This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa File: c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa (raw, json) Hash identifier: cwiG6HCTkR5+FPak5ojkVh008ak3bxg8vT2FSxptRAw= Subject key identifier: 2F:C0:2F:FE:0F:C9:B4:A2:F9:AF:B8:4F:5E:EB:9C:5B:31:1C:73:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A69D404E0F5113F0E98480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:9d:40:4e:0f:51:13:f0:e9:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5f78702d-7847-45b5-90a4-b56798e18af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:08:de:8f:bd:82:7f:f5:4e:51:4f:22:9d: d3:6e:5a:42:ba:c4:91:3d:d8:79:d2:3e:73:a4:36: 26:58:47:8f:34:61:65:d7:17:5d:4d:d8:33:26:21: bd:22:47:95:73:c9:4c:08:1a:8e:6c:8b:3b:36:ac: d4:82:33:f7:02:0d:4a:53:37:4c:b7:4f:37:45:8d: 81:de:2e:00:f3:29:c8:5e:a3:ff:e7:5c:18:d1:0b: b9:fc:ea:42:2d:af:71:ef:12:09:be:f9:b0:e6:ab: 8a:8f:21:6b:37:21:ae:6e:64:15:3e:21:9c:5e:01: ac:b6:1d:b0:48:2b:7c:34:05:b6:1a:14:ba:ec:16: 23:00:24:1d:de:22:13:f8:06:71:0d:2a:3e:50:de: c4:86:55:3e:ab:91:8e:69:92:8d:4c:a8:c5:36:0f: 66:15:9f:e8:62:48:a9:e4:b6:b7:cf:93:e7:1e:7c: c1:83:53:91:08:e4:0a:f2:1e:4a:f9:ca:bb:6b:65: 7b:c4:6b:35:64:7d:1f:ec:a7:a5:8d:94:ab:00:ee: e1:47:1e:de:13:21:0e:54:54:2f:d1:ab:d3:d7:fa: a3:81:56:a4:e9:41:42:f0:bf:1c:37:e7:61:e5:a2: 1d:e8:2b:2d:04:82:eb:17:ba:3d:df:41:ce:f6:99: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C0:2F:FE:0F:C9:B4:A2:F9:AF:B8:4F:5E:EB:9C:5B:31:1C:73:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d9:7e:4a:d7:53:c8:50:b8:57:b8:d2:39:ca:63:8e:cc:a3: 30:b3:3d:83:fc:a8:47:45:2b:ba:a4:74:25:50:29:c2:b9:83: ac:ab:f6:de:67:57:7d:21:ca:f6:8c:a3:c1:57:6e:c1:9a:01: 13:35:8e:c0:80:2a:5c:4a:b4:eb:d7:72:67:55:38:9f:c6:9d: ee:a0:a0:cd:f7:ef:02:66:45:f0:aa:f9:82:79:92:9c:76:fa: 5a:1b:14:f9:35:cb:89:df:e8:26:bd:97:47:e2:6f:b3:ef:1c: ff:d9:d7:a4:43:86:24:2b:44:7d:52:73:d4:6f:f6:e9:af:a5: 3f:1b:41:08:b7:35:e0:92:fc:1a:c6:cc:67:f8:20:ae:d1:03: 32:0f:ec:57:b6:29:d6:f0:30:e7:4f:d5:55:7f:d4:53:3b:64: 78:c1:05:c2:26:3a:0a:4e:b1:f2:59:6b:b4:49:59:f1:6d:26: f7:ea:3d:db:cb:7e:1e:63:12:8f:33:87:85:a4:0d:df:8f:a1: f6:16:4c:44:f5:32:7c:85:14:6f:2e:70:e9:78:34:11:6c:c2: cf:05:71:de:b9:68:bf:23:d1:d9:7f:da:3e:63:81:87:12:fc: 48:49:f7:30:bb:0e:68:54:55:5e:2a:b4:d0:c4:92:35:59:c3: 98:5c:f6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpp1ATg9RE/DphIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NWY3ODcwMmQtNzg0Ny00NWI1LTkwYTQtYjU2Nzk4ZTE4YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5woI3o+9gn/1TlFPIp3TblpCusSRPdh50j5z pDYmWEePNGFl1xddTdgzJiG9IkeVc8lMCBqObIs7NqzUgjP3Ag1KUzdMt083RY2B 3i4A8ynIXqP/51wY0Qu5/OpCLa9x7xIJvvmw5quKjyFrNyGubmQVPiGcXgGsth2w SCt8NAW2GhS67BYjACQd3iIT+AZxDSo+UN7EhlU+q5GOaZKNTKjFNg9mFZ/oYkip 5La3z5PnHnzBg1ORCOQK8h5K+cq7a2V7xGs1ZH0f7KeljZSrAO7hRx7eEyEOVFQv 0avT1/qjgVak6UFC8L8cN+dh5aId6CstBILrF7o930HO9pmbhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/AL/4PybSi+a+4T17rnFsxHHP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzlhMzJkMmMtYTNkOS0z ZWUzLWJmOTktNTFlYjE3NWQwNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDZfkrXU8hQuFe40jnKY47MozCzPYP8qEdFK7qkdCVQKcK5g6yr9t5n V30hyvaMo8FXbsGaARM1jsCAKlxKtOvXcmdVOJ/Gne6goM337wJmRfCq+YJ5kpx2 +lobFPk1y4nf6Ca9l0fib7PvHP/Z16RDhiQrRH1Sc9Rv9umvpT8bQQi3NeCS/BrG zGf4IK7RAzIP7Fe2KdbwMOdP1VV/1FM7ZHjBBcImOgpOsfJZa7RJWfFtJvfqPdvL fh5jEo8zh4WkDd+PofYWTET1MnyFFG8ucOl4NBFsws8Fcd65aL8j0dl/2j5jgYcS /EhJ9zC7DmhUVV4qtNDEkjVZw5hc9nY= -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:21 2025 by rpki-client