This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa File: 84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa (raw, json) Hash identifier: wYRE/TFcX+Z1ze7R8ioaVzzC0akE24wzbI5Ltp7Hmi8= Subject key identifier: C6:66:54:A0:2B:04:61:78:D6:A0:FA:C8:02:55:8B:DE:94:85:CB:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5A9674AF99ACDFCF7A16E3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.16.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:74:af:99:ac:df:cf:7a:16:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=f8bb59f8-ef7c-4592-811a-6bea59f1628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:27:11:dd:68:d4:d1:98:bc:0b:d4:88:5f: 1c:b3:6e:a1:3c:69:ae:b1:56:b2:cd:46:f8:9c:13: be:8e:bd:63:68:10:9d:d1:c2:94:b2:d2:c7:f6:fb: dd:ee:3c:3d:66:6f:ee:02:cd:37:82:60:cd:a6:51: 48:96:f2:19:d8:00:b7:cc:a2:fb:bd:3f:6d:e5:2a: b7:c7:07:87:40:44:6c:67:69:c6:12:2c:a1:3e:4e: 2b:46:22:1d:62:a2:de:c7:77:38:79:2e:85:ed:5e: bb:4a:c0:d9:f4:7d:c7:0c:0a:dd:b2:69:f7:6d:ab: 7e:b0:e2:b2:3a:e3:b5:c5:39:a3:e5:20:fc:9b:8d: 2e:93:1b:c0:66:6d:63:40:6e:0b:31:34:dd:0f:56: bd:7a:77:83:54:4a:cd:07:73:41:dc:3f:d9:ef:43: 89:9a:ab:bd:ca:67:4a:9e:49:74:66:28:c5:cf:c5: 59:88:b2:a2:83:f5:5e:20:1d:89:fd:92:54:bd:69: a1:64:7d:a6:33:ad:09:c5:32:55:cc:aa:a7:ac:43: 7f:59:75:53:df:67:a9:0d:75:16:86:98:cd:ab:d8: 11:86:da:ee:a8:f3:9f:bf:58:94:52:c3:08:41:93: a1:c2:4e:4e:6b:f2:0c:bd:c1:50:ef:e9:bc:91:fc: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:66:54:A0:2B:04:61:78:D6:A0:FA:C8:02:55:8B:DE:94:85:CB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:93:25:a9:6e:33:e3:b4:af:32:de:48:ac:8e:38:37:91: 36:81:a7:06:fc:dc:4d:98:57:d5:4d:6c:ff:5e:8e:ec:6b:2b: 91:98:c6:5b:1f:7b:82:c7:26:21:6f:5c:b3:46:f3:30:dd:e9: c5:04:c2:aa:7f:58:b9:0d:87:22:52:d8:f1:a4:ab:b4:e2:d4: 0a:81:b7:7a:ac:48:3e:46:b0:f0:3d:5d:a8:9f:62:7e:65:ee: c3:43:ce:08:09:83:d1:7d:79:d0:37:82:dc:a2:65:a7:65:8a: ca:ad:29:62:18:b2:ba:1a:ff:9e:61:58:5e:31:6a:1e:1d:bb: 9d:26:5c:68:4e:97:c1:0b:bf:65:3b:39:41:2f:25:20:c4:f3: 43:19:1f:90:32:c3:3c:df:64:8b:5c:8c:a9:da:57:93:02:c5: 2b:85:b2:b0:3b:5e:23:42:8c:89:ff:94:eb:5b:7a:7a:12:62: 54:95:db:50:80:1f:74:32:dd:16:34:a6:c2:f6:6e:90:a9:a1: 86:eb:71:d8:80:7c:d7:b2:cb:2d:cd:4e:8a:c2:67:5d:80:5d: a3:3e:14:de:c2:06:6e:71:d9:ee:5f:0e:2d:5c:8c:c1:6b:0a: ae:c2:e5:56:c8:99:95:95:bc:e7:8d:82:a7:80:62:11:13:0b: 52:ba:80:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExalnSvmazfz3oW48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk ZjhiYjU5ZjgtZWY3Yy00NTkyLTgxMWEtNmJlYTU5ZjE2MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPYnEd1o1NGYvAvUiF8cs26hPGmusVayzUb4 nBO+jr1jaBCd0cKUstLH9vvd7jw9Zm/uAs03gmDNplFIlvIZ2AC3zKL7vT9t5Sq3 xweHQERsZ2nGEiyhPk4rRiIdYqLex3c4eS6F7V67SsDZ9H3HDArdsmn3bat+sOKy OuO1xTmj5SD8m40ukxvAZm1jQG4LMTTdD1a9eneDVErNB3NB3D/Z70OJmqu9ymdK nkl0ZijFz8VZiLKig/VeIB2J/ZJUvWmhZH2mM60JxTJVzKqnrEN/WXVT32epDXUW hpjNq9gRhtruqPOfv1iUUsMIQZOhwk5Oa/IMvcFQ7+m8kfxAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZmVKArBGF41qD6yAJVi96UhcsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRjMzI4NzEtYjJjMy0z ZDVhLTlkN2MtY2Q5MzJkZWQ2YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2OkyWpbjPjtK8y3kisjjg3kTaBpwb83E2YV9VNbP9ejuxrK5GYxlsf e4LHJiFvXLNG8zDd6cUEwqp/WLkNhyJS2PGkq7Ti1AqBt3qsSD5GsPA9XaifYn5l 7sNDzggJg9F9edA3gtyiZadlisqtKWIYsroa/55hWF4xah4du50mXGhOl8ELv2U7 OUEvJSDE80MZH5AywzzfZItcjKnaV5MCxSuFsrA7XiNCjIn/lOtbenoSYlSV21CA H3Qy3RY0psL2bpCpoYbrcdiAfNeyyy3NTorCZ12AXaM+FN7CBm5x2e5fDi1cjMFr Cq7C5VbImZWVvOeNgqeAYhETC1K6gB0= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:46 2026 by rpki-client