This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa File: 701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa (raw, json) Hash identifier: azcjDJcXYbw51cT6JBYSQEfw1gwnNOxckr/WXheVb2M= Subject key identifier: 07:B0:47:1D:A8:67:15:57:8C:20:6C:F1:9B:8C:0A:A4:42:D6:C2:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C215BBEDFBFEC30C65D578920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 30036 IP address blocks: 173.20.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:be:df:bf:ec:30:c6:5d:57:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=17ec0d93-a551-467a-8c8c-35606e1d75b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:3b:87:73:6a:dc:11:cf:dc:0f:35:c8:e2: e5:5f:ca:99:cf:02:87:00:20:17:b5:20:3c:d0:9d: 73:47:01:e6:12:ba:3a:8e:b3:49:c0:74:8d:56:2e: 15:67:ee:30:3b:08:58:a0:32:ed:14:67:2f:d0:d9: a9:0d:32:27:a5:a3:4a:72:02:a1:3b:c5:d4:91:7a: 46:ea:bb:de:78:5f:be:25:93:88:3f:04:31:c1:e7: 09:91:7b:02:54:47:6d:dd:7a:c7:c6:18:53:19:25: bf:85:8d:c2:54:e7:26:49:bb:c4:48:04:a9:c4:a3: e8:73:e2:07:58:fb:f3:f9:ab:68:d9:87:76:80:f1: 92:3c:da:88:cd:0a:e5:50:75:f1:44:de:6b:ec:30: 60:15:a7:3d:09:dc:99:73:9a:13:f4:e7:97:4e:70: df:c7:06:01:f9:10:4f:4e:73:42:ac:2f:d7:73:ba: c5:b8:46:a6:25:80:25:37:84:71:97:fe:66:8f:1d: be:aa:fc:be:22:f2:3b:76:aa:da:0c:02:94:45:2f: 08:55:74:b8:11:b5:7b:e7:1c:4d:58:5e:6f:e1:ea: c8:9a:e5:d9:2e:84:54:4e:59:02:01:b7:32:7d:48: ed:e9:07:06:c4:ab:24:11:66:7c:57:3b:44:ec:c6: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B0:47:1D:A8:67:15:57:8C:20:6C:F1:9B:8C:0A:A4:42:D6:C2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e1:2a:08:5b:4c:86:e2:54:58:74:a9:db:e6:52:d7:be:cc: a8:1b:03:e2:ba:0b:6b:2d:59:2c:f7:67:33:ee:c1:2d:0e:58: 1b:30:7c:db:80:ef:4b:df:c0:ad:71:9d:aa:8f:d8:82:f6:11: 90:04:74:30:0f:29:9a:90:84:ad:e8:da:e2:74:5c:c7:68:6d: fb:ae:11:7b:2e:82:16:e9:9e:2e:84:23:ed:64:32:59:6d:f2: e1:d7:7d:45:88:ac:8e:b0:53:12:36:25:d1:ef:5f:bb:12:d4: 27:85:93:a1:26:32:70:05:4d:2b:7e:9e:7c:6a:55:42:8f:2a: c5:81:18:36:87:db:f9:5c:12:7a:31:bd:ef:88:9e:c0:55:2d: 46:63:52:20:98:5a:90:73:9c:e7:9f:f0:bf:26:fe:4b:fa:a0: b3:98:f1:77:a9:81:c4:70:b3:38:c5:ed:49:7f:9f:0f:bc:e9: 47:70:90:c1:e4:97:af:f7:17:2b:7f:4a:e3:12:e0:3c:87:4e: 95:3e:ee:a9:20:62:28:14:0c:93:c2:61:c2:6f:9f:30:13:e0: 5a:6d:93:95:b2:8d:53:6a:39:b2:f7:46:d4:f3:07:f9:01:fd: e4:a5:fb:0c:6e:ae:86:a9:99:fb:70:27:f3:d9:1c:0a:9b:1b: a8:e1:38:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW77fv+wwxl1XiSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk MTdlYzBkOTMtYTU1MS00NjdhLThjOGMtMzU2MDZlMWQ3NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjk7h3Nq3BHP3A81yOLlX8qZzwKHACAXtSA8 0J1zRwHmEro6jrNJwHSNVi4VZ+4wOwhYoDLtFGcv0NmpDTInpaNKcgKhO8XUkXpG 6rveeF++JZOIPwQxwecJkXsCVEdt3XrHxhhTGSW/hY3CVOcmSbvESASpxKPoc+IH WPvz+ato2Yd2gPGSPNqIzQrlUHXxRN5r7DBgFac9CdyZc5oT9OeXTnDfxwYB+RBP TnNCrC/Xc7rFuEamJYAlN4Rxl/5mjx2+qvy+IvI7dqraDAKURS8IVXS4EbV75xxN WF5v4erImuXZLoRUTlkCAbcyfUjt6QcGxKskEWZ8VztE7MaK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAewRx2oZxVXjCBs8ZuMCqRC1sIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzAxODUwYzQtYjg4OC0z YjVmLWFjZDMtNDJiYjNjOGQ0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjhKghbTIbiVFh0qdvmUte+zKgbA+K6C2stWSz3ZzPuwS0OWBswfNuA 70vfwK1xnaqP2IL2EZAEdDAPKZqQhK3o2uJ0XMdobfuuEXsughbpni6EI+1kMllt 8uHXfUWIrI6wUxI2JdHvX7sS1CeFk6EmMnAFTSt+nnxqVUKPKsWBGDaH2/lcEnox ve+InsBVLUZjUiCYWpBznOef8L8m/kv6oLOY8XepgcRwszjF7Ul/nw+86UdwkMHk l6/3Fyt/SuMS4DyHTpU+7qkgYigUDJPCYcJvnzAT4Fptk5WyjVNqObL3RtTzB/kB /eSl+wxuroapmftwJ/PZHAqbG6jhOMA= -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:12 2025 by rpki-client