This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa File: 856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa (raw, json) Hash identifier: /1yGfTORHMpzFW7bwUdRlh/2HOcci3iACZ63vVFWhVo= Subject key identifier: 9E:40:1D:91:99:16:5D:DA:BF:C3:83:17:11:36:36:26:C6:C5:25:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C215B911BE27577F1724D7800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 19905 IP address blocks: 173.18.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:91:1b:e2:75:77:f1:72:4d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=9c2ac8da-8b0c-4d80-9cac-d8c3e1e8f3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c2:0b:5b:69:64:80:3a:dc:3e:90:9b:e3:3a: 9e:a3:07:26:63:07:bb:9c:1b:e1:08:ea:30:5c:20: 5c:f6:52:f5:f5:be:08:0a:8f:a5:7e:8a:15:73:9e: e6:7a:d2:2e:28:b1:05:ae:f4:0f:4d:d0:4b:28:5b: 58:c6:16:e6:a2:f8:5c:70:28:f9:43:e0:96:a3:5d: a9:94:a5:ea:3e:9d:67:9d:3d:b3:9e:c8:da:5a:ca: aa:ef:f7:9b:fd:5d:92:f1:4b:c4:e8:b8:3e:96:98: 1e:f5:fd:b7:2b:05:8d:cd:c5:42:fd:e0:75:ca:e6: 50:78:d3:7a:65:c9:f2:09:bb:f1:4c:37:a5:8e:a3: 16:bc:5d:01:8b:fc:42:5b:3f:a9:51:32:56:c1:25: 55:44:bf:20:02:24:76:ea:d3:b6:6f:6d:1e:6c:7b: da:28:3c:d6:66:09:ec:d0:75:74:6b:35:fe:e8:b5: a7:37:9c:41:53:30:66:c4:b1:73:f0:7f:f3:48:9d: 17:68:af:f4:cf:dc:40:27:48:2b:b4:de:e4:d2:b5: c6:17:47:29:56:bf:13:80:3c:32:57:17:cd:e6:1b: 41:4a:b3:09:42:85:6b:42:e5:cb:5b:51:a0:80:b3: 5d:7a:9b:ae:20:79:1f:76:45:67:2f:19:14:c7:c8: 9b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:1D:91:99:16:5D:DA:BF:C3:83:17:11:36:36:26:C6:C5:25:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6a:63:bd:aa:88:07:47:2e:45:74:05:05:cd:f7:d3:c0:c2: 78:f1:c7:11:6f:2c:cb:ef:a1:2a:43:64:6c:d4:b3:46:ed:8f: 56:0a:02:66:e3:ee:62:eb:f4:2a:5b:4e:49:e0:ff:94:ca:2d: aa:b4:f8:bc:2f:2f:91:37:5b:c5:d4:1e:e5:78:f4:50:78:97: da:29:ad:ee:b3:30:36:ad:b9:0b:d5:03:08:f5:59:21:75:63: 95:24:9d:35:9f:b0:19:c7:42:2f:13:ae:dc:ce:bb:5f:80:27: ff:33:b9:78:8b:03:30:22:51:e7:d1:ff:cc:96:ad:ec:a8:7a: df:09:bb:0c:25:44:6f:b5:17:00:d3:85:c2:df:54:6f:9b:98: a1:50:8a:49:8e:4e:1f:c0:25:65:4c:9e:55:99:52:ec:b9:58: 6b:30:80:60:9e:7c:77:fd:ba:85:41:fd:b3:e5:f3:18:ea:ab: 2b:3c:59:b8:74:89:9e:54:23:25:53:f9:5a:1f:33:94:45:6c: 90:d9:c6:98:63:2b:5e:97:19:b3:7f:f9:de:89:83:10:8c:f2: cd:3f:bc:88:32:1e:2f:3b:59:33:11:37:c1:e1:d2:8c:82:de: e2:42:a8:65:dc:b8:ad:74:5c:98:ce:07:d3:db:8a:b1:d4:c5: b2:04:2a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5Eb4nV38XJNeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk OWMyYWM4ZGEtOGIwYy00ZDgwLTljYWMtZDhjM2UxZThmM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ILW2lkgDrcPpCb4zqeowcmYwe7nBvhCOow XCBc9lL19b4ICo+lfooVc57metIuKLEFrvQPTdBLKFtYxhbmovhccCj5Q+CWo12p lKXqPp1nnT2znsjaWsqq7/eb/V2S8UvE6Lg+lpge9f23KwWNzcVC/eB1yuZQeNN6 ZcnyCbvxTDeljqMWvF0Bi/xCWz+pUTJWwSVVRL8gAiR26tO2b20ebHvaKDzWZgns 0HV0azX+6LWnN5xBUzBmxLFz8H/zSJ0XaK/0z9xAJ0grtN7k0rXGF0cpVr8TgDwy VxfN5htBSrMJQoVrQuXLW1GggLNdepuuIHkfdkVnLxkUx8ibGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5AHZGZFl3av8ODFxE2NibGxSVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODU2YTE0N2ItMTJkNi0z YjljLWExOWEtZDAzMmUzYzFjODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNqY72qiAdHLkV0BQXN99PAwnjxxxFvLMvvoSpDZGzUs0btj1YKAmbj 7mLr9CpbTkng/5TKLaq0+LwvL5E3W8XUHuV49FB4l9opre6zMDatuQvVAwj1WSF1 Y5UknTWfsBnHQi8TrtzOu1+AJ/8zuXiLAzAiUefR/8yWreyoet8JuwwlRG+1FwDT hcLfVG+bmKFQikmOTh/AJWVMnlWZUuy5WGswgGCefHf9uoVB/bPl8xjqqys8Wbh0 iZ5UIyVT+VofM5RFbJDZxphjK16XGbN/+d6JgxCM8s0/vIgyHi87WTMRN8Hh0oyC 3uJCqGXcuK10XJjOB9PbirHUxbIEKok= -----END CERTIFICATE-----Generated at Sun Jan 11 09:44:24 2026 by rpki-client