This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa File: 3e0b4933-96a8-3045-9cc4-034ba229beeb.roa (raw, json) Hash identifier: U4RvNVDq2vqlLMEtR6YkhN9pTZsfXAlRw7lGfUIVz+U= Subject key identifier: BD:2F:12:01:E0:FC:30:11:A5:EA:71:7C:6C:DA:42:B6:2C:3C:00:A6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B1004FBD4F2E8E90BE5C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:00:4f:bd:4f:2e:8e:90:be:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=717d4cff-156c-46f4-a97a-619d2d017110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:b5:e1:4b:89:43:76:11:39:78:96:fc:a0: 6c:1b:69:fa:d1:db:7a:2b:9f:d5:ac:ac:60:b1:5b: ee:45:34:54:89:d0:12:12:07:3e:a0:e9:35:a9:62: a1:ce:5e:7b:4c:db:8d:8a:2e:f2:84:cb:f1:7b:2b: fd:9d:64:1a:84:20:e4:80:7e:6c:ba:15:cd:e7:86: 53:58:48:1d:ff:b8:0c:da:ba:fb:e6:97:f4:25:84: 69:e2:c8:2e:38:6b:4a:17:a1:a1:33:a5:28:62:0b: 7c:53:85:29:d3:95:75:2b:93:cb:73:b1:b6:d2:a3: 98:18:3a:d5:5c:f1:8a:8b:9a:03:01:4d:77:ee:fa: ef:d0:48:11:23:04:ce:c8:b3:d6:0e:2c:9a:4d:ac: 2c:73:b9:7c:7f:32:0a:34:99:04:e1:47:c7:3e:5b: d1:da:00:fb:ca:9e:6f:05:c3:b2:b6:50:fc:14:f9: fc:e5:e4:f4:29:80:03:6e:b4:0f:4f:8b:28:71:d6: e0:a8:f9:85:8d:46:ea:e7:0a:c6:9b:00:a2:47:82: 77:76:a2:a5:75:44:9c:3a:aa:fa:1f:80:b8:c2:bb: 0d:f1:28:57:d8:1d:d2:5e:23:27:10:b9:fb:b0:ce: ff:5c:14:80:30:ec:d4:11:40:d3:ff:5b:78:84:77: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:12:01:E0:FC:30:11:A5:EA:71:7C:6C:DA:42:B6:2C:3C:00:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f7:93:4e:91:e6:8a:02:bf:f0:8e:dc:92:01:d3:03:a5:d0: 29:46:9a:27:a9:ca:33:22:d7:0f:e6:d9:4c:85:36:84:e8:9e: fc:bb:12:7d:c5:9b:85:13:ea:12:42:c6:52:77:3d:02:23:02: 4f:6c:c0:dc:83:af:f2:c0:ed:13:28:0b:59:fb:94:5f:c0:9a: f9:0f:e6:09:ed:5e:83:3c:77:7f:44:bd:0f:7e:90:bd:20:32: 87:fc:2a:3f:9c:77:cd:ec:65:29:6a:4c:f9:61:80:29:26:bf: 46:ea:83:3e:7c:e3:ba:b6:5c:40:32:a1:e8:46:20:44:6e:4e: 93:27:c9:01:a3:84:c2:fd:4e:29:c0:4f:c7:dd:b6:61:aa:0b: 73:c8:e4:8c:95:bd:50:c0:7c:85:42:bf:f7:3a:03:1a:16:87: 31:61:5d:0c:4f:29:79:6d:de:c1:6b:bb:7f:e3:b6:43:94:e5: 7b:6a:22:a9:af:60:4c:2d:dc:5f:fc:39:be:46:39:a5:1e:12: 35:e1:0a:71:fc:b2:c6:83:0c:04:d5:bb:6a:1d:eb:32:9b:c7: 23:31:43:61:a4:f6:96:b3:af:d8:f3:54:f1:9b:f0:e0:a8:66: 28:7f:c0:08:3d:2b:33:54:bc:09:f6:12:00:b9:16:24:64:b0: 78:a5:05:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sQBPvU8ujpC+XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk NzE3ZDRjZmYtMTU2Yy00NmY0LWE5N2EtNjE5ZDJkMDE3MTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAula14UuJQ3YROXiW/KBsG2n60dt6K5/VrKxg sVvuRTRUidASEgc+oOk1qWKhzl57TNuNii7yhMvxeyv9nWQahCDkgH5suhXN54ZT WEgd/7gM2rr75pf0JYRp4sguOGtKF6GhM6UoYgt8U4Up05V1K5PLc7G20qOYGDrV XPGKi5oDAU137vrv0EgRIwTOyLPWDiyaTawsc7l8fzIKNJkE4UfHPlvR2gD7yp5v BcOytlD8FPn85eT0KYADbrQPT4socdbgqPmFjUbq5wrGmwCiR4J3dqKldUScOqr6 H4C4wrsN8ShX2B3SXiMnELn7sM7/XBSAMOzUEUDT/1t4hHfgvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0vEgHg/DARpepxfGzaQrYsPACmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2UwYjQ5MzMtOTZhOC0z MDQ1LTljYzQtMDM0YmEyMjliZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj3k06R5ooCv/CO3JIB0wOl0ClGmiepyjMi1w/m2UyFNoTonvy7En3F m4UT6hJCxlJ3PQIjAk9swNyDr/LA7RMoC1n7lF/AmvkP5gntXoM8d39EvQ9+kL0g Mof8Kj+cd83sZSlqTPlhgCkmv0bqgz5847q2XEAyoehGIERuTpMnyQGjhML9TinA T8fdtmGqC3PI5IyVvVDAfIVCv/c6AxoWhzFhXQxPKXlt3sFru3/jtkOU5XtqIqmv YEwt3F/8Ob5GOaUeEjXhCnH8ssaDDATVu2od6zKbxyMxQ2Gk9pazr9jzVPGb8OCo Zih/wAg9KzNUvAn2EgC5FiRksHilBYM= -----END CERTIFICATE-----Generated at Sat Dec 20 12:09:42 2025 by rpki-client