This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc59cc0-7e38-399a-82bd-c11f0353ac8c.roa File: cdc59cc0-7e38-399a-82bd-c11f0353ac8c.roa (raw, json) Hash identifier: ETAYJVaIgOiZAG75BQJYqHfViJJFGrAwxEApwdXO3fg= Subject key identifier: 59:16:3C:78:E3:C8:99:FA:7A:12:BE:B9:0A:8D:31:D0:7C:87:08:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C48712A81663FE6B32452F280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc59cc0-7e38-399a-82bd-c11f0353ac8c.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.17.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:2a:81:66:3f:e6:b3:24:52:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=cbbb2e00-9e7c-4ee8-b654-240f47aeba23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:ab:7b:72:7d:5c:ea:a8:97:55:06:e8:95: 3e:d2:ba:0b:c0:c9:eb:a4:ea:80:65:aa:e5:01:c3: a9:c2:44:8a:82:67:03:be:f8:1a:89:f9:2b:13:bd: 2a:c7:25:9e:ef:32:d8:b8:1b:eb:9d:b8:0b:99:fb: 18:1f:32:b3:47:ba:be:3e:e5:c2:91:8f:c0:a5:b8: c3:0f:42:ff:67:09:9f:93:84:1c:7c:1f:58:85:90: 94:ed:33:c1:84:82:86:30:9b:52:08:dc:88:4b:61: 14:b2:00:e8:65:e5:ba:ad:a8:52:45:b0:bb:b9:8e: 40:9b:f5:19:7a:ce:1d:c8:bc:5e:d6:f0:c4:44:e0: dc:e3:19:7d:b4:79:fe:e8:7d:04:fc:c7:c0:83:0d: 9f:4f:90:71:ff:f3:7b:c0:be:d6:5f:a2:4d:55:c9: 74:61:ca:8f:8a:54:c4:3a:bb:21:bc:73:11:e8:82: 7a:8a:47:da:9b:04:c4:40:0f:9d:41:9f:d9:48:03: f6:24:43:0f:c3:a8:5e:c9:7e:25:75:6f:ca:41:fb: 6d:76:c3:04:a5:9c:32:cb:e5:7a:ee:4c:8f:33:f2: 27:1a:45:83:75:03:aa:4c:01:24:fd:82:c5:19:3b: df:c3:fd:f5:56:2a:1a:cc:d9:ad:7a:71:08:dd:24: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:16:3C:78:E3:C8:99:FA:7A:12:BE:B9:0A:8D:31:D0:7C:87:08:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc59cc0-7e38-399a-82bd-c11f0353ac8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:37:bd:4a:63:52:29:d4:38:55:fd:f1:e7:64:0c:35:95:5c: 5d:86:3e:6b:09:bc:3c:40:c7:6f:cf:76:e5:a1:95:5e:9d:ea: 6b:8e:f5:52:bd:b6:bc:27:60:ca:19:79:de:eb:90:90:37:cb: 78:39:da:d1:bc:10:26:4a:f5:9c:a7:e9:9e:84:d5:ff:6e:51: d9:8b:6c:ce:61:d8:8f:d0:78:ef:43:7c:ca:55:60:da:2e:8e: bf:d4:ab:b3:c5:d5:78:bc:eb:aa:02:c6:1a:57:48:00:c5:0e: 2d:6f:aa:bc:82:db:d1:ed:0c:95:37:85:42:97:34:f7:ef:19: ad:a3:bc:a3:48:81:88:cf:d9:2e:1d:91:5b:11:24:50:2d:43: a8:cc:00:55:ed:62:b7:65:08:fc:b4:3e:82:05:fd:3b:8c:eb: e7:7f:17:f0:94:d3:59:4c:12:57:19:5f:10:1c:65:3a:c3:47: da:f5:59:a0:b5:d9:57:e3:7e:80:b4:20:60:2b:7f:83:66:04: ca:78:45:d2:ad:9a:cf:22:95:dc:1d:04:82:58:ac:a5:39:15: 76:e5:5b:c8:ba:79:b8:f5:76:77:c8:18:56:9d:92:20:b4:a9: b5:f2:97:b2:81:32:63:83:e7:5c:69:53:6d:6c:00:ec:22:42: e4:c0:b5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcSqBZj/msyRS8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk Y2JiYjJlMDAtOWU3Yy00ZWU4LWI2NTQtMjQwZjQ3YWViYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUere3J9XOqol1UG6JU+0roLwMnrpOqAZarl AcOpwkSKgmcDvvgaifkrE70qxyWe7zLYuBvrnbgLmfsYHzKzR7q+PuXCkY/ApbjD D0L/Zwmfk4QcfB9YhZCU7TPBhIKGMJtSCNyIS2EUsgDoZeW6rahSRbC7uY5Am/UZ es4dyLxe1vDERODc4xl9tHn+6H0E/MfAgw2fT5Bx//N7wL7WX6JNVcl0YcqPilTE OrshvHMR6IJ6ikfamwTEQA+dQZ/ZSAP2JEMPw6heyX4ldW/KQfttdsMEpZwyy+V6 7kyPM/InGkWDdQOqTAEk/YLFGTvfw/31VioazNmtenEI3SQmywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkWPHjjyJn6ehK+uQqNMdB8hwjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RjNTljYzAtN2UzOC0z OTlhLTgyYmQtYzExZjAzNTNhYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA03vUpjUinUOFX98edkDDWVXF2GPmsJvDxAx2/PduWhlV6d6muO9VK9 trwnYMoZed7rkJA3y3g52tG8ECZK9Zyn6Z6E1f9uUdmLbM5h2I/QeO9DfMpVYNou jr/Uq7PF1Xi866oCxhpXSADFDi1vqryC29HtDJU3hUKXNPfvGa2jvKNIgYjP2S4d kVsRJFAtQ6jMAFXtYrdlCPy0PoIF/TuM6+d/F/CU01lMElcZXxAcZTrDR9r1WaC1 2VfjfoC0IGArf4NmBMp4RdKtms8ildwdBIJYrKU5FXblW8i6ebj1dnfIGFadkiC0 qbXyl7KBMmOD51xpU21sAOwiQuTAtS4= -----END CERTIFICATE-----Generated at Sun Jan 11 01:48:02 2026 by rpki-client