This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa File: 98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa (raw, json) Hash identifier: EJHj4EVzAbJUzobtTU8x3gZoamHQVZCz9CNRi8wYWqg= Subject key identifier: 86:B9:75:6E:53:1A:D7:27:06:68:A2:5E:7A:A3:9A:FE:BE:ED:03:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A67FAC3849C97F44796680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:7f:ac:38:49:c9:7f:44:79:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=52deef57-168f-4d8f-99ce-3be56ad18a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:55:91:67:92:aa:98:95:9a:cb:53:34:e0: cd:d7:ac:c1:47:73:78:16:c8:1c:af:52:4d:78:b0: af:4b:49:db:61:dc:12:d8:18:08:77:bf:91:85:64: 00:44:99:e1:32:07:a1:5e:eb:dd:2f:88:a4:f8:3b: 51:96:aa:b4:e2:ad:e9:8b:e0:96:a5:2c:5e:bf:25: ff:ce:3d:2b:15:2d:25:de:96:dc:c2:cb:59:a7:21: e6:b8:63:33:56:61:4c:c0:fb:9f:39:64:23:83:fc: b4:76:24:56:b5:52:d9:0d:bc:bd:8d:d0:53:c0:a1: ed:15:87:c5:af:17:3f:20:05:8f:e5:81:b3:6b:6e: 4e:aa:9a:53:79:6b:ff:e4:5c:d5:af:52:96:12:a6: c5:e7:33:c9:a6:94:a7:81:c2:f8:02:2a:1b:6e:d0: 5b:0a:17:6c:c5:f0:ec:2e:0f:65:9e:03:34:22:cf: 3a:a0:09:66:44:95:e3:52:3d:fd:25:d5:12:0a:2c: 7e:ef:b1:0a:d6:1a:2d:c5:25:41:c9:40:4a:7c:78: 3c:70:98:5a:6d:b7:35:22:1f:5d:ec:ed:87:ab:02: 81:d3:5e:c7:18:9c:e3:20:08:1a:45:cd:36:08:ef: ec:f3:1c:5c:9f:f3:9b:8a:13:de:ac:80:e9:94:91: e7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:75:6E:53:1A:D7:27:06:68:A2:5E:7A:A3:9A:FE:BE:ED:03:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:99:76:0c:a1:46:96:98:18:0d:e4:d6:3d:db:16:a1:f8:ee: cc:e2:81:9a:e1:db:f6:ad:f5:36:42:b7:cc:ff:2a:aa:8a:9b: bb:d6:2a:41:95:82:2c:8c:f0:50:f0:ab:cf:f8:25:0f:70:c8: 57:05:13:10:6f:a9:3b:33:00:d7:9d:09:a6:02:27:de:78:ec: 62:da:df:a5:bd:5a:ae:0a:1d:93:d5:1e:8d:60:de:0e:6c:bf: d4:0c:38:c5:76:e3:a0:13:1f:a5:4d:66:c1:4a:0d:80:64:17: af:3e:d7:a1:1f:a2:cc:ee:d3:e3:2f:ce:83:bc:c9:fa:0c:de: b5:0b:d1:08:1a:a0:50:a5:39:c7:cc:1a:79:4d:a0:d2:0a:98: 29:1b:ca:6c:5e:07:21:83:cf:94:2d:af:bc:fd:ef:64:e6:7d: 93:63:ad:89:d1:d7:6c:e7:01:3b:9e:e3:de:bb:cf:f6:51:30: 75:c0:92:19:0c:17:f5:a1:61:5c:5c:c4:ad:ef:bb:59:c5:ac: ce:13:3d:42:32:d4:59:6e:02:5d:eb:64:82:f1:13:65:93:14: c5:c6:c5:d1:20:c4:7b:e6:3f:76:25:43:58:3c:19:3c:46:4b: b2:a1:cf:be:84:bf:c3:83:77:85:a6:bc:d2:ad:8f:a5:26:3f: f0:be:ae:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpn+sOEnJf0R5ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTJkZWVmNTctMTY4Zi00ZDhmLTk5Y2UtM2JlNTZhZDE4YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx5VkWeSqpiVmstTNODN16zBR3N4Fsgcr1JN eLCvS0nbYdwS2BgId7+RhWQARJnhMgehXuvdL4ik+DtRlqq04q3pi+CWpSxevyX/ zj0rFS0l3pbcwstZpyHmuGMzVmFMwPufOWQjg/y0diRWtVLZDby9jdBTwKHtFYfF rxc/IAWP5YGza25OqppTeWv/5FzVr1KWEqbF5zPJppSngcL4AiobbtBbChdsxfDs Lg9lngM0Is86oAlmRJXjUj39JdUSCix+77EK1hotxSVByUBKfHg8cJhabbc1Ih9d 7O2HqwKB017HGJzjIAgaRc02CO/s8xxcn/ObihPerIDplJHnhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa5dW5TGtcnBmiiXnqjmv6+7QMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOThmYTMxYTgtYTJiMS0z NTFiLWE0NWItNGNmOGMzNGFiZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmZdgyhRpaYGA3k1j3bFqH47szigZrh2/at9TZCt8z/KqqKm7vWKkGV giyM8FDwq8/4JQ9wyFcFExBvqTszANedCaYCJ9547GLa36W9Wq4KHZPVHo1g3g5s v9QMOMV246ATH6VNZsFKDYBkF68+16Efoszu0+MvzoO8yfoM3rUL0QgaoFClOcfM GnlNoNIKmCkbymxeByGDz5Qtr7z972TmfZNjrYnR12znATue4967z/ZRMHXAkhkM F/WhYVxcxK3vu1nFrM4TPUIy1FluAl3rZILxE2WTFMXGxdEgxHvmP3YlQ1g8GTxG S7Khz76Ev8ODd4WmvNKtj6UmP/C+rnM= -----END CERTIFICATE-----Generated at Sun Jan 11 15:45:04 2026 by rpki-client