This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa File: a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa (raw, json) Hash identifier: /+xMObgfiv5VeMBOkDqQmkiDtFoqrsalbvGaGLjDRlw= Subject key identifier: D4:CD:75:23:1D:D3:7A:BB:65:F1:AE:1D:2B:3B:0E:37:72:40:46:9B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC065EC6B38A1FB659DB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:06:5e:c6:b3:8a:1f:b6:59:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=6f41bde8-b70f-44df-a7fb-7384c0566c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:aa:e2:75:7c:ae:8b:13:ac:0a:3c:2f:4c: 5c:c6:cb:fa:ed:63:23:d6:54:b5:3a:67:5a:d4:0a: 8e:fa:af:58:f8:69:35:fe:a3:32:76:bb:6d:a8:a2: ca:cd:50:33:90:c0:13:55:ca:4c:00:22:10:5f:07: 88:c6:9f:2b:37:62:a6:62:99:8d:d2:f2:11:69:c0: 9b:06:14:83:ad:56:44:c7:37:19:90:dd:d8:d1:61: 92:ea:6c:44:cb:9b:0b:76:e1:72:8b:ad:2c:17:66: 7f:68:b9:fb:d6:66:ca:3f:29:f5:c3:b9:88:bb:54: ce:2e:10:ec:3b:4a:90:2d:39:05:cd:bb:0a:65:fa: fd:b8:b7:50:50:40:00:e0:6e:cd:5d:da:c9:22:ea: 16:2e:96:92:8f:97:3c:52:bc:c7:50:85:d6:7d:2a: f8:ab:29:d5:f5:96:02:9a:67:47:d1:60:61:07:0a: bf:ea:70:13:5e:8f:a9:31:bc:47:ac:52:c2:d8:20: e5:c9:84:fe:a7:f3:32:12:37:ab:15:89:6d:ec:b9: 25:c8:7e:4e:fa:79:e3:c6:a7:06:73:6c:5d:aa:76: 3b:a5:3d:df:b6:f3:a2:00:ef:5d:12:e8:72:e6:6a: d7:ed:ba:8b:4d:58:31:8f:bb:c8:2e:98:70:bf:91: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CD:75:23:1D:D3:7A:BB:65:F1:AE:1D:2B:3B:0E:37:72:40:46:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:43:da:aa:5f:ff:4c:ca:64:93:60:34:5e:87:b0:d3:06:e0: e0:7f:3b:3c:a4:23:1d:7c:7e:fa:80:88:1c:23:68:e6:cb:39: 6c:2f:6a:36:61:7c:94:fd:e6:c1:3d:5c:96:11:45:65:1f:06: 67:39:77:ad:0b:7d:a8:d7:5f:71:2d:f0:0f:a1:e6:c2:87:28: 12:65:f5:fd:43:db:af:5d:87:ec:9c:b1:8f:17:44:d4:6f:d2: 29:54:e8:fa:b1:c9:f3:54:23:51:a9:dc:b3:d5:96:4f:75:04: 16:92:40:2c:c5:a2:5d:f0:15:66:db:77:4e:a7:a1:e5:59:44: 58:e3:1f:89:a6:ff:56:b0:56:56:73:9f:f9:a7:5e:52:6d:92: ad:99:70:27:0c:56:f3:99:32:11:c5:ab:a7:50:9e:d6:3b:74: ee:eb:f0:27:25:fd:fc:82:bc:7e:5d:ff:aa:fb:7b:65:8a:00: 9a:68:ee:5f:53:37:3a:7e:23:a0:8c:66:1d:f7:bf:22:89:ab: 67:f6:f2:29:7b:4c:f3:06:f2:ae:39:c3:f2:80:06:04:6c:96: 41:fa:21:c1:db:56:cc:39:a9:da:8c:eb:41:ba:78:a3:da:eb: 72:23:08:0a:04:bf:1a:5e:2f:fa:78:b2:ba:64:0b:33:7b:77: 9c:85:27:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AZexrOKH7ZZ24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NmY0MWJkZTgtYjcwZi00NGRmLWE3ZmItNzM4NGMwNTY2YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX+q4nV8rosTrAo8L0xcxsv67WMj1lS1Omda 1AqO+q9Y+Gk1/qMydrttqKLKzVAzkMATVcpMACIQXweIxp8rN2KmYpmN0vIRacCb BhSDrVZExzcZkN3Y0WGS6mxEy5sLduFyi60sF2Z/aLn71mbKPyn1w7mIu1TOLhDs O0qQLTkFzbsKZfr9uLdQUEAA4G7NXdrJIuoWLpaSj5c8UrzHUIXWfSr4qynV9ZYC mmdH0WBhBwq/6nATXo+pMbxHrFLC2CDlyYT+p/MyEjerFYlt7LklyH5O+nnjxqcG c2xdqnY7pT3ftvOiAO9dEuhy5mrX7bqLTVgxj7vILphwv5Gs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTNdSMd03q7ZfGuHSs7DjdyQEabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIwODFjY2QtODEzMC0z YTVjLTgzZDQtYWUzMGMxYWU0YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERD2qpf/0zKZJNgNF6HsNMG4OB/OzykIx18fvqAiBwjaObLOWwvajZh fJT95sE9XJYRRWUfBmc5d60LfajXX3Et8A+h5sKHKBJl9f1D269dh+ycsY8XRNRv 0ilU6PqxyfNUI1Gp3LPVlk91BBaSQCzFol3wFWbbd06noeVZRFjjH4mm/1awVlZz n/mnXlJtkq2ZcCcMVvOZMhHFq6dQntY7dO7r8Ccl/fyCvH5d/6r7e2WKAJpo7l9T Nzp+I6CMZh33vyKJq2f28il7TPMG8q45w/KABgRslkH6IcHbVsw5qdqM60G6eKPa 63IjCAoEvxpeL/p4srpkCzN7d5yFJ8c= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:37 2026 by rpki-client