This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8294fe72-1509-3f2f-ba37-694c41906a47.roa File: 8294fe72-1509-3f2f-ba37-694c41906a47.roa (raw, json) Hash identifier: AuLDJkZrXWm+3T1tzhDZWDNG+F7jwyzubhIf+3eJLFk= Subject key identifier: 62:B4:9E:62:D9:49:23:2A:E4:CB:0A:31:49:AD:34:1B:61:ED:B0:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C41768196341D877C00307C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8294fe72-1509-3f2f-ba37-694c41906a47.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.17.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:81:96:34:1d:87:7c:00:30:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=2022dc76-4f12-4f08-a764-05fd902b19b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:6d:b0:f8:7a:86:21:56:07:66:69:e2:13: 88:28:16:6b:96:c4:ad:1b:05:fc:c3:aa:62:7d:e2: 16:94:2a:ca:47:ac:0f:14:c9:60:34:b7:d1:9e:c3: 32:2f:b0:54:6e:a6:bf:e6:6b:ea:b8:46:24:dd:0f: 54:8b:ad:ba:7b:d7:5b:61:ff:74:42:bd:d6:59:76: 33:10:8a:1f:3e:c7:9c:e6:e1:11:d2:c3:83:0a:d6: 01:66:e7:30:37:f0:37:37:e9:2f:c8:7b:b4:5d:f7: 45:18:03:38:78:ed:a9:e1:1f:00:de:56:57:f7:7f: a5:5a:54:01:44:53:b3:46:a6:e4:22:02:4c:f2:33: f7:5a:e5:b7:80:a7:d8:d0:f0:2e:84:93:9b:0e:51: 90:85:44:0f:1a:38:26:6e:96:0b:12:a1:30:46:6c: 2a:36:a7:10:e7:28:aa:b8:ff:32:4b:69:48:c5:0f: f0:cf:50:c9:48:f8:37:a2:ea:8b:6a:b5:46:4b:8f: ca:b2:51:4a:92:b3:d8:00:c4:33:10:24:d5:0c:ab: a0:36:cf:5c:1b:90:1c:b0:0e:2f:c1:59:a3:35:08: 34:3a:e1:56:a0:67:ca:a7:a5:f8:70:13:78:a8:6c: b3:06:05:d4:d2:f7:1d:1e:46:c9:82:f3:fe:af:f2: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B4:9E:62:D9:49:23:2A:E4:CB:0A:31:49:AD:34:1B:61:ED:B0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8294fe72-1509-3f2f-ba37-694c41906a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:51:f9:1f:cb:b0:ce:39:a5:da:ab:97:d3:3d:cf:9c:2e: 92:85:9b:c2:cd:bf:45:6b:cc:13:5e:cb:41:23:5d:2d:63:5f: ba:01:9b:6f:eb:67:ef:82:f3:a6:3b:b2:71:7e:9c:22:81:77: f0:1f:8f:85:53:29:3e:81:08:84:bc:ea:67:f3:39:41:44:52: 97:b8:8e:ae:30:3b:1c:45:17:4c:9c:ae:b7:81:a3:d6:11:04: 66:61:73:da:19:61:65:24:da:bf:eb:03:95:6c:24:23:a3:0e: 87:7d:6a:82:d7:17:9b:bc:d8:b0:2c:0b:8d:7e:3c:15:a7:ce: d0:4c:b6:b3:5f:cd:93:e0:ae:95:53:b5:c9:cb:54:4a:27:07: 33:04:0a:fa:2c:6b:c5:a5:f4:74:04:eb:48:6c:11:a4:b1:2e: c0:41:46:40:c9:d4:5b:2a:ae:34:cb:76:5c:28:db:e1:bc:3a: 8f:9b:fe:7f:a1:19:2a:4d:0f:2c:2e:7b:50:84:73:71:01:39: 25:fb:8c:41:c1:9f:5b:71:b6:91:9d:c6:a3:e8:6d:1c:72:ef: be:bf:6f:a0:a1:0e:79:0b:59:59:c1:82:a5:5d:61:d3:00:54: cb:37:1f:3a:98:6e:1a:9d:cf:13:50:da:6a:8e:21:f1:ea:de: 9d:4b:58:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdoGWNB2HfAAwfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk MjAyMmRjNzYtNGYxMi00ZjA4LWE3NjQtMDVmZDkwMmIxOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw9tsPh6hiFWB2Zp4hOIKBZrlsStGwX8w6pi feIWlCrKR6wPFMlgNLfRnsMyL7BUbqa/5mvquEYk3Q9Ui626e9dbYf90Qr3WWXYz EIofPsec5uER0sODCtYBZucwN/A3N+kvyHu0XfdFGAM4eO2p4R8A3lZX93+lWlQB RFOzRqbkIgJM8jP3WuW3gKfY0PAuhJObDlGQhUQPGjgmbpYLEqEwRmwqNqcQ5yiq uP8yS2lIxQ/wz1DJSPg3ouqLarVGS4/KslFKkrPYAMQzECTVDKugNs9cG5AcsA4v wVmjNQg0OuFWoGfKp6X4cBN4qGyzBgXU0vcdHkbJgvP+r/IGtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK0nmLZSSMq5MsKMUmtNBth7bDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODI5NGZlNzItMTUwOS0z ZjJmLWJhMzctNjk0YzQxOTA2YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrREQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETDUfkfy7DOOaXaq5fTPc+cLpKFm8LNv0VrzBNey0EjXS1jX7oBm2/r Z++C86Y7snF+nCKBd/Afj4VTKT6BCIS86mfzOUFEUpe4jq4wOxxFF0ycrreBo9YR BGZhc9oZYWUk2r/rA5VsJCOjDod9aoLXF5u82LAsC41+PBWnztBMtrNfzZPgrpVT tcnLVEonBzMECvosa8Wl9HQE60hsEaSxLsBBRkDJ1FsqrjTLdlwo2+G8Oo+b/n+h GSpNDywue1CEc3EBOSX7jEHBn1txtpGdxqPobRxy776/b6ChDnkLWVnBgqVdYdMA VMs3HzqYbhqdzxNQ2mqOIfHq3p1LWPo= -----END CERTIFICATE-----Generated at Sun Jan 11 17:08:08 2026 by rpki-client