This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa File: f16e379d-eaa4-319f-9f86-6635763863e7.roa (raw, json) Hash identifier: Po/+nnEJ5WiVRKDdBDqXeyeQzjaUAZAS3PP9Urur+dw= Subject key identifier: 67:B6:2B:46:C2:A0:38:B5:23:BD:90:28:23:D1:84:AB:4F:13:4A:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A697093C84B8D40B8D5180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.17.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:97:09:3c:84:b8:d4:0b:8d:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c0f42171-da09-45db-b3d4-859d0ee08f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:84:44:25:a2:69:01:3c:62:9e:50:5f:4d: 21:68:6e:f3:8f:2e:15:a7:c5:02:72:49:b7:8e:b2: 55:53:7f:bf:c3:a9:ce:5c:c2:0f:8d:93:61:73:19: 05:8c:49:28:6f:32:dc:38:82:52:a1:7d:86:e0:97: e0:d7:4a:64:44:84:a8:d1:4e:70:57:a7:6d:a8:e1: 1f:b6:62:44:c6:d5:4b:55:a5:e3:66:0b:79:c1:b8: 18:2c:2d:6a:1f:ed:45:7f:f6:31:28:62:8a:74:80: b9:e4:a3:a6:49:3f:18:0b:fa:93:6a:f0:fc:01:6f: cd:86:29:37:ab:fe:c4:fd:ce:a0:15:a7:e1:b3:a7: 6e:aa:4a:bf:bb:02:0f:4d:99:f1:13:5b:29:0f:fc: 53:08:73:ab:2e:6b:7a:77:62:62:e5:41:60:6c:6e: f6:9a:37:bb:11:d1:94:48:8f:44:db:b6:40:7a:d4: 20:ba:96:fd:b6:03:0a:b0:72:ed:82:d1:94:d4:03: f3:d5:96:01:c2:d5:ed:9d:9a:de:ab:d9:12:53:49: 4d:67:14:48:33:ef:1b:f4:2c:f2:44:e4:ff:37:de: d0:94:88:a1:37:6e:51:f9:ca:04:5b:49:cf:b5:08: f3:d5:0a:a9:0c:ed:15:aa:f2:de:e0:1f:61:10:79: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:2B:46:C2:A0:38:B5:23:BD:90:28:23:D1:84:AB:4F:13:4A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:51:23:95:2a:34:ce:7b:9e:07:0d:a6:78:be:aa:80:9d:68: 73:e0:ee:43:a1:61:b1:97:6c:db:82:25:63:a7:3e:ae:51:79: ed:7e:c6:de:31:9a:0a:c1:66:d1:e3:d0:00:fb:f2:d4:02:d4: ad:0f:8e:12:ef:47:4b:6f:cc:77:a7:a5:68:93:7f:de:ff:42: 9c:f3:a7:fe:ce:66:b0:6f:48:30:d8:7b:47:14:f4:c5:b8:7d: 6a:35:5e:8f:6d:19:b0:73:c2:69:8c:a3:86:92:51:b2:29:35: e4:62:5a:13:ae:bd:27:97:eb:b9:02:93:e0:db:d0:9f:c9:3c: 59:ba:dd:db:08:aa:5d:18:6b:dc:8c:9c:39:a9:d1:55:f5:de: a5:aa:dd:14:37:be:61:fd:3e:c4:c6:9e:c6:b4:39:98:08:04: bb:58:78:f5:7c:e5:5f:a3:c3:4f:8f:91:cc:5e:23:57:6b:18: f9:2f:c4:cc:42:0c:40:b6:9d:15:92:96:8d:9b:75:4d:7d:dd: af:54:1c:2c:ea:55:a2:cf:d3:8b:71:32:46:c3:84:f8:84:18: 1c:90:62:e2:27:c9:db:8a:79:d1:e2:ff:05:9d:fe:c9:aa:4a: ef:0e:49:52:bd:a1:2f:29:f7:30:4e:ba:2a:37:a8:34:e7:e5: 1f:d4:a2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFppcJPIS41AuNUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzBmNDIxNzEtZGEwOS00NWRiLWIzZDQtODU5ZDBlZTA4Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IGERCWiaQE8Yp5QX00haG7zjy4Vp8UCckm3 jrJVU3+/w6nOXMIPjZNhcxkFjEkobzLcOIJSoX2G4Jfg10pkRISo0U5wV6dtqOEf tmJExtVLVaXjZgt5wbgYLC1qH+1Ff/YxKGKKdIC55KOmST8YC/qTavD8AW/Nhik3 q/7E/c6gFafhs6duqkq/uwIPTZnxE1spD/xTCHOrLmt6d2Ji5UFgbG72mje7EdGU SI9E27ZAetQgupb9tgMKsHLtgtGU1APz1ZYBwtXtnZreq9kSU0lNZxRIM+8b9Czy ROT/N97QlIihN25R+coEW0nPtQjz1QqpDO0VqvLe4B9hEHlfRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe2K0bCoDi1I72QKCPRhKtPE0p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjE2ZTM3OWQtZWFhNC0z MTlmLTlmODYtNjYzNTc2Mzg2M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxRI5UqNM57ngcNpni+qoCdaHPg7kOhYbGXbNuCJWOnPq5Ree1+xt4x mgrBZtHj0AD78tQC1K0PjhLvR0tvzHenpWiTf97/Qpzzp/7OZrBvSDDYe0cU9MW4 fWo1Xo9tGbBzwmmMo4aSUbIpNeRiWhOuvSeX67kCk+Db0J/JPFm63dsIql0Ya9yM nDmp0VX13qWq3RQ3vmH9PsTGnsa0OZgIBLtYePV85V+jw0+PkcxeI1drGPkvxMxC DEC2nRWSlo2bdU193a9UHCzqVaLP04txMkbDhPiEGByQYuInyduKedHi/wWd/smq Su8OSVK9oS8p9zBOuio3qDTn5R/Uovk= -----END CERTIFICATE-----Generated at Sun Jan 11 15:42:16 2026 by rpki-client