This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa File: b4c2f46a-5c84-325b-befe-becef2227b02.roa (raw, json) Hash identifier: EzcnwPFB2q/Bhzv4t2yeoQsCYDb0WW7aqxTl+oWKlyo= Subject key identifier: 68:2D:8A:31:73:C4:35:9F:2F:24:0E:79:D5:E2:72:A3:B9:F0:12:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC1C81E588CFF774B5DB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1c:81:e5:88:cf:f7:74:b5:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2ad569d1-00bf-45dd-924a-dcf10888071d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:af:9f:55:44:ca:9f:6a:88:67:1e:8b:8b: fe:28:df:2e:44:60:e3:94:7f:bc:95:03:80:5f:8a: b9:b3:2a:2e:44:85:fb:49:89:b2:8f:0d:b3:c1:56: ac:f8:f6:f9:e9:99:70:f3:da:8c:44:01:c4:3f:43: 7d:b1:1d:1b:72:ce:38:2f:26:84:ac:f7:7b:86:d7: 0d:3f:27:a2:9e:83:6a:32:c6:30:2e:e9:35:0a:41: a6:e4:a4:95:78:4e:cd:ba:f4:17:2a:ff:09:d4:37: 6d:5a:c0:cf:f1:88:40:ce:12:d1:ae:02:b3:d4:c7: a6:21:09:37:7a:3e:1e:44:2c:2d:2b:a2:7c:f9:f4: 85:9a:c6:bf:a4:29:ce:82:cf:3f:b8:cf:ff:b1:7a: 57:b4:f3:eb:0e:4d:fc:e5:1c:b9:e2:69:55:6c:8c: 20:b6:f5:0c:0a:51:a5:33:25:5c:18:54:df:1a:8a: 03:af:37:17:26:9e:6d:87:ab:f2:95:d7:d3:4f:e2: 4f:e1:8c:c7:07:c1:28:b1:f6:40:bf:04:58:f9:b3: b6:20:7e:e3:7e:96:7c:84:b4:d9:f4:22:49:71:86: 84:66:ee:fe:5e:4a:87:69:8e:36:d1:4d:50:d0:1f: 24:33:43:4e:de:8c:d5:ae:f4:14:61:8a:35:d5:46: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2D:8A:31:73:C4:35:9F:2F:24:0E:79:D5:E2:72:A3:B9:F0:12:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bf:51:a9:d2:1a:ea:8a:b0:9a:b4:de:d6:4b:ce:58:de:9b: 9e:2f:ab:4a:0e:70:de:1f:aa:31:8d:0d:76:42:0d:ae:4f:6b: f9:73:b2:5f:c2:c4:24:11:18:69:8e:df:6e:8e:20:83:e4:70: ba:0a:36:5a:b7:e7:48:22:16:b6:68:7b:22:d9:a0:90:15:ea: 3a:ea:f1:21:cc:d9:a1:5e:df:a8:bf:9f:7d:19:f4:56:1e:41: 0e:66:54:ab:36:ae:32:a2:64:2e:a0:87:e0:48:e8:bb:75:c3: 91:02:eb:a6:20:1e:97:f6:86:fa:ba:18:17:48:ff:23:42:6e: a6:5a:ec:b3:3e:14:02:1e:45:38:5a:d5:8a:75:6e:b9:c6:9b: c9:a4:05:3d:0b:b1:13:9d:57:7a:f5:8a:30:27:ec:83:41:ff: 8b:41:ec:98:fe:60:a3:6a:50:5e:22:9c:e9:bc:d9:c6:2e:66: a0:56:48:c8:7e:99:f9:39:48:18:f3:b7:72:44:52:e7:9b:53: 6d:4b:67:f0:cb:98:bc:e8:70:d7:3e:47:f7:c9:40:eb:1b:eb: e7:06:a8:60:45:0d:28:9b:02:4b:cf:3b:0d:cb:8e:70:52:44: fd:65:b8:e2:f2:77:bc:19:8a:f9:cd:a0:39:9a:9c:65:3e:d1: 57:fa:30:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3ByB5YjP93S124AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MmFkNTY5ZDEtMDBiZi00NWRkLTkyNGEtZGNmMTA4ODgwNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozKvn1VEyp9qiGcei4v+KN8uRGDjlH+8lQOA X4q5syouRIX7SYmyjw2zwVas+Pb56Zlw89qMRAHEP0N9sR0bcs44LyaErPd7htcN PyeinoNqMsYwLuk1CkGm5KSVeE7NuvQXKv8J1DdtWsDP8YhAzhLRrgKz1MemIQk3 ej4eRCwtK6J8+fSFmsa/pCnOgs8/uM//sXpXtPPrDk385Ry54mlVbIwgtvUMClGl MyVcGFTfGooDrzcXJp5th6vyldfTT+JP4YzHB8EosfZAvwRY+bO2IH7jfpZ8hLTZ 9CJJcYaEZu7+XkqHaY420U1Q0B8kM0NO3ozVrvQUYYo11UZHiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgtijFzxDWfLyQOedXicqO58BIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjRjMmY0NmEtNWM4NC0z MjViLWJlZmUtYmVjZWYyMjI3YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy/UanSGuqKsJq03tZLzljem54vq0oOcN4fqjGNDXZCDa5Pa/lzsl/C xCQRGGmO326OIIPkcLoKNlq350giFrZoeyLZoJAV6jrq8SHM2aFe36i/n30Z9FYe QQ5mVKs2rjKiZC6gh+BI6Lt1w5EC66YgHpf2hvq6GBdI/yNCbqZa7LM+FAIeRTha 1Yp1brnGm8mkBT0LsROdV3r1ijAn7INB/4tB7Jj+YKNqUF4inOm82cYuZqBWSMh+ mfk5SBjzt3JEUuebU21LZ/DLmLzocNc+R/fJQOsb6+cGqGBFDSibAkvPOw3LjnBS RP1luOLyd7wZivnNoDmanGU+0Vf6MAE= -----END CERTIFICATE-----Generated at Mon Dec 22 14:05:14 2025 by rpki-client