This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json) Hash identifier: OtpfGkLxHp/bmlQbyJtjaMtGwrNqG1sTJgiTlEamheM= Subject key identifier: 6C:C9:18:30:41:55:F3:2B:B2:54:A8:18:9C:3D:DB:2F:72:EA:BD:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871D9BE725D4689698A4400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.16.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:d9:be:72:5d:46:89:69:8a:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=1925dcc0-b408-4fbf-824e-d69f71bc9164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:5b:31:5a:f2:85:8d:09:71:ae:22:46:cd: 9f:4c:28:f1:e7:fa:b4:53:10:49:d0:8d:18:53:8c: 40:6e:51:90:76:75:31:aa:af:27:dd:bd:41:63:f7: 54:17:8a:11:15:f0:55:7d:e1:1b:ba:16:0d:42:37: 81:83:cd:82:1d:ca:90:38:0d:2c:cf:f9:34:47:bf: 8d:e8:a3:44:68:d4:f1:8d:18:75:12:32:69:33:5d: f0:e9:c6:69:14:c4:02:cc:21:27:0e:29:9c:f5:74: 51:f4:2a:21:4d:a0:19:12:de:7e:4f:d8:b1:68:2f: b1:1f:40:00:74:cc:97:ce:ba:de:09:fb:70:1f:de: fe:7c:8d:a2:23:19:03:62:db:21:13:83:ac:44:6d: 15:68:e2:cc:36:7c:02:53:0a:3a:aa:dd:8f:f3:02: 6f:dd:0e:cb:7e:74:97:bd:8f:84:23:63:77:79:ed: ed:12:e2:51:c4:2b:ff:a4:be:ca:c2:9c:c3:b5:d0: 46:c8:c4:1d:75:2d:bc:d2:9a:86:e6:50:8d:81:22: 8b:f4:32:4d:86:39:a7:8b:19:2d:bd:b3:4a:33:32: 8c:95:ea:60:09:96:0a:a0:fb:3b:82:b5:b0:6d:ba: b1:72:e1:e2:ff:81:88:89:73:12:b4:ca:78:5e:08: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:18:30:41:55:F3:2B:B2:54:A8:18:9C:3D:DB:2F:72:EA:BD:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5f:73:06:dc:0b:8f:77:3d:3e:60:55:c2:e6:4b:e3:d8:d6: c0:e2:f9:0b:24:34:9e:17:d9:7e:95:34:36:cb:04:15:86:e7: 12:3e:c6:49:a8:3b:32:79:f7:da:45:10:6b:05:d4:a6:c8:9a: 61:7f:f4:6e:b5:58:97:f6:e0:2a:bd:55:3d:97:91:09:62:c9: 23:a2:cb:e5:f0:dc:57:85:d8:5d:32:8c:a5:d5:34:49:91:3c: f5:a3:b7:a0:5f:5d:7d:32:38:58:38:4f:77:18:4b:c1:6b:76: 3c:64:66:4e:17:15:6d:94:df:48:df:a8:7d:c9:19:cc:e4:25: fb:6f:c4:68:ea:99:a0:39:3e:0a:c6:c4:39:ba:6e:75:90:52: 5f:57:6a:a6:ee:1b:49:1c:c8:01:cb:a1:55:25:de:7f:58:24: 2b:60:45:35:10:87:c4:34:67:4d:24:6b:92:b6:57:0e:76:4d: a5:45:f2:b2:91:f0:cd:6d:ff:03:82:0f:78:60:70:65:9a:94: c5:bd:4a:ac:63:26:db:9e:24:6f:fd:b7:18:2f:01:bd:f1:c9: 7a:1c:44:5c:85:fe:2d:a2:e5:00:57:ec:18:65:17:32:66:b2: cb:0a:0a:67:97:8f:c5:4f:49:c1:c7:7b:ba:e4:58:d7:88:98: b5:b4:ef:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcdm+cl1GiWmKRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MTkyNWRjYzAtYjQwOC00ZmJmLTgyNGUtZDY5ZjcxYmM5MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy9bMVryhY0Jca4iRs2fTCjx5/q0UxBJ0I0Y U4xAblGQdnUxqq8n3b1BY/dUF4oRFfBVfeEbuhYNQjeBg82CHcqQOA0sz/k0R7+N 6KNEaNTxjRh1EjJpM13w6cZpFMQCzCEnDimc9XRR9CohTaAZEt5+T9ixaC+xH0AA dMyXzrreCftwH97+fI2iIxkDYtshE4OsRG0VaOLMNnwCUwo6qt2P8wJv3Q7LfnSX vY+EI2N3ee3tEuJRxCv/pL7KwpzDtdBGyMQddS280pqG5lCNgSKL9DJNhjmnixkt vbNKMzKMlepgCZYKoPs7grWwbbqxcuHi/4GIiXMStMp4Xgg81wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzJGDBBVfMrslSoGJw92y9y6r1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1YWU2ZDctZTZmOC0z NDdjLTkwOTQtN2M1MDAxMjJlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBfcwbcC493PT5gVcLmS+PY1sDi+QskNJ4X2X6VNDbLBBWG5xI+xkmo OzJ599pFEGsF1KbImmF/9G61WJf24Cq9VT2XkQliySOiy+Xw3FeF2F0yjKXVNEmR PPWjt6BfXX0yOFg4T3cYS8FrdjxkZk4XFW2U30jfqH3JGczkJftvxGjqmaA5PgrG xDm6bnWQUl9XaqbuG0kcyAHLoVUl3n9YJCtgRTUQh8Q0Z00ka5K2Vw52TaVF8rKR 8M1t/wOCD3hgcGWalMW9SqxjJtueJG/9txgvAb3xyXocRFyF/i2i5QBX7BhlFzJm sssKCmeXj8VPScHHe7rkWNeImLW076k= -----END CERTIFICATE-----Generated at Sun Jan 11 17:06:13 2026 by rpki-client