This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa File: 9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa (raw, json) Hash identifier: xHkthxsQzpYWSomdThYhss89Ppe6TLtGhoWARsZqv2I= Subject key identifier: 18:43:55:C6:28:E5:08:D2:77:C8:7F:27:F6:B4:45:52:37:B5:C9:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B118C50435A10D0BF52C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:18:c5:04:35:a1:0d:0b:f5:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=522db2d7-42fb-41c8-ae76-9e9ff6139df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:85:9d:de:8b:43:dc:76:26:1e:e1:83:4f: 3a:73:63:3b:82:a0:c9:6e:bc:ae:1a:60:cd:9b:af: 25:21:01:75:7b:92:78:fb:8b:79:aa:2e:e7:eb:ac: 33:10:d9:72:cb:48:53:5d:0d:a8:00:7e:99:ce:38: df:66:f9:58:39:b4:12:06:a9:a9:ac:eb:df:03:b1: 4d:13:69:e5:32:a0:10:08:c1:79:c7:69:ab:35:fd: 29:ee:cd:07:b7:bf:f3:bd:ae:cf:84:3c:00:a3:04: c9:37:26:b0:ea:47:79:ca:81:d2:e1:07:60:02:6d: 32:a3:56:2b:9c:41:b2:24:42:73:93:3c:37:27:50: 4a:e1:57:ff:c1:a8:97:af:e3:d8:72:e1:bf:70:7f: 84:40:1b:8b:9a:8a:47:11:23:70:b1:38:3e:b9:1a: a7:37:21:92:c1:77:82:b9:51:77:95:54:13:9c:f7: fe:42:70:9c:34:41:9b:93:95:01:c1:bf:2a:b4:9d: 71:21:1f:17:11:95:76:d6:d9:55:fe:9d:b4:90:b9: 40:09:71:e2:11:1c:13:d8:1f:49:98:1d:d3:60:58: b7:0a:c5:42:e9:c7:0b:25:9a:6c:28:40:87:d2:35: d9:7f:db:24:ee:36:e2:5c:10:e1:04:32:12:f3:e0: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:43:55:C6:28:E5:08:D2:77:C8:7F:27:F6:B4:45:52:37:B5:C9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6e:cb:33:5e:a8:ef:a4:14:c9:9e:29:b7:bb:8e:3f:de:fb: 49:8c:3c:59:d0:90:fe:3c:71:03:3b:de:dc:9a:e6:0c:40:b8: a1:6d:41:7c:bf:45:22:59:42:01:5f:bb:4a:de:14:62:e2:64: ea:ad:1b:38:94:1b:a8:59:d7:dd:f4:ff:26:e7:71:7e:1e:41: fa:bc:20:fa:72:07:e9:15:32:e6:a2:9c:ca:7f:36:9c:f8:37: 3b:61:0f:2f:02:33:a9:61:7b:56:4c:76:49:21:9a:61:8d:d3: 12:ff:3d:64:0a:cd:ae:5b:e3:32:53:c4:a3:33:10:43:a0:81: d3:3a:65:ef:61:9e:08:5d:20:81:49:69:d2:12:6a:df:03:61: c3:28:3c:91:71:8a:bf:c6:83:22:41:3e:06:9a:5c:de:a0:b4: 56:dd:3e:03:1c:f2:a0:d4:fa:91:1a:1e:9d:f0:d2:5b:69:d4: 5a:bd:3b:7c:fd:ab:45:f2:4d:81:22:c8:6d:bf:b2:8b:63:40: 23:f1:c0:ed:15:a8:1e:b0:4c:ec:58:3e:12:5f:d1:94:bc:cf: 1a:c5:d8:45:ed:3b:90:31:f9:1a:71:e7:c1:91:77:69:69:f6: 6c:fe:4b:9f:56:83:a3:62:9a:7c:89:2e:a5:c7:77:e4:9e:48: 82:ab:7a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sRjFBDWhDQv1LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk NTIyZGIyZDctNDJmYi00MWM4LWFlNzYtOWU5ZmY2MTM5ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVSFnd6LQ9x2Jh7hg086c2M7gqDJbryuGmDN m68lIQF1e5J4+4t5qi7n66wzENlyy0hTXQ2oAH6ZzjjfZvlYObQSBqmprOvfA7FN E2nlMqAQCMF5x2mrNf0p7s0Ht7/zva7PhDwAowTJNyaw6kd5yoHS4QdgAm0yo1Yr nEGyJEJzkzw3J1BK4Vf/waiXr+PYcuG/cH+EQBuLmopHESNwsTg+uRqnNyGSwXeC uVF3lVQTnPf+QnCcNEGbk5UBwb8qtJ1xIR8XEZV21tlV/p20kLlACXHiERwT2B9J mB3TYFi3CsVC6ccLJZpsKECH0jXZf9sk7jbiXBDhBDIS8+C1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhDVcYo5QjSd8h/J/a0RVI3tclyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWJkNjdiMzYtOGI4YS0z NzMyLWJkOWYtMmVmZThlMmFiNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRuyzNeqO+kFMmeKbe7jj/e+0mMPFnQkP48cQM73tya5gxAuKFtQXy/ RSJZQgFfu0reFGLiZOqtGziUG6hZ1930/ybncX4eQfq8IPpyB+kVMuainMp/Npz4 NzthDy8CM6lhe1ZMdkkhmmGN0xL/PWQKza5b4zJTxKMzEEOggdM6Ze9hnghdIIFJ adISat8DYcMoPJFxir/GgyJBPgaaXN6gtFbdPgMc8qDU+pEaHp3w0ltp1Fq9O3z9 q0XyTYEiyG2/sotjQCPxwO0VqB6wTOxYPhJf0ZS8zxrF2EXtO5Ax+Rpx58GRd2lp 9mz+S59Wg6NimnyJLqXHd+SeSIKreqM= -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:29 2025 by rpki-client