This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa File: 67520c87-041c-3548-bd97-ae4c3f09e00e.roa (raw, json) Hash identifier: dgtX9d8ghlwCy2WDSG8Vy+mGORbw9PP0tPV6DNA1Uhg= Subject key identifier: A0:C5:12:DC:29:A1:A7:61:17:C5:CF:E5:8A:64:95:07:D0:48:29:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871DAD7C6DBA4ACA11BB540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:da:d7:c6:db:a4:ac:a1:1b:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=0ef4a22c-388c-44dc-8bb0-c68fd9201471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:12:3f:76:f9:30:ed:94:51:98:1e:e3:8a: d1:7b:5d:46:ef:3e:93:ae:d9:a3:52:32:05:1f:7a: 4a:38:7d:9f:3e:b2:64:6c:70:92:be:d0:01:19:64: d3:ab:7d:18:5f:b9:95:1b:54:d6:26:c2:5a:53:af: 03:49:ca:87:6d:51:07:70:d7:91:a4:46:33:76:6a: 9a:a4:5a:99:ba:36:72:cf:91:08:4a:e0:34:33:9d: 76:0d:07:0a:65:a2:e0:32:00:16:5b:80:8b:70:cb: e6:99:c6:b5:47:7f:95:b3:a3:ee:11:d7:3f:ac:58: 8f:e9:88:ab:51:9c:26:b8:68:cc:54:f6:f1:b5:b6: 8f:5e:8a:80:88:25:2e:46:50:ba:5f:ef:23:20:18: a3:39:f0:5d:93:54:2e:c4:c4:0e:7e:cc:e4:99:c9: c9:e4:b0:f5:8b:c9:77:4d:89:03:f5:f9:e6:ce:c6: c8:31:51:89:be:f9:64:f6:30:d7:e7:be:9e:53:ef: 3f:1c:40:68:cf:9e:b9:d9:60:08:15:d9:94:24:ac: 94:82:e6:40:20:8d:64:27:ba:e5:84:57:2a:cf:ce: 90:e6:f4:2f:8d:b1:bb:ea:81:cc:f6:54:07:bd:03: 65:4d:02:8f:b6:96:69:22:3f:67:85:39:82:5f:47: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:12:DC:29:A1:A7:61:17:C5:CF:E5:8A:64:95:07:D0:48:29:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c3:13:e0:d0:a6:dd:80:e2:ea:7c:30:37:9f:22:20:6b:03: 74:53:cb:de:d1:c2:4d:65:85:9d:79:b7:6d:95:69:1e:a3:4b: 83:ac:20:7a:8c:4b:0a:2b:b4:d1:39:5e:4d:9f:3d:66:6a:c0: bb:ba:00:ae:40:57:a0:6d:bc:15:cd:04:09:34:24:57:62:15: 48:7a:45:3d:16:ff:53:62:ea:59:b4:c6:d2:a8:da:7c:8c:27: 0a:7a:63:31:9e:ed:8c:b5:4c:e7:2f:6b:72:49:7f:ee:1d:7a: e0:c8:54:b6:15:5c:1e:7c:ef:64:00:35:6c:38:b6:fa:9c:84: 31:5f:54:ae:72:08:46:c6:85:54:97:cd:9c:b9:eb:f9:fd:07: f3:33:4b:69:c1:1f:f7:ff:ae:c2:56:26:4a:ef:4f:64:42:7d: 49:3b:72:1b:fb:75:b4:cd:52:07:01:f7:71:3f:95:ba:59:d7: c5:cb:9b:8c:e1:f2:08:e2:d0:d2:66:c6:7e:c4:d5:fc:ee:4b: 37:8d:7a:fd:2e:5b:ac:ee:d8:0b:f2:f3:d4:a2:04:cb:21:03: e7:d6:c6:f8:ae:6e:a5:74:07:0a:30:a1:05:ae:1d:88:6a:84: 11:32:71:b6:b3:89:cb:b6:22:d4:13:0d:e3:b9:c4:40:27:98: 15:21:3f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcdrXxtukrKEbtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MGVmNGEyMmMtMzg4Yy00NGRjLThiYjAtYzY4ZmQ5MjAxNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMSP3b5MO2UUZge44rRe11G7z6TrtmjUjIF H3pKOH2fPrJkbHCSvtABGWTTq30YX7mVG1TWJsJaU68DScqHbVEHcNeRpEYzdmqa pFqZujZyz5EISuA0M512DQcKZaLgMgAWW4CLcMvmmca1R3+Vs6PuEdc/rFiP6Yir UZwmuGjMVPbxtbaPXoqAiCUuRlC6X+8jIBijOfBdk1QuxMQOfszkmcnJ5LD1i8l3 TYkD9fnmzsbIMVGJvvlk9jDX576eU+8/HEBoz5652WAIFdmUJKyUguZAII1kJ7rl hFcqz86Q5vQvjbG76oHM9lQHvQNlTQKPtpZpIj9nhTmCX0c0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDFEtwpoadhF8XP5YpklQfQSClrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjc1MjBjODctMDQxYy0z NTQ4LWJkOTctYWU0YzNmMDllMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/DE+DQpt2A4up8MDefIiBrA3RTy97Rwk1lhZ15t22VaR6jS4OsIHqM SwortNE5Xk2fPWZqwLu6AK5AV6BtvBXNBAk0JFdiFUh6RT0W/1Ni6lm0xtKo2nyM Jwp6YzGe7Yy1TOcva3JJf+4deuDIVLYVXB5872QANWw4tvqchDFfVK5yCEbGhVSX zZy56/n9B/MzS2nBH/f/rsJWJkrvT2RCfUk7chv7dbTNUgcB93E/lbpZ18XLm4zh 8gji0NJmxn7E1fzuSzeNev0uW6zu2Avy89SiBMshA+fWxviubqV0BwowoQWuHYhq hBEycbazicu2ItQTDeO5xEAnmBUhP8g= -----END CERTIFICATE-----Generated at Wed Dec 24 10:33:04 2025 by rpki-client