This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa File: 6debec62-1e74-3d75-b612-7239f8322514.roa (raw, json) Hash identifier: hFbMi5dwIw9bT92eVLSpgtOCXp6TQKPx73IcdPYi/fM= Subject key identifier: DD:D5:D2:A9:C1:CF:78:AC:0F:53:78:FE:A9:60:78:F9:0D:7D:53:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A67FD341D4255C99BBDC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:7f:d3:41:d4:25:5c:99:bb:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=e3abe660-2d35-46af-81a0-208d6b34b6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:bd:84:45:67:d1:a7:05:e6:9c:2d:b0:74: 6c:61:e9:e0:c4:3b:c4:8c:f3:e0:c7:95:a6:dc:75: c6:73:a8:57:3c:59:42:e5:91:7a:30:f6:32:06:9b: 65:0b:fa:c3:47:bf:19:ac:15:5d:a4:d4:db:92:a4: 2c:d2:46:05:c3:d4:c0:8a:ce:50:42:d1:ae:ee:03: 62:42:0e:3b:25:c0:35:84:30:b7:de:cd:9d:48:e0: 53:b6:da:11:bd:c1:41:9e:b4:8d:7f:55:98:ec:fd: cb:d0:27:ca:6a:70:44:0b:60:0d:dd:e7:95:43:be: cb:ee:e2:e6:98:66:6f:43:4e:82:00:b3:20:9f:4d: c0:2f:47:39:55:6f:c8:cc:41:58:22:bf:ae:4c:37: 38:32:07:f5:70:b3:8b:6b:f5:ba:d8:3c:ed:0c:b7: ab:53:c2:c9:50:7b:19:e8:3b:b9:2f:9d:24:a0:8c: d4:c2:04:6f:f6:cf:77:ee:4d:4d:9c:80:96:05:bc: a3:f8:f1:49:ad:e6:bc:a0:12:2c:b8:a1:c2:42:c4: 42:e9:90:ac:54:54:5c:82:57:4b:3d:dd:fa:1d:a6: 4b:95:e0:3b:e5:ca:e0:03:36:9b:aa:74:71:bf:ef: e7:32:7c:d1:1f:a2:78:f2:14:31:d1:1d:71:ec:00: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D5:D2:A9:C1:CF:78:AC:0F:53:78:FE:A9:60:78:F9:0D:7D:53:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ba:dd:b9:a6:5d:5f:42:1b:61:58:c4:74:81:48:84:41:70: a5:b1:62:80:26:6f:fa:5f:fc:3f:3e:f4:e6:9e:03:a8:42:8a: ab:ee:72:52:b2:cc:c5:f3:b9:2d:dd:78:c0:07:8d:43:5b:2f: c6:aa:53:15:86:13:a1:14:3d:af:f3:77:b0:f6:bd:ce:bc:82: 0b:53:cb:b9:6f:c4:ae:71:6d:67:21:f9:49:61:1c:59:73:4e: de:cb:09:03:f8:7a:75:29:d3:4a:3e:b1:b9:9a:c2:cf:49:50: 16:5e:c5:24:3d:5a:5f:7e:bf:99:ed:80:76:1e:a6:f3:97:16: d0:a2:4e:c7:75:43:bd:00:fd:1e:a5:1c:df:76:ca:04:59:b5: 1e:da:d5:c5:19:a1:bb:90:30:98:33:d7:43:26:4f:12:ef:2d: 95:41:45:1d:31:49:16:46:69:74:f6:65:ea:2a:45:a1:73:21: b2:b0:fc:0f:b8:e6:bc:66:52:ca:8b:9b:93:da:d9:d9:8f:c2: b5:4d:4d:38:56:d7:e9:da:c2:73:21:21:38:37:7a:3f:61:35: 50:9e:5e:3c:ac:83:1d:45:48:46:f8:d3:dd:de:0a:e0:70:75: e8:d9:a8:6f:0a:b4:98:4d:28:b5:ad:34:b6:c0:ce:4b:e6:6c: a9:51:21:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpn/TQdQlXJm73IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZTNhYmU2NjAtMmQzNS00NmFmLTgxYTAtMjA4ZDZiMzRiNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU29hEVn0acF5pwtsHRsYengxDvEjPPgx5Wm 3HXGc6hXPFlC5ZF6MPYyBptlC/rDR78ZrBVdpNTbkqQs0kYFw9TAis5QQtGu7gNi Qg47JcA1hDC33s2dSOBTttoRvcFBnrSNf1WY7P3L0CfKanBEC2AN3eeVQ77L7uLm mGZvQ06CALMgn03AL0c5VW/IzEFYIr+uTDc4Mgf1cLOLa/W62DztDLerU8LJUHsZ 6Du5L50koIzUwgRv9s937k1NnICWBbyj+PFJrea8oBIsuKHCQsRC6ZCsVFRcgldL Pd36HaZLleA75crgAzabqnRxv+/nMnzRH6J48hQx0R1x7ABphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3V0qnBz3isD1N4/qlgePkNfVODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmRlYmVjNjItMWU3NC0z ZDc1LWI2MTItNzIzOWY4MzIyNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW63bmmXV9CG2FYxHSBSIRBcKWxYoAmb/pf/D8+9OaeA6hCiqvuclKy zMXzuS3deMAHjUNbL8aqUxWGE6EUPa/zd7D2vc68ggtTy7lvxK5xbWch+UlhHFlz Tt7LCQP4enUp00o+sbmaws9JUBZexSQ9Wl9+v5ntgHYepvOXFtCiTsd1Q70A/R6l HN92ygRZtR7a1cUZobuQMJgz10MmTxLvLZVBRR0xSRZGaXT2ZeoqRaFzIbKw/A+4 5rxmUsqLm5Pa2dmPwrVNTThW1+nawnMhITg3ej9hNVCeXjysgx1FSEb4093eCuBw dejZqG8KtJhNKLWtNLbAzkvmbKlRIYA= -----END CERTIFICATE-----Generated at Tue Dec 23 20:51:47 2025 by rpki-client