3pnt+wXqhyt7HIZy qrprT4wgdHl/Mjl6L39gJxiMrtUIkGcqscUCx/MmfjLHxXKOxpnIK8kEUl17GQxp E+NO4Uls2uLiFiXQfP0kjhajsbrb0nuBfArl0ChSVq5bX2G2tX/UDFClATuTIuvt K64oCVyNP3Jw2LCu2bGU3450DMDox3cZmZ8ka/pyc5zWyxk6hF7VKEW3QJUiJWPn Z2EJMqQq5y0bDLZrpQgUn4cvEhWSqrh4BzLLPKNjaQ79fL9BHR2Bs4IhcW0+2pFm FLz6Ro0z+vkqwSgsev4RAG3Hxy5mAWpCbp1Y3gqKHqefkiO2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExiWzyoMpgnzl3v8cF1SdCD5nutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzQ4MmVhYmItMmRjYS0z MjM3LTk4NDctOWY5ZDA4NTBiZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3+gQTiSsmr9HxjYDMvmW0ZZdjgroORUHpHG8UpURjqlv7PRa3Q13aw M6R4CmAnBsbg5ih8qKtoj9zBuMY/2v2XrL+LSj4mdsRNitKsTyLLPbhCvNA2/W8X AQh58QapP24KcGWAkIkeHCIUICRYuONfBlc53rSB9eCAO0quVmq2ZUivtn+grDMp UP5zOtKcshy3uYwcM8a7ma0XrtJTZ+uJoO1tQeUVBDlwnXZEJz48GramYKpDPGoO 1vYkWvbbn5CHJ4YR/UxCP3Q+eKS5d1L9aCQt2Bo+m0SpOoiWXp5zhy8UrVw/qtm8 Q39XfgE5W2FqFr02BXTQyoygBIWEMvA= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:16 2026 by rpki-client