This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa File: f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa (raw, json) Hash identifier: +iwBusBJBtYTNwxSC5tgow3v0vHmwvMTIBR4XrleG+M= Subject key identifier: 7A:E0:B2:C9:B8:7E:80:F6:2C:A9:4C:E5:F7:53:51:B8:32:58:C9:BD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8212889D46A531F30DE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:21:28:89:d4:6a:53:1f:30:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=676b834a-f940-4b8a-b8e1-95749c001749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:a7:28:d3:19:b7:dd:e7:d9:d7:23:c2:68: 35:1b:9e:a1:ce:e6:b0:6d:1d:61:57:7e:58:84:b5: c2:a6:03:bc:63:e6:eb:8f:45:25:82:8a:d7:1d:0c: e1:3f:3c:32:f0:de:90:ca:d6:e7:e0:ae:11:38:3c: 0e:7f:e5:95:94:bb:fa:d5:70:72:de:42:3a:9b:0a: ca:07:75:cb:3d:d4:8b:b6:68:92:da:76:15:09:48: e8:06:e3:19:ed:f0:7b:03:cf:db:17:6f:1f:fb:17: 66:1e:6b:46:a7:36:df:53:75:6c:27:bf:65:0c:73: a5:fc:d3:af:28:76:e8:bb:1c:94:ca:47:8f:ed:0c: 53:e7:4d:3b:33:18:1f:b0:3e:38:c3:41:72:a1:ae: 7e:c2:01:3d:c6:80:19:62:60:6b:6c:26:ee:cb:dc: 80:b9:17:1e:80:a0:50:c8:49:39:e7:10:80:8e:a1: b1:74:32:81:bd:88:dd:8f:f4:c1:00:42:23:2c:05: b1:d6:40:06:73:f9:b3:86:67:b3:71:5f:3b:9d:ba: 02:eb:be:d3:ed:c3:f3:20:b4:32:c7:e2:55:22:c1: e1:10:97:86:72:af:d4:fe:13:8f:50:61:bb:bc:81: fb:ee:f8:a9:73:23:b1:43:d7:db:f4:10:9f:ea:a0: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E0:B2:C9:B8:7E:80:F6:2C:A9:4C:E5:F7:53:51:B8:32:58:C9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:39:28:f8:c7:89:2e:87:57:b7:a7:de:6e:31:44:4b:a8:52: 26:98:c2:fb:04:bd:e6:f6:44:a5:f7:1f:84:5a:c3:4b:c0:27: ab:bb:48:c1:29:42:0e:7e:ea:43:87:f2:30:66:d7:c5:c1:df: 6a:6c:6a:98:6b:fd:64:d0:01:6d:ca:61:40:99:b2:b6:70:09: f7:f8:18:17:f2:5b:46:27:6d:9e:47:46:11:c6:4a:e5:14:0e: ce:f7:69:92:cc:85:dd:42:5c:c0:92:a7:a6:ca:c7:f0:98:bb: 87:cd:3a:6b:4c:95:7d:a8:06:3c:35:8d:56:7d:2d:bb:d3:87: c6:f4:0e:15:3a:c4:6d:c1:4a:8e:e3:3b:aa:71:f8:77:db:13: 50:b5:ed:e3:8a:cd:b4:c8:da:fe:f8:9c:4a:d1:38:48:44:91: 33:5d:20:a5:7d:04:66:ef:b2:c6:7c:1f:c0:fd:24:7f:a9:35: 2f:81:41:ff:5d:15:96:b1:3d:ba:dd:2b:e5:18:ee:cb:3e:aa: 1f:cb:81:80:2c:73:01:33:6e:75:22:01:98:b8:b6:bf:ca:25: d9:24:68:31:77:30:11:88:ba:14:53:aa:69:7b:b1:7e:3d:79: 69:c0:c2:ef:e6:b4:32:a6:ca:89:c1:ac:86:42:12:0f:0d:89: 40:a6:f1:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCEoidRqUx8w3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Njc2YjgzNGEtZjk0MC00YjhhLWI4ZTEtOTU3NDljMDAxNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2anKNMZt93n2dcjwmg1G56hzuawbR1hV35Y hLXCpgO8Y+brj0UlgorXHQzhPzwy8N6Qytbn4K4RODwOf+WVlLv61XBy3kI6mwrK B3XLPdSLtmiS2nYVCUjoBuMZ7fB7A8/bF28f+xdmHmtGpzbfU3VsJ79lDHOl/NOv KHbouxyUykeP7QxT5007MxgfsD44w0Fyoa5+wgE9xoAZYmBrbCbuy9yAuRcegKBQ yEk55xCAjqGxdDKBvYjdj/TBAEIjLAWx1kAGc/mzhmezcV87nboC677T7cPzILQy x+JVIsHhEJeGcq/U/hOPUGG7vIH77vipcyOxQ9fb9BCf6qBG8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrgssm4foD2LKlM5fdTUbgyWMm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjcxNjhlYjAtZmI4Yy0z N2IzLWEwZDItZDU2ZDljYTViNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY5KPjHiS6HV7en3m4xREuoUiaYwvsEveb2RKX3H4Raw0vAJ6u7SMEp Qg5+6kOH8jBm18XB32psaphr/WTQAW3KYUCZsrZwCff4GBfyW0YnbZ5HRhHGSuUU Ds73aZLMhd1CXMCSp6bKx/CYu4fNOmtMlX2oBjw1jVZ9LbvTh8b0DhU6xG3BSo7j O6px+HfbE1C17eOKzbTI2v74nErROEhEkTNdIKV9BGbvssZ8H8D9JH+pNS+BQf9d FZaxPbrdK+UY7ss+qh/LgYAscwEzbnUiAZi4tr/KJdkkaDF3MBGIuhRTqml7sX49 eWnAwu/mtDKmyonBrIZCEg8NiUCm8dI= -----END CERTIFICATE-----Generated at Sun Jan 11 16:28:17 2026 by rpki-client