This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa File: a6229991-1291-3d4f-94d1-83e8c2cea121.roa (raw, json) Hash identifier: y82lMKGn6eYl+/q6sdLEKjbikJeH6/BeW2dHRNUDaf0= Subject key identifier: 3B:93:B2:D9:BE:D1:71:BE:FC:E3:23:23:09:CD:D5:E3:54:A8:F8:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BF34B249D062D39AD9AA978D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:24:9d:06:2d:39:ad:9a:a9:78:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=5b7ccb7d-9263-409c-8af7-829b2058e8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:d4:63:0f:62:7a:23:74:97:81:77:2f:97: f4:e9:ee:a7:0a:fb:ad:8e:fd:24:75:4f:f2:16:08: 10:50:77:9e:46:8b:8f:db:26:54:be:00:33:14:ff: cb:2c:89:8b:18:3e:be:a6:ab:1c:cf:08:ea:5d:37: ee:ac:73:30:39:4f:31:97:17:01:0c:0b:ca:56:f4: 75:28:b0:cf:43:3c:eb:3c:c9:c3:36:1d:e1:33:4f: d6:a9:77:96:88:5f:c9:9b:98:51:51:fe:d7:69:b2: 17:fa:20:f1:01:45:cb:97:18:4c:b2:1e:e4:80:25: 1e:36:32:b9:5d:73:b1:a1:95:3d:6a:cf:c3:78:bc: cc:eb:d5:37:ab:3b:9e:b7:57:38:d9:0f:fc:a6:1a: 80:a2:ba:74:9a:56:18:5b:27:ec:df:4e:2d:40:93: 48:b9:b4:bc:3b:6d:ce:e1:63:8a:fe:77:05:d8:58: f7:b3:e8:e2:6b:30:8a:35:a1:31:67:1f:f8:4a:57: ef:59:fe:60:dc:ea:ac:35:18:c8:d7:5a:00:c3:9f: eb:71:5f:49:b2:16:87:6c:d6:86:01:2d:6c:2b:e9: be:12:c3:78:c8:12:dd:6f:8c:1b:67:d8:df:31:ab: 3b:ca:c0:d5:90:cb:33:dd:08:c3:52:5a:04:0f:58: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:93:B2:D9:BE:D1:71:BE:FC:E3:23:23:09:CD:D5:E3:54:A8:F8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f4:84:c4:ad:79:4e:ff:ac:0c:f2:63:8c:d2:79:23:63:8f: 78:26:4c:b1:3f:5d:d8:89:34:54:58:2c:3e:f1:32:36:1d:99: 10:02:0d:c6:2a:e9:83:be:0f:a2:bc:28:03:17:f4:69:b3:07: 19:1d:0d:20:de:8b:90:0c:b5:7b:4d:a8:bc:48:a8:ab:02:2f: e1:5a:36:f2:1b:ae:df:06:5c:78:87:bc:ba:9f:62:a2:c9:a4: 4b:00:db:42:33:b3:df:34:af:81:e0:0e:e3:cb:47:25:c4:20: 3c:e8:7d:af:7f:f9:db:23:5f:c8:e1:a0:a0:57:17:28:da:eb: 46:81:4a:2f:c7:92:7d:ee:90:51:5e:16:21:c3:15:17:1f:91: 91:c2:ab:3d:21:8b:3e:8c:ea:68:d1:47:59:46:84:d9:59:76: bf:35:e7:3e:cc:6c:9c:3d:da:16:cd:c2:fa:fe:51:39:25:1a: 93:75:cd:5a:89:1e:ca:95:77:ae:22:92:2d:bf:18:47:a3:d2: 1d:84:9f:5c:33:de:a9:05:a2:20:ae:d8:8a:c3:c5:ff:98:bb: f3:18:25:d4:01:c3:c5:7e:5b:d8:b2:86:b5:3e:8c:26:c4:cc: 9a:3b:d8:7e:f8:36:42:b7:fe:22:9b:9a:00:61:b3:76:a8:54: b7:64:39:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSySdBi05rZqpeNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk NWI3Y2NiN2QtOTI2My00MDljLThhZjctODI5YjIwNThlOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFrUYw9ieiN0l4F3L5f06e6nCvutjv0kdU/y FggQUHeeRouP2yZUvgAzFP/LLImLGD6+pqsczwjqXTfurHMwOU8xlxcBDAvKVvR1 KLDPQzzrPMnDNh3hM0/WqXeWiF/Jm5hRUf7XabIX+iDxAUXLlxhMsh7kgCUeNjK5 XXOxoZU9as/DeLzM69U3qzuet1c42Q/8phqAorp0mlYYWyfs304tQJNIubS8O23O 4WOK/ncF2Fj3s+jiazCKNaExZx/4SlfvWf5g3OqsNRjI11oAw5/rcV9JshaHbNaG AS1sK+m+EsN4yBLdb4wbZ9jfMas7ysDVkMsz3QjDUloED1gecwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuTstm+0XG+/OMjIwnN1eNUqPhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYyMjk5OTEtMTI5MS0z ZDRmLTk0ZDEtODNlOGMyY2VhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn0hMSteU7/rAzyY4zSeSNjj3gmTLE/XdiJNFRYLD7xMjYdmRACDcYq 6YO+D6K8KAMX9GmzBxkdDSDei5AMtXtNqLxIqKsCL+FaNvIbrt8GXHiHvLqfYqLJ pEsA20Izs980r4HgDuPLRyXEIDzofa9/+dsjX8jhoKBXFyja60aBSi/Hkn3ukFFe FiHDFRcfkZHCqz0hiz6M6mjRR1lGhNlZdr815z7MbJw92hbNwvr+UTklGpN1zVqJ HsqVd64iki2/GEej0h2En1wz3qkFoiCu2IrDxf+Yu/MYJdQBw8V+W9iyhrU+jCbE zJo72H74NkK3/iKbmgBhs3aoVLdkOb0= -----END CERTIFICATE-----Generated at Tue Nov 25 10:33:42 2025 by rpki-client