This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa File: a71b911c-6645-3ed7-91de-4999d41633e7.roa (raw, json) Hash identifier: 7XZdm0BsATXQZY28IJLkJvsXEx+CbaURude2fWOAW2c= Subject key identifier: B8:24:D6:B3:BF:A1:69:FD:AF:04:B2:7E:4D:5F:75:7B:CE:0E:D5:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8350229DE4E1226423600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:35:02:29:de:4e:12:26:42:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=d4eca881-ecdf-49bf-94ea-bb21f3f835f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:32:4b:58:03:c5:83:e7:0c:63:03:1f:f6: a4:c0:08:df:8f:42:f3:e4:dd:79:2e:5c:de:c7:9b: e6:1d:22:2e:f6:db:5d:d3:99:9b:9d:23:9f:85:9b: 36:47:b5:13:aa:84:ec:02:ad:26:6b:a2:83:dc:9d: 81:2e:19:25:1c:17:2c:f3:d4:0c:2f:5b:72:b7:fc: f5:95:8e:49:ad:77:69:89:4d:44:ce:7e:6e:62:31: f5:f7:c8:59:ea:a7:c9:e4:c8:d2:1a:5d:90:3a:22: 48:c6:a1:a0:b6:7e:ed:74:6e:5d:db:89:9c:b5:b0: 33:4e:c7:5d:d2:91:c4:a0:f1:8a:3e:4d:e0:68:00: a7:41:8c:87:9a:bd:11:7d:94:25:9d:b2:c0:68:a7: ca:52:f7:b4:b6:5e:58:24:d2:c3:61:8a:5c:da:1a: cf:59:97:52:2f:10:7f:e8:eb:ee:b1:64:46:3f:15: f8:b2:7c:ef:ee:f0:3d:cc:b6:d6:38:9e:70:52:5b: d1:ad:5e:54:e6:18:8c:18:f9:59:f5:80:fc:81:9d: 33:40:c2:ec:4a:e2:b4:b3:b8:4c:4b:92:5a:52:28: b6:97:ae:a9:5b:e3:3c:6b:d8:d3:17:85:a1:70:72: 9b:b2:ae:c0:b9:14:c3:37:bd:dd:e6:12:b0:e7:b6: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:D6:B3:BF:A1:69:FD:AF:04:B2:7E:4D:5F:75:7B:CE:0E:D5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:59:7d:71:fd:38:33:b9:2d:1e:e2:44:f5:37:48:a9:77:7e: 40:91:00:74:31:ee:0a:21:d3:d6:d9:44:ac:87:19:3a:9b:f2: 89:d9:1c:07:7e:9d:e3:bb:fd:ef:03:53:c8:62:31:1b:2e:44: 7e:76:aa:c4:4c:d6:14:a8:4f:23:06:84:83:af:1e:a0:f3:9a: e4:1e:33:dc:d7:18:dd:ce:2e:7d:8c:2c:11:cd:9b:16:d8:be: 0e:d3:53:be:93:b5:55:d2:44:96:5c:4b:9b:41:81:ec:72:3a: 2d:52:e6:38:7e:f4:43:d4:80:39:6a:e8:9d:23:a2:1a:01:a4: 78:ca:9b:31:6f:b2:21:23:b4:98:50:05:a2:14:b7:6e:a1:e4: 92:d6:c7:01:10:44:82:45:e8:fb:c9:81:8e:09:ca:40:80:79: fd:12:67:c4:e2:ae:02:ff:94:67:f2:df:79:0e:6d:62:d8:06: a0:ac:bd:1f:b7:7a:11:23:58:8c:cd:58:0c:91:d6:64:a4:28: 13:63:f8:f7:07:59:59:07:6d:44:d0:14:18:b5:ec:47:9e:27: ea:cc:d4:1a:9b:b0:1b:b5:7d:08:4b:8a:35:3a:76:f7:94:28: d8:15:f0:df:2b:21:dc:85:55:04:c5:f0:1e:31:4b:14:a6:c4: 9c:23:7d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqDUCKd5OEiZCNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDRlY2E4ODEtZWNkZi00OWJmLTk0ZWEtYmIyMWYzZjgzNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvgyS1gDxYPnDGMDH/akwAjfj0Lz5N15Llze x5vmHSIu9ttd05mbnSOfhZs2R7UTqoTsAq0ma6KD3J2BLhklHBcs89QML1tyt/z1 lY5JrXdpiU1Ezn5uYjH198hZ6qfJ5MjSGl2QOiJIxqGgtn7tdG5d24mctbAzTsdd 0pHEoPGKPk3gaACnQYyHmr0RfZQlnbLAaKfKUve0tl5YJNLDYYpc2hrPWZdSLxB/ 6OvusWRGPxX4snzv7vA9zLbWOJ5wUlvRrV5U5hiMGPlZ9YD8gZ0zQMLsSuK0s7hM S5JaUii2l66pW+M8a9jTF4WhcHKbsq7AuRTDN73d5hKw57aS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgk1rO/oWn9rwSyfk1fdXvODtVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTcxYjkxMWMtNjY0NS0z ZWQ3LTkxZGUtNDk5OWQ0MTYzM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxZfXH9ODO5LR7iRPU3SKl3fkCRAHQx7goh09bZRKyHGTqb8onZHAd+ neO7/e8DU8hiMRsuRH52qsRM1hSoTyMGhIOvHqDzmuQeM9zXGN3OLn2MLBHNmxbY vg7TU76TtVXSRJZcS5tBgexyOi1S5jh+9EPUgDlq6J0johoBpHjKmzFvsiEjtJhQ BaIUt26h5JLWxwEQRIJF6PvJgY4JykCAef0SZ8TirgL/lGfy33kObWLYBqCsvR+3 ehEjWIzNWAyR1mSkKBNj+PcHWVkHbUTQFBi17EeeJ+rM1BqbsBu1fQhLijU6dveU KNgV8N8rIdyFVQTF8B4xSxSmxJwjff4= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:32 2026 by rpki-client