This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa File: 42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa (raw, json) Hash identifier: tUsPmgVtVJNBpf2qyv0SmRGmJKo7aTjLhp+fYtbdzhs= Subject key identifier: BC:5B:00:C2:DD:70:45:8A:DE:3E:92:E3:3A:AB:6C:DF:E9:FE:52:A0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C26F0EE628738375561077640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 19905 IP address blocks: 173.21.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:ee:62:87:38:37:55:61:07:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=b472b6ec-857b-4f73-b7ea-7ce67f405371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:c0:f3:1e:e2:f0:6c:04:11:7d:77:79:4e: 4a:5a:6d:8c:e3:4b:a6:cc:7e:16:97:f8:5f:65:94: 62:03:b1:3f:75:15:77:4e:ee:a4:5f:33:8f:29:8a: 8d:80:d6:f9:47:33:32:46:c0:4e:36:5c:e4:3f:d6: 03:07:a5:42:76:27:c1:cd:bc:9a:d1:65:13:e5:2b: 07:f5:15:2f:79:17:e0:49:b1:6c:6d:74:0e:7b:7c: 97:91:b9:eb:5e:b3:fb:a6:72:74:a8:66:9d:f3:aa: a9:c4:bd:1d:27:5e:25:e5:ea:38:1a:6d:83:db:fa: 9e:4d:3d:28:60:8c:1c:1c:d4:f7:de:54:63:a9:c5: 31:85:71:ac:6b:b7:89:b4:7b:9b:5c:83:c5:a0:01: bd:ea:59:fc:96:81:c1:f1:7a:dc:19:1d:92:a7:75: 8b:3c:74:7f:98:02:d2:fa:c4:e3:7c:0b:a9:29:75: 58:46:06:1a:92:1c:e8:ce:da:d0:da:3f:b8:f4:59: 61:b2:9f:93:59:26:56:1e:66:e0:9b:71:3f:f3:01: f1:ac:ce:92:cf:7d:56:9d:db:4b:af:51:1e:d7:dc: 7e:1e:01:9e:dc:77:53:1e:fc:2f:30:f4:28:b3:a9: db:19:b5:33:6a:8a:eb:94:c2:45:3f:9f:d5:8f:ff: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5B:00:C2:DD:70:45:8A:DE:3E:92:E3:3A:AB:6C:DF:E9:FE:52:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a2:f0:2e:e3:f5:c7:e4:d0:c3:88:23:2c:98:0b:18:93:9a: 41:35:c8:08:fd:41:07:b5:fb:e7:3a:bd:14:c3:82:e6:41:6b: 79:cf:b7:4b:f6:65:61:ff:c4:4d:e2:93:4f:39:4d:64:b2:5d: 87:3f:3b:9b:f2:47:64:3f:7c:00:f2:48:69:d5:28:5f:36:aa: a9:d9:1a:8a:dd:9f:82:0b:71:36:bb:10:84:a7:a2:ca:d9:04: 89:20:e3:1f:1d:9a:30:be:e1:4a:0f:27:45:0c:da:24:bb:88: 28:df:c3:bb:ae:51:7a:6b:a5:ae:0c:2c:ec:f8:3a:73:ca:c6: f6:8b:db:db:ef:30:cb:42:b8:d2:b1:0e:28:a3:6c:c3:76:71: 65:1e:ed:2f:86:01:ac:ff:4a:e6:6e:af:68:ae:8f:eb:47:ea: f1:cf:e6:2a:53:d8:43:eb:42:ae:47:9d:f9:12:e7:38:73:dd: b2:66:6b:00:bd:29:dd:67:e6:76:6e:80:c8:1a:7f:2c:aa:74: 28:bf:bb:a1:fc:fb:68:55:3d:f2:f5:25:2a:32:e0:d4:e8:2b: 1e:4e:79:5f:10:60:ca:f0:fc:a5:ff:fd:9d:05:b9:96:c6:02: d3:14:78:95:5e:0c:c8:a2:1c:8e:cb:cb:84:75:bc:3b:e2:cc: e7:0f:83:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8O5ihzg3VWEHdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk YjQ3MmI2ZWMtODU3Yi00ZjczLWI3ZWEtN2NlNjdmNDA1MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplfA8x7i8GwEEX13eU5KWm2M40umzH4Wl/hf ZZRiA7E/dRV3Tu6kXzOPKYqNgNb5RzMyRsBONlzkP9YDB6VCdifBzbya0WUT5SsH 9RUveRfgSbFsbXQOe3yXkbnrXrP7pnJ0qGad86qpxL0dJ14l5eo4Gm2D2/qeTT0o YIwcHNT33lRjqcUxhXGsa7eJtHubXIPFoAG96ln8loHB8XrcGR2Sp3WLPHR/mALS +sTjfAupKXVYRgYakhzoztrQ2j+49Flhsp+TWSZWHmbgm3E/8wHxrM6Sz31WndtL r1Ee19x+HgGe3HdTHvwvMPQos6nbGbUzaorrlMJFP5/Vj/8ttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxbAMLdcEWK3j6S4zqrbN/p/lKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDJjOWMxYTktYmI4NC0z YWNhLTg0MWItZWMzODJkZDZlNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGui8C7j9cfk0MOIIyyYCxiTmkE1yAj9QQe1++c6vRTDguZBa3nPt0v2 ZWH/xE3ik085TWSyXYc/O5vyR2Q/fADySGnVKF82qqnZGordn4ILcTa7EISnosrZ BIkg4x8dmjC+4UoPJ0UM2iS7iCjfw7uuUXprpa4MLOz4OnPKxvaL29vvMMtCuNKx DiijbMN2cWUe7S+GAaz/SuZur2iuj+tH6vHP5ipT2EPrQq5HnfkS5zhz3bJmawC9 Kd1n5nZugMgafyyqdCi/u6H8+2hVPfL1JSoy4NToKx5OeV8QYMrw/KX//Z0FuZbG AtMUeJVeDMiiHI7Ly4R1vDvizOcPgzw= -----END CERTIFICATE-----Generated at Fri Dec 19 20:13:00 2025 by rpki-client