This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa File: ca678994-138f-3640-a31c-0c61ce87c7a5.roa (raw, json) Hash identifier: wDx9/TiQhV3+W7aO3/SrRh95RRActHsOc4FRsIHgHMY= Subject key identifier: 67:C2:B8:74:A2:0E:EF:3D:B9:9D:E5:86:6E:03:2A:11:A4:71:BC:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C48712DF24C5956D807326E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:2d:f2:4c:59:56:d8:07:32:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=200b68d2-3861-4a1a-8892-cd98c1c9043a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:ea:8a:28:e5:e3:08:be:46:f8:ab:a0:82: 2e:9d:b8:47:66:fa:4d:b3:cc:50:98:60:02:69:61: 4b:bf:01:27:15:7d:47:64:6e:d9:fa:50:0c:ea:86: 77:fa:dd:d1:24:3e:81:70:56:61:58:35:f8:18:aa: 30:7f:26:b5:9b:87:b5:f3:4f:66:08:7d:f9:db:2b: ac:58:07:46:87:28:3a:0e:8e:98:19:b5:f7:65:b3: f0:91:9c:bd:30:7a:7d:8e:43:90:00:fd:0b:29:85: a3:53:40:2a:14:a1:ee:01:82:f3:a6:4d:f9:b7:49: f5:29:49:9d:3a:a3:2a:05:ab:ba:06:23:d2:9d:46: 79:cc:ee:0c:67:32:13:de:83:b6:3f:e6:20:4e:55: 4f:78:a9:bb:e3:80:fe:7d:d2:b6:bc:00:ac:f8:5d: 22:ea:64:2b:f4:b9:00:4a:7c:1e:d6:15:ea:96:1b: 7b:97:3f:83:6f:4e:96:dc:59:49:ec:89:f5:d6:9a: b0:83:58:48:ab:de:44:78:f0:78:50:1d:e8:b7:3a: 55:b2:cf:a3:82:8c:fa:bd:e0:8e:a2:ba:fd:29:98: 75:51:21:83:a9:16:b3:91:af:12:6a:72:10:ca:41: 07:b7:f5:52:c2:17:6e:3b:6f:a2:d8:5e:34:7d:cf: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C2:B8:74:A2:0E:EF:3D:B9:9D:E5:86:6E:03:2A:11:A4:71:BC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d5:bf:4a:39:23:43:a6:db:b6:cb:29:d7:32:f0:be:8c:bf: 5e:d0:5f:a9:55:5f:94:6e:0a:20:63:ba:04:b7:4f:06:b5:f7: 6c:d6:3e:1e:74:7a:ac:16:90:7c:98:a0:52:93:a7:28:d8:bb: 28:b8:23:52:1b:34:02:6f:a1:19:47:01:59:5d:86:9e:c8:6b: 8b:a3:2c:4e:74:cf:45:22:95:2c:8d:ad:bc:d6:6e:73:be:f2: 25:d2:3f:71:15:7f:5b:b7:35:53:61:35:88:2f:13:ce:45:56: e7:03:59:ac:00:98:95:dc:97:c8:3e:4f:78:7e:46:22:d8:ee: 5d:d5:b9:ef:15:b3:13:61:90:0c:6d:4c:e5:b4:fa:29:b2:8b: 3d:07:cf:1f:4e:52:b0:d1:0d:d9:0a:69:a7:67:9e:dc:02:f7: 66:01:c2:21:0e:b1:ab:c4:27:aa:bf:a6:da:f7:fb:cf:82:78: fb:a2:e7:45:00:db:1f:88:f2:f6:ec:f4:e5:20:79:74:07:56: 3b:42:cb:f7:41:f7:ba:9c:21:ac:b2:88:6c:d1:82:f9:65:05: 62:fe:97:6a:b8:87:06:dc:b5:e4:cf:53:f7:f9:bf:bc:a2:ab: cd:a1:b9:29:61:71:82:a5:1a:96:3b:ca:91:1a:dd:86:29:26: d6:e5:8e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcS3yTFlW2AcyboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MjAwYjY4ZDItMzg2MS00YTFhLTg4OTItY2Q5OGMxYzkwNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZnqiijl4wi+RviroIIunbhHZvpNs8xQmGAC aWFLvwEnFX1HZG7Z+lAM6oZ3+t3RJD6BcFZhWDX4GKowfya1m4e1809mCH352yus WAdGhyg6Do6YGbX3ZbPwkZy9MHp9jkOQAP0LKYWjU0AqFKHuAYLzpk35t0n1KUmd OqMqBau6BiPSnUZ5zO4MZzIT3oO2P+YgTlVPeKm744D+fdK2vACs+F0i6mQr9LkA Snwe1hXqlht7lz+Db06W3FlJ7In11pqwg1hIq95EePB4UB3otzpVss+jgoz6veCO orr9KZh1USGDqRazka8SanIQykEHt/VSwhduO2+i2F40fc9bCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfCuHSiDu89uZ3lhm4DKhGkcbyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E2Nzg5OTQtMTM4Zi0z NjQwLWEzMWMtMGM2MWNlODdjN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7Vv0o5I0Om27bLKdcy8L6Mv17QX6lVX5RuCiBjugS3Twa192zWPh50 eqwWkHyYoFKTpyjYuyi4I1IbNAJvoRlHAVldhp7Ia4ujLE50z0UilSyNrbzWbnO+ 8iXSP3EVf1u3NVNhNYgvE85FVucDWawAmJXcl8g+T3h+RiLY7l3Vue8VsxNhkAxt TOW0+imyiz0Hzx9OUrDRDdkKaadnntwC92YBwiEOsavEJ6q/ptr3+8+CePui50UA 2x+I8vbs9OUgeXQHVjtCy/dB97qcIayyiGzRgvllBWL+l2q4hwbcteTPU/f5v7yi q82huSlhcYKlGpY7ypEa3YYpJtbljjE= -----END CERTIFICATE-----Generated at Sun Jan 11 17:08:07 2026 by rpki-client