This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/804642b8-77fe-3882-9b47-82e1a4603025.roa File: 804642b8-77fe-3882-9b47-82e1a4603025.roa (raw, json) Hash identifier: 7d9AkiV0yZIPyMJyGaTtdqErERpSForkpdqfG7BARcs= Subject key identifier: 08:C5:5B:BF:5A:54:77:3E:58:04:E9:EB:94:9A:7C:15:31:74:65:CE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC09940D2F5DADC1A566C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/804642b8-77fe-3882-9b47-82e1a4603025.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.20.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:09:94:0d:2f:5d:ad:c1:a5:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=8ba9b788-ae8c-415a-8076-271b14248bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:40:43:ef:65:39:b8:cc:7f:c0:22:d3:f4: a0:b1:b5:3f:fc:60:81:ca:88:2b:57:17:6d:13:fd: 87:7a:40:d4:df:57:46:16:d5:bd:0f:81:cb:ae:6d: fd:61:5c:5c:5e:e0:e5:0e:29:90:72:73:c3:a9:75: 78:00:ea:c8:37:cb:6e:d5:06:f5:0f:aa:0a:07:71: c5:a3:2c:dd:ed:d2:12:ef:a8:6d:53:4e:f0:c3:28: c6:76:8e:b6:f5:47:13:09:28:21:30:bf:d6:58:9b: 6a:d4:d5:6a:94:00:86:1a:db:0b:86:d3:4f:4f:89: 84:7a:ec:be:dc:1b:27:28:98:00:01:32:cd:7f:d5: 47:3c:08:db:66:fb:c7:e4:fb:a7:25:66:2e:2c:ad: 35:18:48:b2:58:60:55:b6:e9:70:23:08:70:6a:8a: ef:24:0a:20:cd:7e:5d:d7:71:83:85:a2:f7:1d:bb: 40:47:9f:5f:07:18:4a:0f:b7:09:bc:40:73:5d:29: aa:ce:bf:b5:35:43:d6:88:70:3c:2c:0e:60:f3:a3: de:7b:ee:73:d1:77:0a:08:08:df:99:59:da:0f:3c: 3d:b9:12:c1:2e:a5:ea:a6:c8:a4:a1:e1:7d:b8:32: 65:0e:f3:49:b0:43:47:63:60:8f:97:9d:dd:c3:ad: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C5:5B:BF:5A:54:77:3E:58:04:E9:EB:94:9A:7C:15:31:74:65:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/804642b8-77fe-3882-9b47-82e1a4603025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b5:49:c2:96:ac:3a:da:8e:80:16:08:01:63:a0:be:4f:f9: 4a:dd:46:75:1d:f7:0b:31:8e:63:4b:bb:5e:a8:83:28:d0:f9: 68:08:40:ca:a5:80:4c:a0:74:17:00:96:d9:60:18:1b:16:bf: a5:4c:b3:34:2e:e0:74:52:de:47:f1:1c:be:78:48:bf:2a:04: de:46:5c:d2:85:5c:6f:94:29:c9:a1:cf:76:d1:ac:df:3c:53: 7a:c7:fb:6f:13:bd:69:9a:07:e2:33:f7:a6:17:3b:3e:bd:4a: c9:32:b7:d3:d6:56:29:a5:c6:e4:7d:e0:4b:a4:48:97:e3:b9: ce:db:3d:96:1b:9e:ee:49:b5:4f:93:74:15:38:75:2e:52:41: a4:f5:a0:d7:73:17:52:72:84:01:e5:af:9d:07:b7:b2:11:7b: 4a:48:bf:90:f4:89:21:48:30:9a:c0:93:96:6d:19:a0:5a:88: 2f:23:9c:74:0a:12:a8:b0:df:4d:93:bb:87:36:7a:96:78:ed: 50:7d:66:23:45:5e:02:12:50:7f:9f:7c:43:71:59:52:08:d3: 3c:38:d5:60:fe:09:04:8a:d0:69:b0:aa:1a:7f:50:a0:a5:76: 12:a4:04:f2:21:60:5e:cf:7b:98:07:97:29:30:07:8f:a6:4b: 9a:c1:8c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AmUDS9drcGlZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OGJhOWI3ODgtYWU4Yy00MTVhLTgwNzYtMjcxYjE0MjQ4YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0JAQ+9lObjMf8Ai0/SgsbU//GCByogrVxdt E/2HekDU31dGFtW9D4HLrm39YVxcXuDlDimQcnPDqXV4AOrIN8tu1Qb1D6oKB3HF oyzd7dIS76htU07wwyjGdo629UcTCSghML/WWJtq1NVqlACGGtsLhtNPT4mEeuy+ 3BsnKJgAATLNf9VHPAjbZvvH5PunJWYuLK01GEiyWGBVtulwIwhwaorvJAogzX5d 13GDhaL3HbtAR59fBxhKD7cJvEBzXSmqzr+1NUPWiHA8LA5g86Pee+5z0XcKCAjf mVnaDzw9uRLBLqXqpsikoeF9uDJlDvNJsENHY2CPl53dw61aCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjFW79aVHc+WATp65SafBUxdGXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODA0NjQyYjgtNzdmZS0z ODgyLTliNDctODJlMWE0NjAzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO1ScKWrDrajoAWCAFjoL5P+UrdRnUd9wsxjmNLu16ogyjQ+WgIQMql gEygdBcAltlgGBsWv6VMszQu4HRS3kfxHL54SL8qBN5GXNKFXG+UKcmhz3bRrN88 U3rH+28TvWmaB+Iz96YXOz69Sskyt9PWVimlxuR94EukSJfjuc7bPZYbnu5JtU+T dBU4dS5SQaT1oNdzF1JyhAHlr50Ht7IRe0pIv5D0iSFIMJrAk5ZtGaBaiC8jnHQK Eqiw302Tu4c2epZ47VB9ZiNFXgISUH+ffENxWVII0zw41WD+CQSK0Gmwqhp/UKCl dhKkBPIhYF7Pe5gHlykwB4+mS5rBjCo= -----END CERTIFICATE-----Generated at Tue Dec 23 17:15:36 2025 by rpki-client