This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa File: cfe0f1f3-45a3-365b-948d-b553e267569c.roa (raw, json) Hash identifier: DG1tOSDg0hNKsD7mkx7Nn9h1qQRugmZS39KzZyoN78c= Subject key identifier: 36:51:A3:2C:65:4E:05:51:F2:F0:75:58:62:21:2C:B4:DF:49:CD:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A83AF57F846DF947040700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:3a:f5:7f:84:6d:f9:47:04:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=63688aea-6dc9-43b1-9865-14d9fbe0b2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:29:34:9f:ec:ec:89:44:59:f2:df:ad:32:be: 17:46:6f:5d:2a:45:7a:2c:c4:bd:06:36:4a:51:42: 0b:8a:8c:0f:1d:08:02:91:e9:29:db:02:ee:cc:94: 99:a7:c0:db:2e:d3:50:57:b3:99:77:77:be:31:66: 53:f1:16:af:83:21:75:c5:ea:0b:89:fd:eb:aa:8e: 57:d0:45:e7:8e:70:b0:52:12:d0:42:f7:01:e6:4e: 83:fc:c2:a1:46:39:c6:77:9b:c1:9a:f1:fe:46:5c: b0:f0:12:7e:ed:b7:7b:a3:fb:e3:35:0e:f7:0c:ce: 28:76:84:67:a1:25:5f:24:5b:2c:f2:29:b1:5c:ad: b2:25:50:9c:2e:df:67:52:b9:d6:5c:ef:76:90:4a: cf:42:0f:e6:9a:a4:6a:05:55:f2:28:8a:71:c3:d8: a3:92:06:95:36:32:c4:92:52:78:09:c3:8e:87:95: 18:8e:26:7a:01:ff:a1:25:d1:10:7b:bb:ca:70:80: 84:5e:25:59:e4:2d:c6:29:30:3a:bc:1d:ab:7d:68: 55:36:ac:c9:8a:84:32:1a:55:ca:ce:91:f7:29:ea: 68:66:10:da:e2:f7:4d:25:77:4c:91:a9:69:b7:33: 65:4d:dd:cb:d5:e0:2d:75:13:cf:21:dc:55:d7:fd: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:A3:2C:65:4E:05:51:F2:F0:75:58:62:21:2C:B4:DF:49:CD:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:de:98:86:2d:40:56:32:92:ce:6c:96:b2:df:76:bf:b3:48: 64:5b:65:45:ea:7c:27:65:5b:9d:25:36:a5:5c:fc:cc:74:96: 2d:44:57:00:8e:29:0d:0b:ea:9c:9c:4c:4f:33:7c:60:2a:10: 49:c0:a8:dc:2d:d7:70:63:f1:04:d2:c8:b7:05:34:79:ad:7c: de:2e:2a:5b:09:02:a7:b5:2c:b7:d3:8e:7c:a9:80:2a:fe:d1: 74:01:42:37:a2:a9:c4:df:77:b4:8c:8a:1c:33:9a:67:07:79: 31:a5:e5:57:f2:ed:e2:75:a2:57:80:fa:04:a9:37:bc:14:e1: 5e:0a:05:63:ec:a8:03:05:7d:10:9f:a9:7c:9f:f7:8b:d9:c6: 6a:13:6c:d9:9f:7b:18:03:90:45:a4:0b:51:67:dd:42:64:1f: ac:08:ef:2c:17:8b:08:69:f5:f8:aa:84:a8:10:d7:57:8f:87: 81:2c:56:0b:7d:9c:fb:19:1b:71:a4:ee:19:99:23:87:b7:e3: a0:8c:d0:02:40:d4:a0:ab:4c:96:6d:ba:84:27:d0:91:5c:c1: 1f:bb:ad:f7:3f:1c:41:ea:35:bf:50:e7:64:9e:2c:e2:d6:d6: f3:1d:1a:3d:8c:ec:54:20:3b:60:cd:c4:64:98:00:20:50:72: 5b:c0:8d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqDr1f4Rt+UcEBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjM2ODhhZWEtNmRjOS00M2IxLTk4NjUtMTRkOWZiZTBiMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Sk0n+zsiURZ8t+tMr4XRm9dKkV6LMS9BjZK UUILiowPHQgCkekp2wLuzJSZp8DbLtNQV7OZd3e+MWZT8RavgyF1xeoLif3rqo5X 0EXnjnCwUhLQQvcB5k6D/MKhRjnGd5vBmvH+Rlyw8BJ+7bd7o/vjNQ73DM4odoRn oSVfJFss8imxXK2yJVCcLt9nUrnWXO92kErPQg/mmqRqBVXyKIpxw9ijkgaVNjLE klJ4CcOOh5UYjiZ6Af+hJdEQe7vKcICEXiVZ5C3GKTA6vB2rfWhVNqzJioQyGlXK zpH3KepoZhDa4vdNJXdMkalptzNlTd3L1eAtdRPPIdxV1/2YrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZRoyxlTgVR8vB1WGIhLLTfSc22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZlMGYxZjMtNDVhMy0z NjViLTk0OGQtYjU1M2UyNjc1NjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPemIYtQFYyks5slrLfdr+zSGRbZUXqfCdlW50lNqVc/Mx0li1EVwCO KQ0L6pycTE8zfGAqEEnAqNwt13Bj8QTSyLcFNHmtfN4uKlsJAqe1LLfTjnypgCr+ 0XQBQjeiqcTfd7SMihwzmmcHeTGl5Vfy7eJ1oleA+gSpN7wU4V4KBWPsqAMFfRCf qXyf94vZxmoTbNmfexgDkEWkC1Fn3UJkH6wI7ywXiwhp9fiqhKgQ11ePh4EsVgt9 nPsZG3Gk7hmZI4e346CM0AJA1KCrTJZtuoQn0JFcwR+7rfc/HEHqNb9Q52SeLOLW 1vMdGj2M7FQgO2DNxGSYACBQclvAjco= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:48 2026 by rpki-client