This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa File: 09de78f4-20f4-3844-a639-a328eb5db662.roa (raw, json) Hash identifier: JLmZ3Ckj/pPjt8jmneDTQqAzqMDajkObNnxdUgBsHIY= Subject key identifier: 4A:BD:1D:F8:A1:9E:2F:6B:EA:72:5A:79:26:B5:EA:61:BE:3B:42:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A83EC5451848B902A09CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:3e:c5:45:18:48:b9:02:a0:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=bd65aa6e-b637-401a-a79f-41f9e372257f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:74:36:a2:42:66:0b:1f:17:97:48:ef:e0: a7:1a:26:64:9d:42:ca:d3:be:0d:99:94:54:20:3b: e4:28:3f:32:b3:e4:fe:a3:1c:6c:43:44:e8:39:9d: 15:21:d3:0b:dc:68:2e:3f:d8:b3:a5:fe:20:3f:d0: b9:83:04:8a:4d:44:db:82:39:a6:e8:c8:a9:a8:15: 45:14:6a:84:2e:5f:a7:e8:24:00:50:8c:be:21:12: c1:8d:16:48:20:20:ab:f9:e8:82:b2:40:d4:7a:6e: d9:c1:fe:2e:44:92:86:30:49:8a:91:b5:75:1b:d7: 02:0a:b4:9a:13:a4:e5:c8:91:23:ef:e0:ef:c0:d4: 27:98:7d:09:dd:17:f9:6b:ef:5f:2f:4c:f0:77:01: 16:b7:05:d3:53:71:6e:2c:5e:1e:18:e4:09:7d:2e: 4b:02:b0:c1:c4:5a:eb:e7:15:e0:3c:a8:1d:58:6b: bf:56:09:18:d7:55:73:47:b2:29:a4:d6:9e:be:43: ec:be:57:93:44:9d:16:4e:48:09:0f:d8:c5:91:3d: 32:c8:ce:ed:68:21:ad:6b:e7:26:45:5f:b2:fe:ff: 21:83:d4:1b:e6:55:0b:73:37:4b:ff:3f:b4:3b:e7: 48:b1:35:dc:dd:3d:ab:ee:63:41:41:92:75:59:8b: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BD:1D:F8:A1:9E:2F:6B:EA:72:5A:79:26:B5:EA:61:BE:3B:42:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f3:f3:b2:a0:4f:cc:63:7f:3a:1e:4f:89:2e:d8:78:c0:26: 45:51:ad:31:ab:ed:1c:2e:35:f6:34:9f:00:28:6e:c2:da:7e: fb:f0:6b:b5:05:10:b6:7a:88:0d:33:d0:a2:53:54:4b:f1:df: ac:09:14:49:97:3f:14:7c:e6:45:0d:8d:0c:97:be:c2:91:21: 53:bf:0e:bf:b9:ed:aa:e3:22:be:6e:3e:2d:fe:50:e9:07:c5: 7e:3e:be:c9:18:69:df:29:5a:23:5d:b6:c6:cb:c1:2c:82:b7: 41:10:97:f9:04:64:79:48:63:a4:29:c5:19:7c:0d:a1:9c:7c: f8:73:63:56:78:d0:10:f5:91:3b:4b:9c:10:ab:9d:68:2d:28: 54:70:1f:87:49:63:85:c0:ee:09:ae:1d:38:20:04:25:92:9f: 43:ab:f1:16:aa:56:5c:18:f7:1d:d0:d3:02:3c:b5:d7:86:74: 83:23:3d:f1:ea:b0:05:01:94:e2:b4:a2:ff:94:22:1a:c3:e3: 84:9d:77:80:92:16:9c:55:16:46:fb:55:03:77:dc:1d:e6:af: cb:dd:f7:07:97:2d:54:94:14:98:ef:b3:3d:fd:ce:5e:60:3e: 0d:c8:2f:18:88:0a:d0:b7:9d:0a:27:46:c6:14:d4:16:cf:ef: 7d:71:c9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqD7FRRhIuQKgnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YmQ2NWFhNmUtYjYzNy00MDFhLWE3OWYtNDFmOWUzNzIyNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbJ0NqJCZgsfF5dI7+CnGiZknULK074NmZRU IDvkKD8ys+T+oxxsQ0ToOZ0VIdML3GguP9izpf4gP9C5gwSKTUTbgjmm6MipqBVF FGqELl+n6CQAUIy+IRLBjRZIICCr+eiCskDUem7Zwf4uRJKGMEmKkbV1G9cCCrSa E6TlyJEj7+DvwNQnmH0J3Rf5a+9fL0zwdwEWtwXTU3FuLF4eGOQJfS5LArDBxFrr 5xXgPKgdWGu/VgkY11VzR7IppNaevkPsvleTRJ0WTkgJD9jFkT0yyM7taCGta+cm RV+y/v8hg9Qb5lULczdL/z+0O+dIsTXc3T2r7mNBQZJ1WYuWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq9Hfihni9r6nJaeSa16mG+O0KBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkZTc4ZjQtMjBmNC0z ODQ0LWE2MzktYTMyOGViNWRiNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDz87KgT8xjfzoeT4ku2HjAJkVRrTGr7RwuNfY0nwAobsLafvvwa7UF ELZ6iA0z0KJTVEvx36wJFEmXPxR85kUNjQyXvsKRIVO/Dr+57arjIr5uPi3+UOkH xX4+vskYad8pWiNdtsbLwSyCt0EQl/kEZHlIY6QpxRl8DaGcfPhzY1Z40BD1kTtL nBCrnWgtKFRwH4dJY4XA7gmuHTggBCWSn0Or8RaqVlwY9x3Q0wI8tdeGdIMjPfHq sAUBlOK0ov+UIhrD44Sdd4CSFpxVFkb7VQN33B3mr8vd9weXLVSUFJjvsz39zl5g Pg3ILxiICtC3nQonRsYU1BbP731xyf4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:49:32 2026 by rpki-client