This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa File: 91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa (raw, json) Hash identifier: KdLEedJ+8b7B6JHB5ETzhDv0g8Okx4pdm9VOMf1bN0Q= Subject key identifier: 84:11:88:3B:3C:A5:CB:DA:77:2B:C4:D9:9E:47:06:DE:7A:EA:79:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B108F3842A13CE83CEE000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:08:f3:84:2a:13:ce:83:ce:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=68b11ff5-0568-49cf-991d-66308e0e2b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:5b:8f:ad:64:6a:6c:a3:6c:09:8d:19:02: 6f:e2:90:54:e1:0f:d7:fc:76:a4:5f:22:38:a7:eb: 1e:1a:32:f4:90:b6:f2:d8:3e:f7:a9:a3:80:46:23: 92:08:91:9e:5f:b1:b2:e3:71:bb:32:a3:2d:96:e0: 44:11:09:93:3b:34:5e:f4:6f:d4:6d:7a:a9:8e:39: 34:a9:fa:70:ba:3d:b1:5d:15:e8:6b:05:c6:6e:ca: 29:a4:2a:e0:d2:ca:9b:16:24:c2:0f:42:cb:e4:f1: 95:e9:60:8c:93:9b:f4:be:bd:03:bc:b2:2f:53:b2: e9:69:1d:5b:5f:e7:df:12:29:b0:35:d1:05:a2:3e: 0d:b9:ce:48:af:2c:2a:ea:90:e3:af:42:7e:39:df: dd:7b:c7:1a:38:af:a0:7f:08:01:3b:75:62:54:fb: 61:27:7f:6f:81:25:4e:f9:4f:23:f1:f2:5c:d3:e8: df:1a:14:9a:1a:87:eb:e1:77:1d:3f:fa:66:bd:ce: 50:db:44:63:76:ac:8e:fa:17:e5:db:db:15:57:8e: 72:40:ea:66:09:91:d9:ca:c9:9f:c5:24:85:95:8b: 13:0d:53:01:13:0d:97:f0:1f:7b:1f:f3:fc:ec:1a: f9:aa:96:e1:38:c1:dc:2d:49:e1:0b:29:04:9b:82: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:11:88:3B:3C:A5:CB:DA:77:2B:C4:D9:9E:47:06:DE:7A:EA:79:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e8:74:eb:7f:c6:4a:59:81:de:8f:fc:ed:9f:cb:cd:eb:47: 30:5f:84:d0:38:6b:4f:8d:2f:d0:42:92:7b:1c:64:fb:cc:f1: fa:37:2c:29:9e:fb:ef:ed:91:2c:49:38:4e:10:22:70:db:92: d7:73:7d:97:87:00:18:22:43:a1:96:4c:8a:c3:dd:5f:f0:97: f2:18:1c:da:77:02:1e:30:ee:65:1d:a7:9b:c8:96:86:39:3b: 42:7a:22:24:ac:a7:f7:2f:8e:ae:02:e9:ab:15:d8:03:99:6e: 71:63:bc:8c:fc:6f:49:5e:e0:0f:c4:a5:c8:eb:ba:b2:50:79: f1:8a:cb:42:27:09:ae:f4:3f:e2:f8:d0:da:e5:d5:ce:fc:b0: c2:5a:66:35:27:13:89:26:83:9e:ed:ce:5f:d1:33:7e:43:cf: 19:17:68:fb:d4:34:72:bd:00:cd:e5:cf:b3:0a:03:74:40:aa: f7:05:88:a1:b9:e2:5c:ea:13:f6:1c:05:f4:4d:25:46:d0:01: f8:fc:02:5b:77:a6:bf:c1:15:08:8d:62:64:86:80:2f:8a:32: 2a:05:22:fc:58:ea:90:f6:11:11:d8:1a:e8:23:7f:33:68:b1: af:f3:7a:c6:37:33:0a:1c:2b:54:67:af:0b:2d:78:08:31:5d: 46:91:21:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sQjzhCoTzoPO4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk NjhiMTFmZjUtMDU2OC00OWNmLTk5MWQtNjYzMDhlMGUyYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotNbj61kamyjbAmNGQJv4pBU4Q/X/HakXyI4 p+seGjL0kLby2D73qaOARiOSCJGeX7Gy43G7MqMtluBEEQmTOzRe9G/UbXqpjjk0 qfpwuj2xXRXoawXGbsoppCrg0sqbFiTCD0LL5PGV6WCMk5v0vr0DvLIvU7LpaR1b X+ffEimwNdEFoj4Nuc5Irywq6pDjr0J+Od/de8caOK+gfwgBO3ViVPthJ39vgSVO +U8j8fJc0+jfGhSaGofr4XcdP/pmvc5Q20RjdqyO+hfl29sVV45yQOpmCZHZysmf xSSFlYsTDVMBEw2X8B97H/P87Br5qpbhOMHcLUnhCykEm4KNoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQRiDs8pcvadyvE2Z5HBt566nlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTE2NjNmOGQtOGE5OC0z OTg4LTk0Y2UtMzVjYjJlOGUxN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/odOt/xkpZgd6P/O2fy83rRzBfhNA4a0+NL9BCknscZPvM8fo3LCme ++/tkSxJOE4QInDbktdzfZeHABgiQ6GWTIrD3V/wl/IYHNp3Ah4w7mUdp5vIloY5 O0J6IiSsp/cvjq4C6asV2AOZbnFjvIz8b0le4A/EpcjrurJQefGKy0InCa70P+L4 0Nrl1c78sMJaZjUnE4kmg57tzl/RM35DzxkXaPvUNHK9AM3lz7MKA3RAqvcFiKG5 4lzqE/YcBfRNJUbQAfj8Alt3pr/BFQiNYmSGgC+KMioFIvxY6pD2ERHYGugjfzNo sa/zesY3MwocK1RnrwsteAgxXUaRIaU= -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:22 2025 by rpki-client