This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa File: 8e5790fe-671f-3fb2-acc2-af37819929ac.roa (raw, json) Hash identifier: 8MBp1fPlP7QcHZqS/ALznlq1MVHOR4pBlwtF8RPRu8g= Subject key identifier: 6B:80:0E:92:B1:54:21:CD:1E:E9:7E:16:3D:B9:4F:FC:EA:A2:DF:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC090FCF94232642C6C500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:09:0f:cf:94:23:26:42:c6:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=82e605f6-63aa-406d-bfe1-c63c770cac49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:ec:de:ca:8c:22:62:83:bb:8f:26:9a:81: b6:be:61:4c:16:29:5b:ab:0b:15:73:d7:cd:7f:fb: 9e:1d:2a:f2:95:f0:58:ea:31:b7:e0:b1:97:ad:30: 18:4b:fa:ed:40:90:89:06:16:cb:cd:a9:09:0a:49: 18:72:74:a7:72:41:c1:03:24:c0:2f:90:41:90:c1: 90:7b:0e:dd:a3:ac:ad:d1:0e:24:2d:2d:74:28:95: 3c:ee:1d:00:3b:ce:bb:d9:fb:04:9c:72:ba:96:b8: 0c:46:45:90:38:1a:9e:9e:1d:49:3b:60:ac:61:93: 7d:f8:97:fc:cf:94:73:da:6e:ad:f2:c6:4e:51:7d: ae:42:04:d7:f8:83:f1:b7:08:d3:27:3e:a7:95:2c: de:f8:44:78:f1:d2:70:88:af:da:29:5e:99:fc:2a: d4:4e:b8:ad:7f:98:51:4a:ab:0c:aa:71:9b:a3:23: 60:bc:18:07:f1:08:a5:b9:da:f0:49:27:c2:fe:bc: 35:5c:db:08:44:6a:55:c0:43:95:2a:e5:05:6e:57: da:6a:e2:01:95:f1:b5:e7:7d:4e:c9:30:fe:01:e9: 65:88:c1:16:d6:cf:ec:55:08:a9:c3:5c:43:b4:30: 40:a5:17:c5:24:c6:a9:eb:78:bb:0a:e9:fc:04:52: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:0E:92:B1:54:21:CD:1E:E9:7E:16:3D:B9:4F:FC:EA:A2:DF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:84:74:b7:4d:43:85:c6:b6:8b:84:41:df:79:eb:45:be:fc: b3:8b:31:81:72:d5:bf:c7:1e:08:6e:5e:97:ef:2c:f1:43:a5: b2:7b:1b:4c:f2:7b:3d:d0:19:a1:ee:c2:54:22:5a:bb:3c:f7: 50:1b:ae:4f:32:50:2a:47:c5:2b:0d:37:25:7e:52:93:48:1d: 25:23:ec:a8:bb:ad:08:9d:2d:e5:a0:79:d5:a9:35:4b:c0:08: 2f:7a:12:2e:1c:4c:7d:c4:5f:6e:d4:fe:1f:dd:8b:41:7a:83: c3:86:86:a2:b8:84:2e:48:9f:e1:9c:55:5a:5d:af:0b:4b:99: 01:ac:76:e4:19:48:ef:cf:7c:c6:c1:ff:c5:07:43:fa:17:43: 8f:67:fb:3b:69:81:3b:b4:1d:bc:27:8e:e9:e7:9e:6e:f3:05: b0:80:6f:39:d4:f0:ad:d8:5e:ff:ed:a8:e3:cd:97:fb:d3:97: 92:2f:67:cc:8b:0f:68:26:23:c1:35:76:ff:c1:2d:30:ab:bd: 2c:92:62:41:d9:78:d9:a3:c4:de:65:c3:f1:ab:21:61:94:fe: 86:9e:2b:c7:13:32:12:98:5c:42:7b:5c:5b:c6:07:4d:3e:79: fd:dd:f1:90:b2:05:1e:ab:70:6b:e9:56:ae:68:2d:a6:e9:7b: 7a:d3:7c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AkPz5QjJkLGxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ODJlNjA1ZjYtNjNhYS00MDZkLWJmZTEtYzYzYzc3MGNhYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq3s3sqMImKDu48mmoG2vmFMFilbqwsVc9fN f/ueHSrylfBY6jG34LGXrTAYS/rtQJCJBhbLzakJCkkYcnSnckHBAyTAL5BBkMGQ ew7do6yt0Q4kLS10KJU87h0AO8672fsEnHK6lrgMRkWQOBqenh1JO2CsYZN9+Jf8 z5Rz2m6t8sZOUX2uQgTX+IPxtwjTJz6nlSze+ER48dJwiK/aKV6Z/CrUTritf5hR SqsMqnGboyNgvBgH8QiludrwSSfC/rw1XNsIRGpVwEOVKuUFblfaauIBlfG1531O yTD+AelliMEW1s/sVQipw1xDtDBApRfFJMap63i7Cun8BFKOvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuADpKxVCHNHul+Fj25T/zqot9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU1NzkwZmUtNjcxZi0z ZmIyLWFjYzItYWYzNzgxOTkyOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSEdLdNQ4XGtouEQd9560W+/LOLMYFy1b/HHghuXpfvLPFDpbJ7G0zy ez3QGaHuwlQiWrs891Abrk8yUCpHxSsNNyV+UpNIHSUj7Ki7rQidLeWgedWpNUvA CC96Ei4cTH3EX27U/h/di0F6g8OGhqK4hC5In+GcVVpdrwtLmQGsduQZSO/PfMbB /8UHQ/oXQ49n+ztpgTu0Hbwnjunnnm7zBbCAbznU8K3YXv/tqOPNl/vTl5IvZ8yL D2gmI8E1dv/BLTCrvSySYkHZeNmjxN5lw/GrIWGU/oaeK8cTMhKYXEJ7XFvGB00+ ef3d8ZCyBR6rcGvpVq5oLabpe3rTfF0= -----END CERTIFICATE-----Generated at Sun Jan 11 15:45:07 2026 by rpki-client