This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5031455-119c-3fa5-a9a6-aa7cefcb05bd.roa File: c5031455-119c-3fa5-a9a6-aa7cefcb05bd.roa (raw, json) Hash identifier: VMmoTdYLlbAugEJyWT37rOonJqS20tOnHVPdi47s1Nc= Subject key identifier: B9:E0:12:6F:9A:F2:01:12:7B:8A:F9:41:F4:B2:90:11:92:0D:C6:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C470BAB6636A64187BE9F1700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5031455-119c-3fa5-a9a6-aa7cefcb05bd.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.29.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:ab:66:36:a6:41:87:be:9f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=1719ef01-229d-41b6-9330-a243ffa584ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:e6:72:5c:46:c6:ba:fc:61:9e:bc:47:2e: 0f:1a:75:fd:d7:fe:92:66:8f:bc:92:13:d0:af:f7: e8:3f:f7:7f:83:d5:e7:7b:85:2b:3d:8c:5a:32:cd: 2d:73:6d:7f:65:89:6d:d8:84:91:0e:b6:10:d6:9c: b3:4d:93:85:40:1c:97:10:66:16:1a:5d:08:0a:5b: 0e:78:65:4a:24:20:1d:17:12:f3:a0:51:28:c8:3e: bc:da:6b:0e:d0:0f:27:39:9f:11:3b:70:bd:98:55: fb:78:6d:ae:09:d7:72:ae:95:c4:a1:b3:6d:6c:62: 47:b9:f8:26:2a:85:7c:66:d0:dd:0b:68:fc:d3:ec: 98:43:8b:d4:23:b7:1d:a3:c7:08:73:a6:22:45:5c: cb:57:b3:dd:85:aa:e0:13:96:0b:27:35:ed:13:41: 7c:b7:b6:b1:15:1b:f5:14:99:24:53:a8:ab:51:2b: c1:06:2e:21:ea:ba:3b:80:5d:6f:aa:3f:a9:b5:60: 33:71:9f:c0:d0:f2:66:6e:1c:79:04:3f:f9:3b:11: 8b:89:a0:c3:08:69:d9:d4:93:57:7f:a9:39:65:ab: 3d:8c:43:83:d3:14:77:e4:20:c8:f4:f8:ef:96:83: 96:9e:2d:88:79:93:2d:77:83:19:ad:cb:c0:fc:92: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E0:12:6F:9A:F2:01:12:7B:8A:F9:41:F4:B2:90:11:92:0D:C6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5031455-119c-3fa5-a9a6-aa7cefcb05bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:46:d0:80:70:42:5e:bb:0f:39:e0:96:2b:67:9c:12:de:1c: 6b:d9:71:46:1a:ee:79:ee:b4:07:27:b9:fd:65:ad:e9:a6:cc: 5c:bf:22:76:a7:2b:81:e2:45:f1:60:e1:3d:59:79:04:8c:a3: 70:c1:59:9b:8b:96:d6:88:5f:09:32:a4:a1:07:45:e5:8f:37: 19:3c:0a:99:2c:88:85:2d:b9:f5:5d:42:0c:cb:0b:a0:01:d1: bc:ff:26:16:8f:a7:e4:05:1e:64:95:0f:91:a3:74:3c:10:da: f5:30:0e:bb:6d:2c:c9:6f:13:21:fe:a5:95:86:a1:0a:16:85: f9:7a:39:7d:12:dd:50:0e:fa:f4:53:b3:38:df:4a:f0:22:b8: dd:bb:bf:b1:03:63:5d:d3:a4:37:b3:54:4e:f7:26:bd:9c:f0: 47:56:af:64:b1:f0:db:10:d7:42:3b:9e:3b:5f:fa:c1:73:80: 8a:ab:51:b3:52:57:65:9f:1f:2e:da:70:b5:ea:63:4d:3e:46: 7d:1c:d6:fc:5c:b4:71:5a:d5:f1:3b:cc:bc:b7:1a:37:70:d2: e5:96:3f:d8:14:80:e1:b4:3b:36:ea:29:68:97:f3:2c:d7:84: f0:4e:c9:7e:44:2e:ae:0b:fe:59:b3:91:42:b7:48:87:39:81: 93:3d:ec:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC6tmNqZBh76fFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk MTcxOWVmMDEtMjI5ZC00MWI2LTkzMzAtYTI0M2ZmYTU4NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZLmclxGxrr8YZ68Ry4PGnX91/6SZo+8khPQ r/foP/d/g9Xne4UrPYxaMs0tc21/ZYlt2ISRDrYQ1pyzTZOFQByXEGYWGl0IClsO eGVKJCAdFxLzoFEoyD682msO0A8nOZ8RO3C9mFX7eG2uCddyrpXEobNtbGJHufgm KoV8ZtDdC2j80+yYQ4vUI7cdo8cIc6YiRVzLV7PdhargE5YLJzXtE0F8t7axFRv1 FJkkU6irUSvBBi4h6ro7gF1vqj+ptWAzcZ/A0PJmbhx5BD/5OxGLiaDDCGnZ1JNX f6k5Zas9jEOD0xR35CDI9PjvloOWni2IeZMtd4MZrcvA/JIGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLngEm+a8gESe4r5QfSykBGSDcZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzUwMzE0NTUtMTE5Yy0z ZmE1LWE5YTYtYWE3Y2VmY2IwNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNG0IBwQl67DznglitnnBLeHGvZcUYa7nnutAcnuf1lremmzFy/Inan K4HiRfFg4T1ZeQSMo3DBWZuLltaIXwkypKEHReWPNxk8CpksiIUtufVdQgzLC6AB 0bz/JhaPp+QFHmSVD5GjdDwQ2vUwDrttLMlvEyH+pZWGoQoWhfl6OX0S3VAO+vRT szjfSvAiuN27v7EDY13TpDezVE73Jr2c8EdWr2Sx8NsQ10I7njtf+sFzgIqrUbNS V2WfHy7acLXqY00+Rn0c1vxctHFa1fE7zLy3Gjdw0uWWP9gUgOG0OzbqKWiX8yzX hPBOyX5ELq4L/lmzkUK3SIc5gZM97Bc= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:30 2026 by rpki-client