This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa File: f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa (raw, json) Hash identifier: Dvi5ZA97y1eTB8RwNa6Q3KTHcG4dw4PyLmnT9iqPvoQ= Subject key identifier: 36:4A:4F:28:74:E8:16:82:4C:65:8E:7B:64:E0:64:0C:C0:49:AE:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BE1260EE2AB7E96BF8CECFF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.21.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:26:0e:e2:ab:7e:96:bf:8c:ec:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=fe1f4996-123a-47fe-acda-74e158fc16bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b8:ad:19:cd:dc:c3:cf:b1:23:fb:7c:2a:f7: e1:18:75:f6:50:05:0e:95:34:bb:ee:22:44:e8:54: c3:d7:cc:e5:f1:b5:cf:a6:ae:d5:f9:96:8d:78:69: ad:11:70:e1:91:a3:2d:5d:e4:61:a1:ad:c6:e7:c8: 45:dd:57:1b:26:a8:e4:85:1e:27:ce:b8:bf:83:56: 25:15:07:5e:80:63:d6:8b:d5:3b:82:b7:24:bc:7c: 83:fd:ba:db:a7:03:59:71:78:c1:dd:95:99:ba:56: 68:62:ac:cf:5b:2e:6e:37:65:56:82:97:23:24:31: 1c:0c:0b:05:3b:70:5b:ab:43:c8:d2:44:5b:08:9d: d1:f9:77:e1:8b:3c:c6:8e:6a:b6:cf:75:14:20:30: cd:d7:9d:c0:9b:e6:e3:82:9d:ff:35:b1:40:fc:2b: 4d:bd:07:d6:94:87:70:84:cc:9e:9c:a5:f2:4f:9d: e6:e8:1a:79:2a:f1:e1:5e:52:f1:e0:2c:d9:c8:f8: ef:2d:56:92:79:11:25:97:50:05:75:f1:68:01:94: b0:88:0b:8e:58:35:d6:1e:b4:8e:81:71:d9:9f:ed: 74:c2:a9:2b:ca:87:23:af:ec:f8:3c:7d:64:f3:20: ae:b9:2a:10:df:8c:88:ff:9b:0f:be:b0:d3:25:bf: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4A:4F:28:74:E8:16:82:4C:65:8E:7B:64:E0:64:0C:C0:49:AE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f2:cd:57:d1:23:05:c9:45:da:f1:e2:2c:fb:8e:e6:8a:2a: 3a:b3:61:0b:f5:c7:e7:5b:02:22:42:75:38:3d:e4:87:cd:f9: 49:62:3a:a3:16:ea:e3:da:ee:a0:e3:30:d5:c4:e7:fe:81:b8: 22:61:a1:6d:7e:12:d7:bf:5b:57:c6:68:b3:58:0a:63:56:cc: dc:ed:f8:cb:b8:87:86:35:4b:c6:36:0d:41:66:e1:6c:6c:45: 0b:ea:3a:ea:0c:6b:81:e0:3d:f9:2f:a7:3f:87:4f:27:24:c0: 6b:c3:68:98:ea:da:4e:c4:08:60:c8:d9:23:83:7c:c7:06:d5: 1e:34:43:4c:8e:ef:db:2b:c7:9c:aa:90:bb:06:e0:2b:8d:bd: 05:09:99:01:f7:ec:38:84:f0:01:9e:9a:60:86:74:4a:fe:78: a4:3c:dc:d3:5a:96:b8:0a:b9:b3:0e:60:b4:66:9f:2d:dd:7f: cb:62:d6:e2:95:47:e0:1c:57:33:cd:65:2b:bd:9e:2d:54:eb: ac:42:1b:fa:74:39:33:99:73:d0:cb:74:a0:8e:b0:83:6c:7c: 51:8a:80:c8:82:48:f4:37:52:34:25:48:8b:13:e9:84:4c:31: f5:86:99:99:e8:6c:9a:af:10:47:82:30:3b:3d:31:87:dc:63: ee:a0:02:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJg7iq36Wv4zs/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk ZmUxZjQ5OTYtMTIzYS00N2ZlLWFjZGEtNzRlMTU4ZmMxNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbitGc3cw8+xI/t8KvfhGHX2UAUOlTS77iJE 6FTD18zl8bXPpq7V+ZaNeGmtEXDhkaMtXeRhoa3G58hF3VcbJqjkhR4nzri/g1Yl FQdegGPWi9U7grckvHyD/brbpwNZcXjB3ZWZulZoYqzPWy5uN2VWgpcjJDEcDAsF O3Bbq0PI0kRbCJ3R+XfhizzGjmq2z3UUIDDN153Am+bjgp3/NbFA/CtNvQfWlIdw hMyenKXyT53m6Bp5KvHhXlLx4CzZyPjvLVaSeREll1AFdfFoAZSwiAuOWDXWHrSO gXHZn+10wqkryocjr+z4PH1k8yCuuSoQ34yI/5sPvrDTJb9DnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZKTyh06BaCTGWOe2TgZAzASa6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjQxOWI5NTMtMWE3Ni0z ZjM2LThkNjQtMmI2YmE0OWM5NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETyzVfRIwXJRdrx4iz7juaKKjqzYQv1x+dbAiJCdTg95IfN+UliOqMW 6uPa7qDjMNXE5/6BuCJhoW1+Ete/W1fGaLNYCmNWzNzt+Mu4h4Y1S8Y2DUFm4Wxs RQvqOuoMa4HgPfkvpz+HTyckwGvDaJjq2k7ECGDI2SODfMcG1R40Q0yO79srx5yq kLsG4CuNvQUJmQH37DiE8AGemmCGdEr+eKQ83NNalrgKubMOYLRmny3df8ti1uKV R+AcVzPNZSu9ni1U66xCG/p0OTOZc9DLdKCOsINsfFGKgMiCSPQ3UjQlSIsT6YRM MfWGmZnobJqvEEeCMDs9MYfcY+6gAhU= -----END CERTIFICATE-----Generated at Tue Nov 25 10:34:44 2025 by rpki-client