This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa File: 98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa (raw, json) Hash identifier: rjDCUSHuKW3/42+jbfvjBMusMRQRzGhxgDqvlFvZEFI= Subject key identifier: D6:5F:70:3B:B4:46:56:13:E5:EE:08:B7:F6:E6:A6:F1:CC:C2:3D:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C470BC0CB90C2651BFFC65080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.20.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:c0:cb:90:c2:65:1b:ff:c6:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=e6200f4f-5c96-423d-8e49-bba7aee7a671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:bd:43:27:24:0d:f2:45:47:54:53:f3:ae: 64:60:28:7a:d5:69:d3:d3:b1:12:07:c3:81:db:b9: 32:26:cb:8d:ac:8b:f8:e5:74:6b:38:01:36:9e:4f: cb:47:5e:5d:24:38:a0:a9:e3:2c:cf:88:8d:c5:3a: 2a:10:a5:01:e7:f0:20:07:31:56:c7:c7:12:34:32: af:39:22:dc:23:c5:8b:e3:01:8e:50:c1:05:0e:8d: 15:4d:32:02:10:85:45:14:c4:6a:7f:81:e9:92:8b: 87:5e:4a:18:ec:5d:2f:b5:fd:ef:0e:2d:7f:6c:75: bc:fc:3e:f6:4f:ed:fe:af:00:48:97:f1:ee:d6:9a: 2e:9d:66:1e:ee:8e:64:8f:d0:f2:2d:b0:a7:f1:cc: c4:32:15:8a:8c:9f:08:98:79:f4:de:71:b4:f3:ba: 8b:a7:f7:55:b7:32:b8:49:1e:00:74:9d:ca:da:f6: aa:04:13:2f:5a:a2:89:a8:9a:48:61:d9:1a:7f:cf: b7:ef:27:e7:86:41:32:d5:1f:43:06:42:7c:3a:d4: 36:0d:67:74:a9:c4:f7:e8:99:f1:69:c6:0d:aa:a3: fd:53:99:f9:78:2e:e6:47:b9:77:90:f0:a3:f9:9f: d0:28:9f:75:54:de:28:e2:c1:fb:b5:58:71:0d:4d: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5F:70:3B:B4:46:56:13:E5:EE:08:B7:F6:E6:A6:F1:CC:C2:3D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:df:fd:fa:d9:84:3f:7b:58:e9:bf:7c:08:87:59:db:9e:a6: d1:5d:be:a4:d3:77:e2:5f:bc:94:2c:bc:c6:e1:53:cc:93:fd: 53:e1:c0:12:ba:31:33:37:43:f4:75:31:13:e7:18:ee:01:f6: 54:99:6c:d0:6e:46:06:ff:c1:87:5f:63:fb:06:e1:e0:70:93: 5c:3d:41:c9:c2:90:0c:8e:66:f5:aa:7f:f3:da:7c:d8:6d:5d: d3:53:f4:cc:cd:f4:4b:8e:18:8d:af:c8:ee:d9:8e:0c:c4:53: 1c:31:03:c8:14:de:11:8b:68:a3:e0:6a:1d:c6:92:9e:26:6d: 66:ec:11:9f:72:50:bb:fd:f0:84:ef:0f:4d:31:59:91:34:e2: 57:a7:76:78:0b:40:d9:68:81:da:63:57:ac:16:07:11:f9:9a: 03:c5:5b:dd:ef:69:4d:9f:4a:65:2a:d2:3e:19:fc:e7:0b:b0: e6:8c:94:8f:ab:88:99:d9:b6:d0:66:da:c6:a6:11:18:d7:11: 5d:a1:72:55:d7:5d:a0:69:3f:5c:10:3a:e6:30:26:94:57:47: cf:f0:b0:15:c5:12:93:0f:47:73:6f:a2:26:fe:2f:d8:a3:6b: 46:4f:75:2a:da:4a:d3:3e:fb:b3:52:3a:52:8e:57:7e:4f:a6: 5a:ea:34:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8DLkMJlG//GUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk ZTYyMDBmNGYtNWM5Ni00MjNkLThlNDktYmJhN2FlZTdhNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbm9QyckDfJFR1RT865kYCh61WnT07ESB8OB 27kyJsuNrIv45XRrOAE2nk/LR15dJDigqeMsz4iNxToqEKUB5/AgBzFWx8cSNDKv OSLcI8WL4wGOUMEFDo0VTTICEIVFFMRqf4HpkouHXkoY7F0vtf3vDi1/bHW8/D72 T+3+rwBIl/Hu1pounWYe7o5kj9DyLbCn8czEMhWKjJ8ImHn03nG087qLp/dVtzK4 SR4AdJ3K2vaqBBMvWqKJqJpIYdkaf8+37yfnhkEy1R9DBkJ8OtQ2DWd0qcT36Jnx acYNqqP9U5n5eC7mR7l3kPCj+Z/QKJ91VN4o4sH7tVhxDU0ifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZfcDu0RlYT5e4It/bmpvHMwj3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTgxOTE5NDUtYzIxZi0z YTU5LTk4YTctOGZmYmJmOWQyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTf/frZhD97WOm/fAiHWdueptFdvqTTd+JfvJQsvMbhU8yT/VPhwBK6 MTM3Q/R1MRPnGO4B9lSZbNBuRgb/wYdfY/sG4eBwk1w9QcnCkAyOZvWqf/PafNht XdNT9MzN9EuOGI2vyO7ZjgzEUxwxA8gU3hGLaKPgah3Gkp4mbWbsEZ9yULv98ITv D00xWZE04lendngLQNlogdpjV6wWBxH5mgPFW93vaU2fSmUq0j4Z/OcLsOaMlI+r iJnZttBm2samERjXEV2hclXXXaBpP1wQOuYwJpRXR8/wsBXFEpMPR3Nvoib+L9ij a0ZPdSraStM++7NSOlKOV35PplrqNFs= -----END CERTIFICATE-----Generated at Sun Jan 11 15:43:44 2026 by rpki-client