This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa File: d4dddb2e-63a6-3480-ab9a-d46cad988093.roa (raw, json) Hash identifier: Hu0vqrEQslNLXs+PDMqBDgEsl4J2CbZBDmHAoP/5ppg= Subject key identifier: A9:D9:33:42:F8:79:AD:A3:9A:7A:BF:69:68:EE:6B:07:FF:FD:7D:C4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBEA6C1F6614F3D5B39E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:ea:6c:1f:66:14:f3:d5:b3:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1b2337ab-923c-49a1-8311-61989aac2d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:06:10:31:bc:e9:fa:26:23:dd:06:ab:f6: df:2e:56:e2:b7:11:0a:90:65:94:45:81:45:b3:69: da:c5:b8:ac:3a:b3:08:f4:b1:c3:40:ee:f6:d8:c2: 1d:18:02:69:c5:25:5c:3b:ef:5d:9f:db:d5:4a:b0: e0:6c:16:8b:82:1b:c0:bc:28:50:04:cc:68:23:17: f4:7c:a0:48:f6:df:00:4b:1a:02:e7:bf:7d:07:16: 80:4e:59:a5:bd:e8:55:35:22:97:03:bb:6f:86:0f: cc:a8:be:52:bf:d1:c6:34:f9:29:7a:82:7b:f7:d7: 26:e8:b0:59:b6:22:7c:7a:e2:80:32:1e:9c:81:84: d4:ea:82:19:66:00:fd:80:26:87:cc:1a:69:b3:aa: b1:07:2d:66:c1:6a:7a:87:05:78:e0:90:80:00:98: 8c:fc:e9:eb:3b:69:b1:0d:f2:56:81:ab:21:7f:a6: 69:9b:5b:bf:2b:a0:70:f3:f6:75:1f:93:8a:6d:4d: d7:17:36:3a:7e:01:fb:63:bd:09:21:19:54:cf:cb: 2a:3f:41:92:80:a5:be:3c:27:d6:bb:f4:71:0d:e0: c4:21:44:f3:3e:9b:16:80:3a:b7:52:a5:cb:43:ff: b3:0d:e0:5c:5c:30:fa:b5:32:5a:99:26:ac:8d:8f: 24:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D9:33:42:F8:79:AD:A3:9A:7A:BF:69:68:EE:6B:07:FF:FD:7D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bb:2a:fb:52:7d:d1:5d:6f:56:13:ab:dd:dd:4a:50:dc:a6: 22:d7:6a:2e:c4:4c:43:ef:9d:9e:48:7e:cf:e2:e9:c2:1a:a8: 24:94:cf:f9:72:d4:96:68:1c:e5:8b:17:e1:ca:bd:c3:e6:81: cf:71:e5:63:97:e8:1a:ec:c7:07:b9:bb:bc:b4:ec:15:a2:aa: c7:63:4f:28:07:39:9b:98:c8:93:31:96:fc:50:ac:43:1b:b3: 80:da:4d:2f:2b:62:f1:f3:03:31:f0:df:05:26:6e:56:70:69: 35:30:dd:0f:48:85:66:00:91:21:8d:5c:fc:25:a4:28:6d:b1: be:21:a4:ae:24:b6:ad:c8:6e:4d:e6:c0:b5:10:be:d5:06:f5: d8:5b:96:5e:5d:52:bc:5d:c8:bc:4c:0d:04:27:38:5a:0c:bb: 15:97:9c:9b:e9:d7:53:9d:34:6b:ab:09:48:63:02:94:ae:3b: 3a:5d:3f:80:6c:d7:2e:30:69:77:0d:fc:b9:13:8c:28:5b:2c: 74:22:ed:a0:af:2c:d6:03:1d:da:55:7f:d3:00:60:df:19:d8: 8c:c5:f1:d8:ea:e8:bb:a7:18:4a:70:e9:5a:cd:c9:39:a2:34: 8b:e1:c6:04:dc:93:f8:44:5b:e2:91:84:47:a7:c2:f2:19:88: 39:61:5c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+psH2YU89WznoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MWIyMzM3YWItOTIzYy00OWExLTgzMTEtNjE5ODlhYWMyZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTEGEDG86fomI90Gq/bfLlbitxEKkGWURYFF s2naxbisOrMI9LHDQO722MIdGAJpxSVcO+9dn9vVSrDgbBaLghvAvChQBMxoIxf0 fKBI9t8ASxoC5799BxaATlmlvehVNSKXA7tvhg/MqL5Sv9HGNPkpeoJ799cm6LBZ tiJ8euKAMh6cgYTU6oIZZgD9gCaHzBpps6qxBy1mwWp6hwV44JCAAJiM/OnrO2mx DfJWgashf6Zpm1u/K6Bw8/Z1H5OKbU3XFzY6fgH7Y70JIRlUz8sqP0GSgKW+PCfW u/RxDeDEIUTzPpsWgDq3UqXLQ/+zDeBcXDD6tTJamSasjY8kfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnZM0L4ea2jmnq/aWjuawf//X3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRkZGRiMmUtNjNhNi0z NDgwLWFiOWEtZDQ2Y2FkOTg4MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq7KvtSfdFdb1YTq93dSlDcpiLXai7ETEPvnZ5Ifs/i6cIaqCSUz/ly 1JZoHOWLF+HKvcPmgc9x5WOX6Brsxwe5u7y07BWiqsdjTygHOZuYyJMxlvxQrEMb s4DaTS8rYvHzAzHw3wUmblZwaTUw3Q9IhWYAkSGNXPwlpChtsb4hpK4ktq3Ibk3m wLUQvtUG9dhbll5dUrxdyLxMDQQnOFoMuxWXnJvp11OdNGurCUhjApSuOzpdP4Bs 1y4waXcN/LkTjChbLHQi7aCvLNYDHdpVf9MAYN8Z2IzF8djq6LunGEpw6VrNyTmi NIvhxgTck/hEW+KRhEenwvIZiDlhXIc= -----END CERTIFICATE-----Generated at Sun Jan 11 15:44:56 2026 by rpki-client