This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa File: cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa (raw, json) Hash identifier: 1i+aOjblo+oYgSgzRrrFIdBvB7UOEKJKXYd7US9mkuQ= Subject key identifier: C8:3A:D7:B9:F2:03:8F:43:69:73:A9:7E:8C:D8:BD:CA:59:F9:84:F3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BE75E3FA9B57C0E3772340480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa Signing time: Tue 18 Nov 2025 19:29:20 +0000 ROA not before: Tue 18 Nov 2025 19:29:20 +0000 ROA not after: Mon 16 Feb 2026 19:29:20 +0000 asID: 30036 IP address blocks: 173.18.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:5e:3f:a9:b5:7c:0e:37:72:34:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 18 19:29:20 2025 GMT Not After : Feb 16 19:29:20 2026 GMT Subject: CN=b83ebe26-d2a2-41db-990e-bdaaf9e9d52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:70:4a:8e:2c:6f:bf:e3:e0:06:af:35:5d: f3:79:d6:db:c5:61:74:84:f7:19:2b:3b:fc:77:48: 09:5a:7e:9b:dc:af:4c:91:3e:2e:17:19:b8:2f:ae: 4f:04:87:d0:fa:ff:81:a5:a0:3f:49:9f:bc:37:b2: 8e:09:aa:71:b9:b2:0a:df:fa:d3:fa:2c:f9:59:64: 71:c7:06:6b:49:10:ad:71:fb:7e:38:4a:db:18:a2: 52:53:5d:52:d9:af:19:32:e1:a3:d5:db:45:fe:78: dc:f5:38:06:25:3f:0d:0a:ef:55:53:3f:ad:d0:8a: 2b:65:2d:f2:ce:c6:0e:ea:75:18:b3:ef:80:25:1e: b1:84:21:7b:42:d4:a0:91:33:47:52:26:cf:de:98: 3e:ef:ac:97:63:af:b1:e4:bb:7a:86:9a:2d:1a:ff: b9:b1:c9:9d:cd:70:b1:73:fb:7b:0f:ed:be:96:83: f6:84:62:a5:1d:13:1b:e0:e6:a4:03:82:1d:e6:8c: 9f:d4:6f:24:03:c6:d2:76:7a:85:96:87:a7:64:7e: e2:3e:94:2e:78:29:a4:24:9f:7c:d3:08:00:11:c8: a9:22:e2:a0:cb:dc:8a:ac:87:ef:44:3e:1b:21:0f: e0:32:6f:e5:48:a4:8b:88:63:3e:0a:c2:b1:7f:7a: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:D7:B9:F2:03:8F:43:69:73:A9:7E:8C:D8:BD:CA:59:F9:84:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:20:d7:eb:67:cb:a4:89:49:3f:1c:5a:53:75:b2:29:07:72: a2:47:7d:5e:da:56:4e:61:ee:5a:77:a3:73:27:23:31:5f:47: a8:76:8b:54:1b:1a:5b:25:27:d2:6e:f2:3e:44:b8:3b:c9:aa: 20:c9:36:89:28:6c:2d:23:f0:04:ea:39:5d:1a:10:8f:4c:6d: 54:7b:0b:84:08:7c:6c:cc:58:74:5a:ef:7e:14:1f:86:4e:52: dc:56:f2:ad:67:58:5b:d5:67:fd:f0:1e:dc:68:5f:84:55:68: e8:6f:5f:7b:a8:c4:ed:9c:7f:a2:fb:b7:4c:d4:35:1b:d4:b0: e5:a9:d5:52:42:b8:e9:50:51:0f:45:29:01:f4:a8:b5:71:91: b7:2d:40:0d:22:7a:79:1e:53:27:99:83:fc:01:c1:12:32:4a: 8a:9e:c3:ee:6e:c2:3d:78:70:c7:5a:85:92:2d:0e:17:72:09: 6c:c5:9c:d0:70:31:93:ef:b4:89:34:54:16:43:f8:26:5b:26: 15:57:26:a5:7e:fd:2c:80:c5:1a:b4:b7:76:6c:bb:3f:5c:60: e9:99:86:41:fa:ad:cd:96:7e:08:a8:f6:31:6c:c0:cc:bd:49: a9:56:82:42:5a:29:0f:de:02:0a:d7:07:d4:cb:d5:c7:37:b4: d7:49:48:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvnXj+ptXwON3I0BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExODE5MjkyMFoXDTI2MDIxNjE5MjkyMFowLzEtMCsGA1UEAxMk YjgzZWJlMjYtZDJhMi00MWRiLTk5MGUtYmRhYWY5ZTlkNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIxwSo4sb7/j4AavNV3zedbbxWF0hPcZKzv8 d0gJWn6b3K9MkT4uFxm4L65PBIfQ+v+BpaA/SZ+8N7KOCapxubIK3/rT+iz5WWRx xwZrSRCtcft+OErbGKJSU11S2a8ZMuGj1dtF/njc9TgGJT8NCu9VUz+t0IorZS3y zsYO6nUYs++AJR6xhCF7QtSgkTNHUibP3pg+76yXY6+x5Lt6hpotGv+5scmdzXCx c/t7D+2+loP2hGKlHRMb4OakA4Id5oyf1G8kA8bSdnqFloenZH7iPpQueCmkJJ98 0wgAEcipIuKgy9yKrIfvRD4bIQ/gMm/lSKSLiGM+CsKxf3qf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg617nyA49DaXOpfozYvcpZ+YTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RmNmJiOGItN2U1ZS0z YjhlLTlhNDQtNjgyNTMxOWYwNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQg1+tny6SJST8cWlN1sikHcqJHfV7aVk5h7lp3o3MnIzFfR6h2i1Qb GlslJ9Ju8j5EuDvJqiDJNokobC0j8ATqOV0aEI9MbVR7C4QIfGzMWHRa734UH4ZO UtxW8q1nWFvVZ/3wHtxoX4RVaOhvX3uoxO2cf6L7t0zUNRvUsOWp1VJCuOlQUQ9F KQH0qLVxkbctQA0ienkeUyeZg/wBwRIySoqew+5uwj14cMdahZItDhdyCWzFnNBw MZPvtIk0VBZD+CZbJhVXJqV+/SyAxRq0t3Zsuz9cYOmZhkH6rc2Wfgio9jFswMy9 SalWgkJaKQ/eAgrXB9TL1cc3tNdJSAM= -----END CERTIFICATE-----Generated at Tue Nov 25 12:10:58 2025 by rpki-client