This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a51b2d86-1235-33df-b264-90cb3319b71c.roa File: a51b2d86-1235-33df-b264-90cb3319b71c.roa (raw, json) Hash identifier: pNufMjjVdpA3kH7V0P8g4UNwaly24OzuyBPcFEL5Xx4= Subject key identifier: 45:61:5C:A2:3A:26:DA:66:9F:1B:68:54:DB:57:80:B8:D6:50:D2:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC19C23E48D65BB0D159C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a51b2d86-1235-33df-b264-90cb3319b71c.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:19:c2:3e:48:d6:5b:b0:d1:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=135bba21-59d6-40f3-83e7-46d9b43d5c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:c9:85:1a:77:15:74:95:20:41:6c:a0:df: b0:60:ab:8d:dc:1a:31:a5:65:81:95:ce:2b:1a:e2: 20:c4:80:e3:56:af:1e:4b:39:5a:cf:09:be:73:57: 30:b6:45:79:60:61:26:9c:24:23:69:bb:cb:d2:bb: 9e:cc:12:72:6c:9d:74:67:57:3b:33:bd:2a:a3:31: aa:d2:55:4b:60:3a:ac:bc:30:58:77:43:05:2b:7d: 39:ed:5f:a5:53:38:a9:1a:dc:40:22:83:aa:10:be: 61:3f:63:3e:5b:95:ac:57:62:62:4c:24:f7:9c:48: cb:42:8d:0c:92:9d:cb:fa:d3:e6:92:0c:4a:78:e2: 7e:98:e7:77:39:d4:f8:93:66:e2:91:c2:a2:ba:3b: 97:6c:5a:79:a4:83:ca:7f:cc:d4:df:89:06:db:bb: 94:2d:80:9e:19:6e:cb:93:33:e8:42:12:d2:a0:d9: 1a:23:41:05:19:ca:74:f2:85:34:89:d0:4e:a7:14: 7b:d3:18:28:71:b4:e0:aa:90:ed:cc:2d:99:49:32: 59:b0:3d:94:25:34:b2:4c:81:73:95:58:34:a8:03: cf:06:17:55:b6:61:94:ba:b0:b8:36:4d:08:fd:0f: 1d:d1:66:08:69:8e:e9:9d:19:34:71:7f:08:78:75: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:61:5C:A2:3A:26:DA:66:9F:1B:68:54:DB:57:80:B8:D6:50:D2:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a51b2d86-1235-33df-b264-90cb3319b71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:41:6d:4b:9b:e4:e9:2d:ae:74:87:ed:52:fb:00:d9:9f:4e: bc:5b:6e:a3:9f:20:0b:6b:c0:6c:ac:f3:31:c3:3a:24:b1:db: 4f:5f:ee:e8:e9:13:d2:52:87:0b:d6:df:ac:f2:fe:19:91:c8: 41:f8:5d:b9:e3:d3:3a:41:72:4d:53:81:15:01:7c:4f:d6:b2: d9:d5:c2:76:3e:97:9b:80:b9:3d:39:4b:b1:e2:22:19:73:52: da:ff:45:60:4d:b4:01:70:59:36:b7:ae:a7:09:25:08:f7:97: 15:e2:fd:de:01:8c:cc:1c:2c:36:ce:6e:ff:01:75:6e:d7:26: a8:e5:72:54:f4:0f:44:47:e2:d2:7d:d3:28:95:66:d4:38:74: 3b:e6:73:a4:2a:42:f2:ed:80:f9:00:e5:c2:fc:ee:98:ca:d3: cd:0e:d4:61:be:dd:c7:b3:4f:3c:44:6b:4a:51:d0:ae:c6:2a: fd:46:57:a2:e5:3e:6e:f2:14:81:e5:94:2d:23:ea:2a:31:42: 1a:10:2b:3e:2c:4a:46:de:83:b6:1d:63:c4:a3:b8:14:85:d7: b5:fa:ba:20:10:ae:1d:98:e6:1b:41:1f:4f:59:ad:ba:95:0f: c6:76:86:52:93:45:c6:c6:83:da:13:91:f9:04:35:b1:47:e3: b7:f8:5a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BnCPkjWW7DRWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MTM1YmJhMjEtNTlkNi00MGYzLTgzZTctNDZkOWI0M2Q1YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdvJhRp3FXSVIEFsoN+wYKuN3BoxpWWBlc4r GuIgxIDjVq8eSzlazwm+c1cwtkV5YGEmnCQjabvL0ruezBJybJ10Z1c7M70qozGq 0lVLYDqsvDBYd0MFK3057V+lUzipGtxAIoOqEL5hP2M+W5WsV2JiTCT3nEjLQo0M kp3L+tPmkgxKeOJ+mOd3OdT4k2bikcKiujuXbFp5pIPKf8zU34kG27uULYCeGW7L kzPoQhLSoNkaI0EFGcp08oU0idBOpxR70xgocbTgqpDtzC2ZSTJZsD2UJTSyTIFz lVg0qAPPBhdVtmGUurC4Nk0I/Q8d0WYIaY7pnRk0cX8IeHX0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVhXKI6JtpmnxtoVNtXgLjWUNI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUxYjJkODYtMTIzNS0z M2RmLWIyNjQtOTBjYjMzMTliNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9BbUub5OktrnSH7VL7ANmfTrxbbqOfIAtrwGys8zHDOiSx209f7ujp E9JShwvW36zy/hmRyEH4Xbnj0zpBck1TgRUBfE/WstnVwnY+l5uAuT05S7HiIhlz Utr/RWBNtAFwWTa3rqcJJQj3lxXi/d4BjMwcLDbObv8BdW7XJqjlclT0D0RH4tJ9 0yiVZtQ4dDvmc6QqQvLtgPkA5cL87pjK080O1GG+3cezTzxEa0pR0K7GKv1GV6Ll Pm7yFIHllC0j6ioxQhoQKz4sSkbeg7YdY8SjuBSF17X6uiAQrh2Y5htBH09ZrbqV D8Z2hlKTRcbGg9oTkfkENbFH47f4Wn8= -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:50 2025 by rpki-client