This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa File: 96e6c965-0587-3b22-ae88-904374045cbc.roa (raw, json) Hash identifier: ztCpFtZ/ohDKZKYmceYRAq1mTZOxJu0ZJDhxVXTu/KY= Subject key identifier: 98:89:8D:7F:7D:10:13:E7:AC:1D:A5:6A:18:C1:8E:0C:C3:66:60:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC08EE27794F87332E1F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.21.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:08:ee:27:79:4f:87:33:2e:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=d407278f-25a9-4c4e-a0eb-84481fad9f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:5e:58:95:7b:47:75:65:1b:c5:c8:7f:2d: e6:ae:82:4e:b8:44:9d:10:5a:62:02:6a:04:d7:4a: fd:c1:d9:39:54:d8:a3:65:ed:d2:36:3e:68:c7:31: f5:a4:34:42:53:fe:60:42:f4:13:87:06:01:3e:ae: c3:af:a3:7a:bd:92:e8:b3:32:f9:11:09:ec:24:57: 39:aa:67:52:05:27:13:c7:a8:49:6f:9a:3b:b0:85: 52:a9:aa:40:05:34:79:92:40:67:35:c1:6a:d2:a8: 92:a5:1d:52:d3:09:ff:4b:9e:0b:f9:6c:8a:f6:78: f5:53:b4:07:5d:ea:bf:96:f7:67:2c:86:76:d9:12: bb:f4:56:ef:e7:46:78:f2:40:10:52:20:b4:e7:44: 10:e2:2d:42:1e:eb:0a:20:97:19:7d:07:23:a3:56: 9b:a2:0c:ea:16:41:d8:ec:c8:4c:9e:0c:11:42:7b: 02:05:bc:d6:2f:da:91:b1:14:1f:45:0c:d7:74:65: b0:16:ac:a9:11:a7:01:7f:0d:2a:42:d4:00:bb:44: 6e:d4:98:0e:a3:9f:22:1b:35:b5:08:fb:4f:0c:13: ae:72:97:84:ec:55:05:b4:11:00:93:c1:19:c6:c8: 12:b2:f9:5e:c7:ee:6e:37:df:41:6e:f0:05:d4:9d: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:89:8D:7F:7D:10:13:E7:AC:1D:A5:6A:18:C1:8E:0C:C3:66:60:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:20:0e:d4:18:38:b3:e2:c3:57:7d:1a:c4:7e:43:81:06:dc: 4f:af:1c:b1:fd:ca:cf:43:39:b9:0a:19:f0:b0:66:e3:85:a5: 56:02:81:68:0a:9f:5e:7b:21:cb:18:c8:83:94:7f:eb:a8:f8: 10:fa:02:d9:58:61:23:ea:a0:ac:c7:68:c1:41:cb:3f:4d:31: 3c:83:53:47:ca:12:b9:2e:2c:76:b0:44:1f:3f:26:0b:ac:66: 7b:02:02:a0:c4:6d:03:75:51:a6:bb:18:13:63:24:40:b3:33: f5:5a:a1:eb:ce:e7:11:36:24:bd:36:60:a7:9b:c1:0e:08:73: 92:97:fa:48:b1:e9:20:35:8c:34:8c:13:94:83:d6:59:6b:a1: e6:d2:84:1e:d9:99:40:14:89:8c:9d:cb:34:36:51:b9:b3:74: 67:b1:18:00:57:f8:b8:61:89:d2:bb:e7:c1:57:1a:9d:e2:92: c2:dd:fa:0f:9e:92:05:9b:97:99:10:6d:d6:1f:4c:ba:4a:3f: 08:64:42:ec:89:9e:43:f5:b4:5d:29:1e:bc:74:c7:d8:71:0f: e3:7e:2c:82:9a:11:81:f0:62:89:1c:36:7e:01:24:4c:b7:ce: eb:c6:66:56:28:51:9c:19:36:53:b6:70:09:9b:ee:af:c9:f4: dc:87:a2:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AjuJ3lPhzMuH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDQwNzI3OGYtMjVhOS00YzRlLWEwZWItODQ0ODFmYWQ5ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbpeWJV7R3VlG8XIfy3mroJOuESdEFpiAmoE 10r9wdk5VNijZe3SNj5oxzH1pDRCU/5gQvQThwYBPq7Dr6N6vZLoszL5EQnsJFc5 qmdSBScTx6hJb5o7sIVSqapABTR5kkBnNcFq0qiSpR1S0wn/S54L+WyK9nj1U7QH Xeq/lvdnLIZ22RK79Fbv50Z48kAQUiC050QQ4i1CHusKIJcZfQcjo1abogzqFkHY 7MhMngwRQnsCBbzWL9qRsRQfRQzXdGWwFqypEacBfw0qQtQAu0Ru1JgOo58iGzW1 CPtPDBOucpeE7FUFtBEAk8EZxsgSsvlex+5uN99BbvAF1J1hhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiJjX99EBPnrB2lahjBjgzDZmDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTZlNmM5NjUtMDU4Ny0z YjIyLWFlODgtOTA0Mzc0MDQ1Y2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMgDtQYOLPiw1d9GsR+Q4EG3E+vHLH9ys9DObkKGfCwZuOFpVYCgWgK n157IcsYyIOUf+uo+BD6AtlYYSPqoKzHaMFByz9NMTyDU0fKErkuLHawRB8/Jgus ZnsCAqDEbQN1Uaa7GBNjJECzM/VaoevO5xE2JL02YKebwQ4Ic5KX+kix6SA1jDSM E5SD1llroebShB7ZmUAUiYydyzQ2UbmzdGexGABX+LhhidK758FXGp3iksLd+g+e kgWbl5kQbdYfTLpKPwhkQuyJnkP1tF0pHrx0x9hxD+N+LIKaEYHwYokcNn4BJEy3 zuvGZlYoUZwZNlO2cAmb7q/J9NyHolE= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:42 2026 by rpki-client