This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847b8d21-7564-3171-935e-e4f547712088.roa File: 847b8d21-7564-3171-935e-e4f547712088.roa (raw, json) Hash identifier: mJxMuxL0qlm3Pzl5+E86FiR+N4mOiHh/WvMv1Z+3JBs= Subject key identifier: 2C:7B:29:93:79:F6:7A:2A:74:41:C6:B0:E1:7F:45:AE:F1:E6:A7:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5931346C55336C4F1C91EF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847b8d21-7564-3171-935e-e4f547712088.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 30036 IP address blocks: 173.27.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:34:6c:55:33:6c:4f:1c:91:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=eef167fc-0568-408b-a4da-f6fd3b6aab5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:22:60:6c:7f:ae:c8:37:4b:35:61:1a:21: bf:57:0b:ce:f6:b8:ff:b7:14:e0:0a:07:3e:a5:2e: a4:1e:80:78:f8:40:4e:0b:75:0f:00:6b:04:e3:09: 1d:b4:2c:b0:24:be:d7:1f:41:13:a7:7d:51:69:a4: 31:41:c3:5e:84:01:67:00:8c:cd:a4:55:6b:c3:30: 4a:5f:49:07:49:d7:60:fc:a0:d8:09:31:0c:18:7e: 48:e4:0a:b8:4b:18:4d:c4:d2:cd:31:c3:4f:c7:d6: 7f:5a:61:6a:38:b1:50:2e:fa:64:7a:6d:df:77:3a: 41:9f:a1:20:b2:ca:d0:a6:a6:7e:f5:3b:67:c7:d8: 56:5d:07:82:76:7a:4a:5b:98:f8:eb:7f:3c:52:83: d2:f0:c7:c8:f7:57:1c:41:a1:85:c3:7f:01:dd:34: 31:68:60:37:f9:e0:f2:fe:19:68:d2:ab:3d:f7:05: d2:c4:c9:47:d7:41:69:d6:e1:7a:04:f7:9f:c7:53: e3:ed:13:06:c5:4e:7c:0c:a3:46:2a:11:54:b6:9c: f5:19:fc:ef:a9:ce:7b:91:b8:f5:23:69:af:4b:6c: 81:07:92:46:d8:2a:25:be:9f:41:73:01:21:21:56: c9:5f:7b:d6:8e:74:10:d2:26:38:39:c2:d4:70:32: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7B:29:93:79:F6:7A:2A:74:41:C6:B0:E1:7F:45:AE:F1:E6:A7:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847b8d21-7564-3171-935e-e4f547712088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:43:a4:02:4f:28:60:e3:a1:f6:91:b8:ea:8c:0e:7c:57:eb: f1:5f:4d:cb:23:67:14:44:18:77:f6:65:e8:1c:3b:3d:16:52: d7:17:41:c8:ce:d3:10:10:98:05:5b:bb:5b:d5:bb:67:00:8c: 29:22:42:f3:ed:d6:6f:2b:29:e1:e1:50:23:80:31:d7:62:24: 86:08:cb:94:f1:40:c1:45:3c:b4:9a:00:8c:86:c5:7f:5c:02: 55:0b:98:b8:99:15:f4:19:b2:27:d5:3e:ca:2d:6c:3a:00:f4: 25:91:69:3d:94:09:cb:76:15:53:d0:b8:6c:ea:53:0e:e2:1e: a0:34:39:fd:4e:ac:b3:56:3a:b7:0b:fc:5b:15:4c:f3:47:bb: 6d:dc:df:ab:d5:cd:c5:88:af:3b:67:0b:78:22:c9:ba:56:0d: 20:42:7c:da:84:47:e2:2f:02:e3:33:4a:05:6f:47:b1:11:32: 49:ad:40:ba:b4:80:c3:eb:51:cf:bd:8a:3d:bf:ac:54:58:eb: 3d:0a:91:ef:d9:4b:ec:da:80:6f:5c:72:3a:3c:30:8d:4c:06: 35:42:a5:3a:63:de:ee:5b:54:1c:eb:c3:93:8e:3e:3c:e8:21: a7:a0:51:d4:82:19:d9:8b:e5:f7:5d:ed:b4:13:81:f7:d6:3d: 1a:72:0e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMTRsVTNsTxyR74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk ZWVmMTY3ZmMtMDU2OC00MDhiLWE0ZGEtZjZmZDNiNmFhYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl0iYGx/rsg3SzVhGiG/VwvO9rj/txTgCgc+ pS6kHoB4+EBOC3UPAGsE4wkdtCywJL7XH0ETp31RaaQxQcNehAFnAIzNpFVrwzBK X0kHSddg/KDYCTEMGH5I5Aq4SxhNxNLNMcNPx9Z/WmFqOLFQLvpkem3fdzpBn6Eg ssrQpqZ+9Ttnx9hWXQeCdnpKW5j46388UoPS8MfI91ccQaGFw38B3TQxaGA3+eDy /hlo0qs99wXSxMlH10Fp1uF6BPefx1Pj7RMGxU58DKNGKhFUtpz1Gfzvqc57kbj1 I2mvS2yBB5JG2Colvp9BcwEhIVbJX3vWjnQQ0iY4OcLUcDLiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx7KZN59noqdEHGsOF/Ra7x5qdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ3YjhkMjEtNzU2NC0z MTcxLTkzNWUtZTRmNTQ3NzEyMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVDpAJPKGDjofaRuOqMDnxX6/FfTcsjZxREGHf2ZegcOz0WUtcXQcjO 0xAQmAVbu1vVu2cAjCkiQvPt1m8rKeHhUCOAMddiJIYIy5TxQMFFPLSaAIyGxX9c AlULmLiZFfQZsifVPsotbDoA9CWRaT2UCct2FVPQuGzqUw7iHqA0Of1OrLNWOrcL /FsVTPNHu23c36vVzcWIrztnC3giybpWDSBCfNqER+IvAuMzSgVvR7ERMkmtQLq0 gMPrUc+9ij2/rFRY6z0Kke/ZS+zagG9ccjo8MI1MBjVCpTpj3u5bVBzrw5OOPjzo IaegUdSCGdmL5fdd7bQTgffWPRpyDpg= -----END CERTIFICATE-----Generated at Sun Jan 11 09:44:56 2026 by rpki-client