This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbb2e1d9-b63b-37ac-8866-552af60a50e9.roa File: cbb2e1d9-b63b-37ac-8866-552af60a50e9.roa (raw, json) Hash identifier: SZxengrAB4Z6ppTPCJTuSdP3ArIp0ZYvvSOT6JT2Vjk= Subject key identifier: 60:D7:0A:5D:F9:26:CE:27:AB:6D:49:85:CB:8F:DC:E5:33:AA:B8:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A6834CD75EBB8F0AE7B300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbb2e1d9-b63b-37ac-8866-552af60a50e9.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:83:4c:d7:5e:bb:8f:0a:e7:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=eda67b6c-1a42-4721-aa25-79e5375852a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:d8:c2:84:6d:5b:8d:70:d8:f0:3d:62:6e: 55:ce:fd:16:f8:ce:f7:18:ef:97:a0:b8:ed:e4:5b: 64:d9:03:9d:0f:29:4a:63:42:6b:25:ab:0e:8a:89: 85:b1:d5:c8:3a:da:3a:18:ff:64:34:27:2b:ff:a1: 52:0d:8c:0f:aa:25:09:20:a8:e5:36:b6:82:8b:36: 4b:85:5c:4b:54:dc:eb:a4:fb:c2:27:26:9f:dd:7e: b4:bc:ce:4a:7a:1f:0f:86:90:6b:22:75:9b:cb:99: b3:40:7d:12:08:d7:3d:ed:62:3b:d1:de:71:c5:3e: 6b:44:a8:2a:d4:06:ab:2c:c0:13:cd:0d:2b:93:6f: 14:d3:e1:c1:0a:a7:bc:6e:c5:a4:eb:e4:94:e4:6d: fe:85:1e:b0:87:3e:99:bd:3a:76:3d:b8:57:de:cd: 88:58:7b:ab:24:f3:44:8e:ac:a9:f8:7c:31:c6:c1: 2a:93:af:7c:3e:3a:f1:0a:95:d4:7a:a6:2c:d5:c0: 99:3c:ba:55:16:f4:af:fe:76:27:25:61:97:40:77: be:a7:65:42:de:2d:f5:6e:4c:9a:98:de:8b:29:84: 9e:47:28:ad:43:a9:48:a8:1d:0c:5b:c2:01:66:fc: c7:24:1f:86:07:de:d9:aa:7c:12:c4:db:ca:1f:8b: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:0A:5D:F9:26:CE:27:AB:6D:49:85:CB:8F:DC:E5:33:AA:B8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbb2e1d9-b63b-37ac-8866-552af60a50e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:47:f4:f5:ae:bc:91:26:44:4d:2e:79:ff:60:b7:a0:bc:e3: 85:52:4f:2a:87:7b:8a:d7:8a:25:78:37:17:da:df:4e:80:63: c4:b6:5f:af:f3:d2:24:f3:4c:9d:d4:42:56:19:a0:da:43:e4: 92:89:4b:23:f7:dc:39:aa:91:ca:ee:70:aa:2c:37:90:8c:bb: 69:fe:51:76:f0:64:f8:28:c1:79:2d:b5:16:03:e3:99:f0:e0: 8e:21:ce:27:4b:5a:0d:57:f5:79:d3:7c:6e:b1:4e:2f:de:83: b8:32:a9:b0:e2:32:0d:8f:9d:1a:47:84:2f:ce:e1:05:0b:fc: b2:b9:f5:fd:2f:7f:2c:d3:f9:00:df:15:8f:37:2e:57:75:96: f3:ff:3a:91:82:98:42:c9:97:75:88:a4:9d:ca:2f:a3:d3:43: c8:ea:4f:40:3f:f2:c8:88:ec:d2:00:2c:27:17:44:20:44:9b: 52:3f:8a:f0:bd:ac:9c:4d:8b:0f:d2:ad:f5:ef:67:7a:4f:31: 64:45:ce:74:38:1f:88:98:72:27:bc:81:a9:94:ee:94:07:e5: ae:2d:e8:a5:d2:f7:6b:c5:1d:85:25:02:8c:1a:4b:7e:6c:6a: bf:3e:d2:72:23:80:4b:21:7b:b2:f1:93:c2:ae:73:5e:a5:b0: 81:81:cd:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpoNM1167jwrnswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZWRhNjdiNmMtMWE0Mi00NzIxLWFhMjUtNzllNTM3NTg1MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizzYwoRtW41w2PA9Ym5Vzv0W+M73GO+XoLjt 5Ftk2QOdDylKY0JrJasOiomFsdXIOto6GP9kNCcr/6FSDYwPqiUJIKjlNraCizZL hVxLVNzrpPvCJyaf3X60vM5Keh8PhpBrInWby5mzQH0SCNc97WI70d5xxT5rRKgq 1AarLMATzQ0rk28U0+HBCqe8bsWk6+SU5G3+hR6whz6ZvTp2PbhX3s2IWHurJPNE jqyp+HwxxsEqk698PjrxCpXUeqYs1cCZPLpVFvSv/nYnJWGXQHe+p2VC3i31bkya mN6LKYSeRyitQ6lIqB0MW8IBZvzHJB+GB97ZqnwSxNvKH4sUUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDXCl35Js4nq21JhcuP3OUzqrh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JiMmUxZDktYjYzYi0z N2FjLTg4NjYtNTUyYWY2MGE1MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABH9PWuvJEmRE0uef9gt6C844VSTyqHe4rXiiV4Nxfa306AY8S2X6/z 0iTzTJ3UQlYZoNpD5JKJSyP33DmqkcrucKosN5CMu2n+UXbwZPgowXkttRYD45nw 4I4hzidLWg1X9XnTfG6xTi/eg7gyqbDiMg2PnRpHhC/O4QUL/LK59f0vfyzT+QDf FY83Lld1lvP/OpGCmELJl3WIpJ3KL6PTQ8jqT0A/8siI7NIALCcXRCBEm1I/ivC9 rJxNiw/SrfXvZ3pPMWRFznQ4H4iYcie8gamU7pQH5a4t6KXS92vFHYUlAowaS35s ar8+0nIjgEshe7Lxk8Kuc16lsIGBzRU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:45:59 2026 by rpki-client