This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa File: d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa (raw, json) Hash identifier: MiBWnIk0ebmtkVhmg6PzI6qkAb2yIVzmJkmsHCGupSE= Subject key identifier: 99:ED:81:28:E7:79:40:E3:BE:7A:F3:CA:FF:07:8E:9D:C2:35:69:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5A96774AF57BA2EF23F57280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.20.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:77:4a:f5:7b:a2:ef:23:f5:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=3606fde0-9c0e-4b62-83ce-e9d196c3973b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:6f:cb:73:98:27:62:13:f0:38:6b:36:e8: 51:4e:fd:11:d0:72:41:60:7b:bb:14:68:b2:0e:5c: 92:7d:1e:45:8f:12:a8:10:3c:3d:9e:8e:05:60:a7: 6b:09:0b:81:dc:a1:40:b1:b4:04:35:b9:50:a1:29: 3c:8b:44:f5:0c:0c:13:8d:95:12:5c:4e:89:c9:af: 29:d6:8f:11:f1:c1:de:36:cd:06:17:ef:df:1b:c4: ac:be:5c:dd:3b:b7:1e:8a:6c:26:36:77:21:43:e6: c4:c3:68:a8:9f:06:90:01:24:7f:c0:67:91:df:e7: 8b:82:be:32:1c:d2:b5:da:32:0b:78:0c:5b:90:72: b3:fc:ba:b4:fe:34:72:85:fc:f0:cb:31:d7:30:e6: ce:34:ea:95:81:d9:99:fc:10:7d:a1:fc:ae:08:7c: 98:34:36:a9:c1:71:f7:a7:f8:04:77:23:48:3f:58: 67:6d:f7:33:a0:7b:5b:21:c7:92:f6:e7:ee:96:2c: 62:b0:7d:6b:bd:13:d7:00:63:72:45:ee:2b:40:0e: 76:26:15:d8:23:0c:53:23:8c:30:10:05:37:25:c0: 59:3b:76:f2:80:23:74:3e:a8:a0:a1:94:5e:10:ca: f8:ae:9b:07:c9:ed:a8:26:7c:8f:7a:1c:b1:43:12: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:81:28:E7:79:40:E3:BE:7A:F3:CA:FF:07:8E:9D:C2:35:69:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c3:f8:25:45:55:fd:2b:c8:80:fd:b3:0c:fd:d8:41:ee:87: e5:b7:19:f7:2a:80:f7:d1:91:fa:4a:2d:c8:9a:fa:db:93:4a: c4:3e:12:81:bc:2f:57:c4:23:91:7d:5f:0a:37:ab:ef:b1:b4: 95:0e:e0:d3:e6:29:0b:e6:36:71:1b:27:28:bb:32:cb:dd:ab: b9:35:3c:85:1a:e2:d2:56:4b:1f:ad:9e:c2:4a:91:c6:7a:9c: 0a:ee:4a:50:16:82:bf:43:c6:97:7a:b1:b6:20:6a:e4:c0:6a: 89:a0:31:03:16:ea:64:2c:11:ef:9c:75:53:ca:bd:1d:c3:49: e4:ca:de:54:a9:99:c7:30:94:80:98:f8:ac:da:b6:bc:d9:49: 6a:db:2c:ea:95:18:36:36:23:a5:c1:bb:7e:d2:db:59:1d:05: a9:f3:5c:d8:17:c8:61:27:9a:11:a1:93:b3:16:23:db:cd:3f: f4:58:38:65:f2:b7:da:f2:0c:f4:78:2e:49:ec:01:53:dd:d2: 78:e8:f1:e4:ef:4b:77:a4:96:5e:b0:60:16:8d:32:63:b8:5d: a0:0c:da:ff:da:43:47:4f:a5:42:e2:01:b5:b1:97:12:d2:b3: 8e:c4:dc:7f:93:e2:06:23:8c:be:7e:91:09:b6:ea:71:ff:35: d3:d2:3d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExalndK9Xui7yP1coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk MzYwNmZkZTAtOWMwZS00YjYyLTgzY2UtZTlkMTk2YzM5NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEhvy3OYJ2IT8DhrNuhRTv0R0HJBYHu7FGiy DlySfR5FjxKoEDw9no4FYKdrCQuB3KFAsbQENblQoSk8i0T1DAwTjZUSXE6Jya8p 1o8R8cHeNs0GF+/fG8SsvlzdO7ceimwmNnchQ+bEw2ionwaQASR/wGeR3+eLgr4y HNK12jILeAxbkHKz/Lq0/jRyhfzwyzHXMObONOqVgdmZ/BB9ofyuCHyYNDapwXH3 p/gEdyNIP1hnbfczoHtbIceS9ufulixisH1rvRPXAGNyRe4rQA52JhXYIwxTI4ww EAU3JcBZO3bygCN0PqigoZReEMr4rpsHye2oJnyPehyxQxJBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJntgSjneUDjvnrzyv8Hjp3CNWnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhYTcwYjMtZjNkNS0z NmY3LThhOWItODhjYWQ3OWZiNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErD+CVFVf0ryID9swz92EHuh+W3GfcqgPfRkfpKLcia+tuTSsQ+EoG8 L1fEI5F9Xwo3q++xtJUO4NPmKQvmNnEbJyi7Msvdq7k1PIUa4tJWSx+tnsJKkcZ6 nAruSlAWgr9Dxpd6sbYgauTAaomgMQMW6mQsEe+cdVPKvR3DSeTK3lSpmccwlICY +KzatrzZSWrbLOqVGDY2I6XBu37S21kdBanzXNgXyGEnmhGhk7MWI9vNP/RYOGXy t9ryDPR4LknsAVPd0njo8eTvS3ekll6wYBaNMmO4XaAM2v/aQ0dPpULiAbWxlxLS s47E3H+T4gYjjL5+kQm26nH/NdPSPRU= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:05 2026 by rpki-client