This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa File: 432e200e-0f71-3d9d-b9bd-af77278240dc.roa (raw, json) Hash identifier: hFgsDmUdi6qboIhBgvdyp3qDO0jybqJMrh01rJ05rxI= Subject key identifier: B3:5A:11:1E:02:93:FE:97:CD:E2:90:06:AA:5D:F5:88:73:6E:64:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C969C61B401CC225344DE7180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:61:b4:01:cc:22:53:44:de:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=50a07aca-0e05-440a-b214-24dc22669f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:16:98:1a:c5:64:38:3f:4e:9b:fc:b0:4e: d0:a6:bc:ae:70:5d:6f:f4:de:ba:e4:bc:84:8d:44: 50:4a:06:3e:48:91:26:70:c9:95:3c:3d:22:f5:5e: 0a:d6:32:12:d4:aa:60:72:34:59:5e:a6:1e:35:b2: a7:09:e1:29:3e:3e:6e:ea:e3:35:f1:d3:31:73:3d: f9:35:d9:56:13:28:fa:0d:e7:9a:e4:61:67:1c:a8: 27:e5:c5:12:8b:33:5c:4a:94:58:c6:ef:aa:ad:01: 8c:c8:ab:32:2e:68:97:24:46:a1:7c:38:b6:56:dd: b0:9d:c3:aa:db:15:66:8a:fe:8f:9e:3a:40:fe:d6: 4d:b7:9a:d6:70:46:82:8d:9b:7f:c2:ee:31:2b:82: e0:e5:33:54:c5:0d:b0:32:77:6e:ee:16:7a:da:20: 98:a2:a0:a9:60:93:47:c1:1d:76:0a:ad:e3:af:63: 73:03:09:6b:73:55:a6:0f:eb:02:d9:f7:93:c9:3c: e1:92:67:39:fd:cf:bb:50:7f:a5:2d:cc:17:9a:14: e6:40:a3:97:97:b7:e9:1d:20:61:d9:5d:7c:96:46: 52:1e:26:2a:28:f8:8b:a3:09:dd:c2:90:aa:c0:70: 32:f8:2e:0d:be:90:01:3c:a2:31:a8:6b:5f:7b:27: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5A:11:1E:02:93:FE:97:CD:E2:90:06:AA:5D:F5:88:73:6E:64:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:eb:da:f3:f7:9a:1c:8b:5c:4b:b9:88:4b:c4:5d:3a:d1:22: cf:ab:c4:fa:5b:50:46:3e:36:f4:90:28:db:d4:6d:52:7b:3c: 11:7b:d9:b6:03:2c:6f:ce:40:98:28:36:9b:93:b4:f8:02:b9: b4:64:81:b7:2f:d0:e9:87:07:e1:e5:0e:c5:d7:a7:5b:5a:31: d4:bc:b2:0d:c7:7e:97:1b:31:cd:56:f7:ba:af:b4:ea:9e:11: ec:9a:aa:fa:ab:95:75:f5:7b:2f:e7:ef:e3:6b:5e:6c:31:7d: 92:55:04:12:0d:b5:bc:2d:ef:3a:bc:32:b0:12:15:12:b7:3c: b1:02:38:da:8b:1f:3f:cd:88:99:49:a8:b1:1c:0e:75:09:40: 63:a4:b0:25:cb:b7:98:8c:ac:4c:33:10:a5:09:9c:9e:c1:c6: 47:a4:43:5f:72:2a:39:ad:67:8b:f4:b0:0e:da:df:18:7a:3e: 5b:f9:95:4f:f2:0d:64:66:6d:d9:b2:53:e6:87:f4:82:84:44: cf:c8:48:2a:f2:d5:c6:95:8f:03:92:f1:bb:ec:7f:23:43:2f: 34:a6:46:87:b0:f4:23:f3:eb:d9:9f:69:2b:cb:e9:46:5a:37: 06:c9:8c:e4:f4:f8:44:f6:96:24:5c:6b:41:56:54:02:1e:1b: 2b:62:1c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGG0AcwiU0TecYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk NTBhMDdhY2EtMGUwNS00NDBhLWIyMTQtMjRkYzIyNjY5ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2sWmBrFZDg/Tpv8sE7QpryucF1v9N665LyE jURQSgY+SJEmcMmVPD0i9V4K1jIS1KpgcjRZXqYeNbKnCeEpPj5u6uM18dMxcz35 NdlWEyj6Deea5GFnHKgn5cUSizNcSpRYxu+qrQGMyKsyLmiXJEahfDi2Vt2wncOq 2xVmiv6PnjpA/tZNt5rWcEaCjZt/wu4xK4Lg5TNUxQ2wMndu7hZ62iCYoqCpYJNH wR12Cq3jr2NzAwlrc1WmD+sC2feTyTzhkmc5/c+7UH+lLcwXmhTmQKOXl7fpHSBh 2V18lkZSHiYqKPiLowndwpCqwHAy+C4NvpABPKIxqGtfeydR4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNaER4Ck/6XzeKQBqpd9YhzbmTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDMyZTIwMGUtMGY3MS0z ZDlkLWI5YmQtYWY3NzI3ODI0MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLr2vP3mhyLXEu5iEvEXTrRIs+rxPpbUEY+NvSQKNvUbVJ7PBF72bYD LG/OQJgoNpuTtPgCubRkgbcv0OmHB+HlDsXXp1taMdS8sg3HfpcbMc1W97qvtOqe EeyaqvqrlXX1ey/n7+NrXmwxfZJVBBINtbwt7zq8MrASFRK3PLECONqLHz/NiJlJ qLEcDnUJQGOksCXLt5iMrEwzEKUJnJ7BxkekQ19yKjmtZ4v0sA7a3xh6Plv5lU/y DWRmbdmyU+aH9IKERM/ISCry1caVjwOS8bvsfyNDLzSmRoew9CPz69mfaSvL6UZa NwbJjOT0+ET2liRca0FWVAIeGytiHCU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:48:00 2026 by rpki-client