This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2c420fa-550b-341b-96ed-20f486bad2da.roa File: f2c420fa-550b-341b-96ed-20f486bad2da.roa (raw, json) Hash identifier: wJvjaiDaVpA+HNkDPdeTx2ZltOWq84WTk3rMkS0WvIE= Subject key identifier: AD:B1:22:6E:C5:47:56:29:13:7E:10:23:C6:3D:4E:F1:44:23:D3:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBCD38068E10527120F000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2c420fa-550b-341b-96ed-20f486bad2da.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.18.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:cd:38:06:8e:10:52:71:20:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=4ce70d0f-dca8-4123-b34b-207dca7be615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:a9:24:7f:21:dd:21:68:2a:39:cf:25:41: af:53:81:c9:74:b0:44:8a:37:07:68:b3:a5:e3:d7: 06:b1:c4:10:f7:04:4d:39:c6:09:26:99:cd:3e:0d: 7b:51:d1:d6:8c:a1:29:b5:25:27:53:de:46:e8:0c: 03:fb:3b:19:3c:d1:74:0c:91:4d:c3:54:99:e4:e0: ec:b7:a3:58:f7:96:9f:5c:70:74:0f:f4:96:27:b8: ca:f6:c9:7e:ad:dd:ff:8b:6c:7b:f8:00:95:57:db: a2:b1:51:20:75:cd:aa:00:8f:55:b5:d5:5b:3d:eb: c2:e4:bc:57:c6:11:3f:e8:fd:64:5d:05:81:0a:67: 26:b4:d3:f8:0f:22:2d:d0:ef:73:72:36:e2:90:90: e5:3a:f2:46:6e:d0:82:20:9b:3a:00:43:4d:64:6e: 3d:de:d7:10:9f:d5:e0:49:2e:63:c0:34:fe:9a:93: 80:2f:38:9b:e2:ae:3d:83:d9:5d:08:c9:ef:20:1d: 85:a7:32:75:1f:6d:30:2a:67:ce:59:d5:8e:01:88: 37:2f:c8:85:67:a7:ac:f5:cb:8e:88:f9:71:80:e6: 9d:53:82:e7:ec:48:31:74:49:86:b9:60:ab:10:72: 7b:07:be:2a:81:92:3b:c4:73:91:14:f1:de:c1:23: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B1:22:6E:C5:47:56:29:13:7E:10:23:C6:3D:4E:F1:44:23:D3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2c420fa-550b-341b-96ed-20f486bad2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:30:b1:c4:5c:18:c7:bd:c9:f0:69:fc:03:e8:1e:b4:31:c0: 8b:f0:41:9a:fb:ac:97:79:c1:03:1a:4e:17:7c:ad:4b:fa:4c: cd:07:45:38:44:8b:0e:a3:b4:cb:2a:4c:a0:af:eb:fa:38:97: 16:a2:e2:02:c5:e2:86:f4:e4:10:0b:b8:c6:7a:ec:83:5c:54: e6:4b:68:39:c4:10:d6:2b:7b:b6:b6:26:a1:a5:63:47:cc:14: 09:21:df:cb:62:4a:82:7c:15:99:20:a5:37:bb:8a:41:5c:73: aa:42:8d:75:5b:6b:ac:a6:d0:2c:32:a6:d9:e9:e1:be:95:4e: fb:7f:14:59:be:e8:27:46:f2:2e:59:89:13:c8:26:6f:82:23: ba:65:40:89:7a:43:26:b1:e9:34:d3:62:3f:3f:9e:be:c3:98: 16:a7:ae:d5:4c:07:e4:e0:f2:f4:c7:f0:1f:e2:6d:f7:c1:46: 51:fd:45:cf:38:c8:a8:28:28:a7:eb:88:7e:a7:49:3b:87:3b: 80:17:89:e3:9f:9b:d6:a5:17:cc:41:64:88:b2:3c:68:b0:32: 08:82:00:ce:80:1a:ee:81:c1:ef:d3:32:2c:4c:ab:9b:d3:1d: b6:11:ef:4c:16:e6:e4:2b:5d:74:b9:a7:03:ee:2c:f5:92:df: c6:39:da:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2804Bo4QUnEg8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NGNlNzBkMGYtZGNhOC00MTIzLWIzNGItMjA3ZGNhN2JlNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprmpJH8h3SFoKjnPJUGvU4HJdLBEijcHaLOl 49cGscQQ9wRNOcYJJpnNPg17UdHWjKEptSUnU95G6AwD+zsZPNF0DJFNw1SZ5ODs t6NY95afXHB0D/SWJ7jK9sl+rd3/i2x7+ACVV9uisVEgdc2qAI9VtdVbPevC5LxX xhE/6P1kXQWBCmcmtNP4DyIt0O9zcjbikJDlOvJGbtCCIJs6AENNZG493tcQn9Xg SS5jwDT+mpOALzib4q49g9ldCMnvIB2FpzJ1H20wKmfOWdWOAYg3L8iFZ6es9cuO iPlxgOadU4Ln7EgxdEmGuWCrEHJ7B74qgZI7xHORFPHewSO6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2xIm7FR1YpE34QI8Y9TvFEI9NFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjJjNDIwZmEtNTUwYi0z NDFiLTk2ZWQtMjBmNDg2YmFkMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGowscRcGMe9yfBp/APoHrQxwIvwQZr7rJd5wQMaThd8rUv6TM0HRThE iw6jtMsqTKCv6/o4lxai4gLF4ob05BALuMZ67INcVOZLaDnEENYre7a2JqGlY0fM FAkh38tiSoJ8FZkgpTe7ikFcc6pCjXVba6ym0Cwyptnp4b6VTvt/FFm+6CdG8i5Z iRPIJm+CI7plQIl6Qyax6TTTYj8/nr7DmBanrtVMB+Tg8vTH8B/ibffBRlH9Rc84 yKgoKKfriH6nSTuHO4AXieOfm9alF8xBZIiyPGiwMgiCAM6AGu6Bwe/TMixMq5vT HbYR70wW5uQrXXS5pwPuLPWS38Y52k4= -----END CERTIFICATE-----Generated at Sun Jan 11 09:47:31 2026 by rpki-client