This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b35e7bfc-a00c-3d27-aea5-b1fa5d9c3594.roa File: b35e7bfc-a00c-3d27-aea5-b1fa5d9c3594.roa (raw, json) Hash identifier: ZeAsIfEx3qK9EVjJEXZyjQlJ/2b+65028l6K20m1Y5w= Subject key identifier: 07:AF:85:56:67:F5:0A:B2:C4:5E:1B:9B:24:29:53:EE:6F:E4:C5:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC1C4EEDAD2DA0DC87EBC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b35e7bfc-a00c-3d27-aea5-b1fa5d9c3594.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.18.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1c:4e:ed:ad:2d:a0:dc:87:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=029b4c89-059d-4d6f-9542-0f19b299d0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:f2:23:d6:a0:74:2c:13:2d:08:95:9e:b9: 9c:95:75:4c:dc:c6:01:b8:8c:eb:25:a8:cf:73:c8: 8c:a7:c0:c9:5f:c2:a5:c2:0d:1d:a3:af:c2:3a:80: 9a:66:22:9b:99:fc:83:3c:46:cd:f5:3d:45:01:c8: bd:19:da:0c:85:be:4d:33:f9:31:37:b0:1f:5c:fc: 04:0f:dc:93:2c:99:44:18:00:d0:89:39:63:50:92: 9f:99:32:ec:42:a6:e5:d7:66:8c:f2:7c:bb:2c:a3: 3c:98:d0:8f:32:b1:5c:46:55:64:c1:30:3b:67:d0: f7:16:f4:de:87:ff:ef:5b:12:a3:16:53:90:eb:2f: 35:8d:e6:2b:ec:79:52:88:fc:a0:16:b3:aa:98:a0: 19:b9:ad:8a:ad:b3:07:29:18:88:b6:e9:03:e7:fb: ef:06:6f:9b:88:11:7c:d4:24:21:ce:8f:c7:9b:22: b1:b7:d8:4b:c8:a2:72:c0:25:4c:b7:b4:cb:4c:72: 92:55:56:81:d2:32:f6:c8:30:16:47:d9:19:b2:2a: 94:f4:f1:b9:ec:10:17:a8:10:a2:0d:90:80:57:bf: b3:20:42:8b:f1:bd:f5:3b:82:68:c1:f0:e0:a9:f0: 8a:a9:a1:de:53:b7:2a:12:19:f6:7f:40:bc:b9:f4: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AF:85:56:67:F5:0A:B2:C4:5E:1B:9B:24:29:53:EE:6F:E4:C5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b35e7bfc-a00c-3d27-aea5-b1fa5d9c3594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:eb:6f:e5:16:b4:76:d4:e2:63:2b:0e:22:f8:64:1d:f7:69: 76:87:d0:ce:91:b2:0b:24:00:b5:3c:d8:85:88:f3:c2:0e:0c: f4:4f:6e:58:99:cb:a6:a5:4f:1a:5a:91:ad:3c:59:30:c0:34: 1b:ca:db:49:58:cc:04:b1:fb:49:84:32:1b:8b:72:0d:5f:5a: 34:fb:5f:b2:f9:3b:e6:38:dc:e1:1a:ce:ef:fe:64:cc:5e:bc: e6:f8:28:67:55:be:23:90:65:42:a3:26:3e:27:5b:17:eb:49: c2:d0:59:ae:36:6c:f7:11:16:f8:95:22:61:de:7f:e7:48:ea: 44:9f:2f:a4:04:82:4d:4a:1c:25:85:84:02:01:d5:27:9c:27: 58:36:55:8d:fe:ef:66:c4:50:2a:aa:9e:96:32:8f:a5:62:4b: 1d:b9:dc:1b:c2:3d:5e:23:a3:08:5a:3c:c8:f8:9f:a0:c4:b0: a2:ee:ee:59:50:35:80:aa:a4:3b:ca:21:71:61:cd:bb:a3:c0: ab:9e:a7:94:35:79:93:6f:fa:0b:79:63:91:32:07:f1:5e:8c: 36:73:82:10:4c:1d:9a:16:30:35:91:89:bd:a1:ca:54:5e:96: cb:85:52:b8:30:4a:d5:71:3b:b2:21:9f:3a:c9:c3:89:56:5c: 64:67:e2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BxO7a0toNyH68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDI5YjRjODktMDU5ZC00ZDZmLTk1NDItMGYxOWIyOTlkMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCbyI9agdCwTLQiVnrmclXVM3MYBuIzrJajP c8iMp8DJX8Klwg0do6/COoCaZiKbmfyDPEbN9T1FAci9GdoMhb5NM/kxN7AfXPwE D9yTLJlEGADQiTljUJKfmTLsQqbl12aM8ny7LKM8mNCPMrFcRlVkwTA7Z9D3FvTe h//vWxKjFlOQ6y81jeYr7HlSiPygFrOqmKAZua2KrbMHKRiItukD5/vvBm+biBF8 1CQhzo/HmyKxt9hLyKJywCVMt7TLTHKSVVaB0jL2yDAWR9kZsiqU9PG57BAXqBCi DZCAV7+zIEKL8b31O4JowfDgqfCKqaHeU7cqEhn2f0C8ufSrjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAevhVZn9QqyxF4bmyQpU+5v5MUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjM1ZTdiZmMtYTAwYy0z ZDI3LWFlYTUtYjFmYTVkOWMzNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzrb+UWtHbU4mMrDiL4ZB33aXaH0M6RsgskALU82IWI88IODPRPbliZ y6alTxpaka08WTDANBvK20lYzASx+0mEMhuLcg1fWjT7X7L5O+Y43OEazu/+ZMxe vOb4KGdVviOQZUKjJj4nWxfrScLQWa42bPcRFviVImHef+dI6kSfL6QEgk1KHCWF hAIB1SecJ1g2VY3+72bEUCqqnpYyj6ViSx253BvCPV4jowhaPMj4n6DEsKLu7llQ NYCqpDvKIXFhzbujwKuep5Q1eZNv+gt5Y5EyB/FejDZzghBMHZoWMDWRib2hylRe lsuFUrgwStVxO7IhnzrJw4lWXGRn4oE= -----END CERTIFICATE-----Generated at Sun Jan 11 15:43:27 2026 by rpki-client