This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74cf3500-e2a3-3483-92e6-27591b265690.roa File: 74cf3500-e2a3-3483-92e6-27591b265690.roa (raw, json) Hash identifier: vT+e/pzeRUXXXKenpTMNYME/SPqW7B5/qEx5ab0XiyU= Subject key identifier: E4:96:4B:0C:0A:E7:13:F2:E8:8C:42:45:4D:77:B2:71:11:1A:79:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C470BC0E032989B87A77A8D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74cf3500-e2a3-3483-92e6-27591b265690.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.20.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:c0:e0:32:98:9b:87:a7:7a:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=98432412-c771-4d5d-81a2-be7399b1aa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:3a:5e:45:fc:ec:a7:1d:cb:2b:bb:f1:c3: a4:07:27:a1:20:d7:d9:16:e8:70:17:12:06:80:6d: 6b:cd:a3:fd:30:2b:ea:e3:0c:0b:5c:ee:91:1b:70: a0:bf:53:f3:05:bc:3d:83:d3:ef:43:6c:cb:a4:be: fb:25:a8:a2:0f:9c:16:a7:19:a5:f8:a1:c0:05:a3: 2d:d7:ff:bb:51:ec:0e:2a:dc:99:3a:84:e8:be:ab: c2:d6:00:5b:d8:e1:8f:8f:dc:4b:71:10:57:d8:08: 9b:e2:bf:74:2c:44:57:d1:0b:42:62:1c:3c:ca:35: be:73:9b:e6:55:be:39:20:6d:63:40:d7:57:29:1b: 37:6f:1b:c3:d6:74:2c:ee:8c:37:3a:2e:ff:86:0d: 80:d7:99:37:71:e2:5e:a8:e5:ce:68:b6:cb:13:ce: 49:35:2f:54:ee:b8:ce:95:b8:d5:81:e5:ac:15:7c: 3e:5d:b0:60:e4:de:85:e5:96:b9:9f:de:c0:9a:ca: 2d:a0:e3:d5:ff:44:9d:af:32:49:06:7f:19:d0:da: 37:33:59:e1:1d:3f:e7:cb:9c:25:5c:e9:c8:48:33: d4:37:d9:54:54:e4:ca:37:f1:7d:2c:92:c2:f6:41: dc:06:54:f8:37:1f:0c:8d:00:01:3e:ec:c6:7e:ae: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:4B:0C:0A:E7:13:F2:E8:8C:42:45:4D:77:B2:71:11:1A:79:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74cf3500-e2a3-3483-92e6-27591b265690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:40:e0:f1:78:f5:77:b0:4f:43:3d:f4:34:10:df:31:09:ca: b1:08:21:4a:00:00:08:82:c7:4b:0d:e0:fd:03:44:53:45:b8: 83:46:bc:88:d9:dd:4e:2f:71:a9:0e:18:04:f3:68:17:43:a3: 7a:23:7d:6c:63:45:f5:60:5f:b9:4e:56:62:cd:00:91:29:c3: 76:98:06:a5:a6:2c:5f:4c:00:a5:63:24:ee:70:1a:76:f0:ec: b5:0e:08:1b:54:b6:63:e8:da:4c:85:44:43:d7:e9:05:6b:64: 15:3b:0b:7d:d0:e1:c9:fa:4d:66:34:f3:80:e3:a9:2e:0a:11: a5:ef:16:b4:be:bf:cb:e2:cd:61:cc:63:c4:3a:99:5c:2d:49: 24:da:4d:12:b7:8c:aa:33:ed:e1:b8:b8:0c:bc:2c:72:07:47: 15:2c:70:2f:33:57:97:1a:19:ed:2f:76:18:0d:fe:75:f8:f3: 32:a2:4d:e4:24:13:7e:91:a2:9a:53:fa:ea:cc:b2:40:7b:0d: 4c:c7:e5:6b:ed:df:09:53:a4:d0:c3:3a:46:fa:65:f0:10:79: 9d:7e:a3:a3:2f:be:f4:b0:36:0a:4e:fa:d4:46:fb:4e:21:53: 57:6c:3e:bc:0f:40:ba:fe:e4:9d:0b:11:05:c1:2f:11:97:4b: 90:08:ec:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8DgMpibh6d6jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk OTg0MzI0MTItYzc3MS00ZDVkLTgxYTItYmU3Mzk5YjFhYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5M6XkX87Kcdyyu78cOkByehINfZFuhwFxIG gG1rzaP9MCvq4wwLXO6RG3Cgv1PzBbw9g9PvQ2zLpL77JaiiD5wWpxml+KHABaMt 1/+7UewOKtyZOoTovqvC1gBb2OGPj9xLcRBX2Aib4r90LERX0QtCYhw8yjW+c5vm Vb45IG1jQNdXKRs3bxvD1nQs7ow3Oi7/hg2A15k3ceJeqOXOaLbLE85JNS9U7rjO lbjVgeWsFXw+XbBg5N6F5Za5n97AmsotoOPV/0SdrzJJBn8Z0No3M1nhHT/ny5wl XOnISDPUN9lUVOTKN/F9LJLC9kHcBlT4Nx8MjQABPuzGfq5JRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSWSwwK5xPy6IxCRU13snERGnlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzRjZjM1MDAtZTJhMy0z NDgzLTkyZTYtMjc1OTFiMjY1NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhA4PF49XewT0M99DQQ3zEJyrEIIUoAAAiCx0sN4P0DRFNFuINGvIjZ 3U4vcakOGATzaBdDo3ojfWxjRfVgX7lOVmLNAJEpw3aYBqWmLF9MAKVjJO5wGnbw 7LUOCBtUtmPo2kyFREPX6QVrZBU7C33Q4cn6TWY084DjqS4KEaXvFrS+v8vizWHM Y8Q6mVwtSSTaTRK3jKoz7eG4uAy8LHIHRxUscC8zV5caGe0vdhgN/nX48zKiTeQk E36RoppT+urMskB7DUzH5Wvt3wlTpNDDOkb6ZfAQeZ1+o6MvvvSwNgpO+tRG+04h U1dsPrwPQLr+5J0LEQXBLxGXS5AI7C4= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:42 2026 by rpki-client