This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa File: a975a81c-bc25-3450-a356-fd9d9f94312c.roa (raw, json) Hash identifier: 6+SZ8BLkuostFgG3RG2PQdEttAFZp4lFXq+1gbB8Eq8= Subject key identifier: A4:75:C0:A2:2E:D1:5E:01:99:3A:F9:86:68:26:62:DD:98:86:91:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5A967EB8A95D5F9DDDF9EA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.21.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:7e:b8:a9:5d:5f:9d:dd:f9:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=3bfdd17a-97e8-4b3e-aeba-7113f00fd726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:99:21:cf:2d:64:b5:3a:48:ee:8d:6c:6c: 62:f1:4d:18:5a:2f:0e:f6:7c:08:f4:c9:51:01:dc: d7:83:b9:e4:3e:b2:fb:d5:6f:40:b7:85:01:35:c4: 86:2c:cc:dd:e8:2b:6a:06:44:32:f8:95:71:f1:d9: 5e:39:ca:67:20:6f:7e:24:77:58:e1:34:bc:e5:64: ab:69:52:62:9d:ae:14:df:10:5d:44:f4:92:70:08: c7:bf:d1:ca:03:8d:da:30:25:a1:19:0e:c6:e4:e0: 6d:84:cc:73:c6:8a:2a:07:13:4e:bd:a2:be:6e:8f: 9e:c8:ef:13:25:bd:5c:d8:91:82:e7:ff:cb:23:e6: 31:e8:17:83:f8:c4:ba:29:dc:7c:8b:9a:b5:68:33: 88:7b:e5:19:88:a6:ea:0c:0f:ff:ec:ad:13:e3:39: 1a:d1:db:73:06:fe:46:08:be:6a:46:5e:04:4c:73: 0b:50:05:9c:e0:96:72:91:c6:58:fe:f1:f1:cc:fb: ee:d1:3e:9b:27:10:13:8d:92:68:5c:02:3f:3b:f3: 30:8b:a9:84:a9:fe:bd:69:38:7e:90:43:41:09:91: b5:5c:2e:d3:11:44:fe:23:44:6e:f1:47:89:ba:f1: 4d:94:df:38:8a:f9:0d:fa:b1:92:66:1a:47:f0:94: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:C0:A2:2E:D1:5E:01:99:3A:F9:86:68:26:62:DD:98:86:91:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7f:59:ba:d7:66:47:8c:a4:ca:f5:51:37:76:c8:de:30:60: f1:0c:71:07:a4:ae:24:7f:38:b7:53:41:93:ba:a5:df:7d:ed: 59:50:1d:f0:cb:b7:55:27:a9:40:30:9e:50:0f:9d:6f:06:64: 74:18:89:6a:63:09:b8:8b:48:2d:18:11:40:d2:dd:b8:f5:e6: 07:64:5a:27:1b:79:bf:60:2a:95:7b:dc:dd:a2:fe:ea:6d:d1: 2a:56:c1:88:fa:9f:a0:aa:3d:89:d9:6d:69:18:4a:3f:44:3c: 6a:43:f6:5e:d7:ac:f7:6f:8a:b3:cc:af:eb:19:a7:a1:28:ff: 47:06:ca:83:d5:ed:e7:6d:e7:21:97:45:33:d5:e6:d5:76:19: 0a:30:60:21:83:ce:19:a1:0e:35:45:4a:07:4f:f8:a0:b1:62: 78:66:ac:83:a6:12:5f:12:d2:e7:f6:4f:07:3a:b8:13:c4:77: c0:ef:7e:08:50:f2:ae:51:81:cf:60:37:8b:18:62:84:47:ec: 31:ce:d8:10:73:c9:14:1d:f9:7e:42:e3:3f:ad:31:bc:3b:10: 09:79:99:64:d6:c2:06:07:15:88:5b:26:aa:b3:9f:3a:5a:78: 7a:21:fa:98:61:96:21:c8:14:83:90:2c:47:2f:5f:45:32:ef: f0:15:48:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExaln64qV1fnd356gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk M2JmZGQxN2EtOTdlOC00YjNlLWFlYmEtNzExM2YwMGZkNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+CZIc8tZLU6SO6NbGxi8U0YWi8O9nwI9MlR AdzXg7nkPrL71W9At4UBNcSGLMzd6CtqBkQy+JVx8dleOcpnIG9+JHdY4TS85WSr aVJina4U3xBdRPSScAjHv9HKA43aMCWhGQ7G5OBthMxzxooqBxNOvaK+bo+eyO8T Jb1c2JGC5//LI+Yx6BeD+MS6Kdx8i5q1aDOIe+UZiKbqDA//7K0T4zka0dtzBv5G CL5qRl4ETHMLUAWc4JZykcZY/vHxzPvu0T6bJxATjZJoXAI/O/Mwi6mEqf69aTh+ kENBCZG1XC7TEUT+I0Ru8UeJuvFNlN84ivkN+rGSZhpH8JS0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR1wKIu0V4BmTr5hmgmYt2YhpEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTk3NWE4MWMtYmMyNS0z NDUwLWEzNTYtZmQ5ZDlmOTQzMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1/WbrXZkeMpMr1UTd2yN4wYPEMcQekriR/OLdTQZO6pd997VlQHfDL t1UnqUAwnlAPnW8GZHQYiWpjCbiLSC0YEUDS3bj15gdkWicbeb9gKpV73N2i/upt 0SpWwYj6n6CqPYnZbWkYSj9EPGpD9l7XrPdvirPMr+sZp6Eo/0cGyoPV7edt5yGX RTPV5tV2GQowYCGDzhmhDjVFSgdP+KCxYnhmrIOmEl8S0uf2Twc6uBPEd8DvfghQ 8q5Rgc9gN4sYYoRH7DHO2BBzyRQd+X5C4z+tMbw7EAl5mWTWwgYHFYhbJqqznzpa eHoh+phhliHIFIOQLEcvX0Uy7/AVSFw= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:32 2026 by rpki-client