This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa File: ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa (raw, json) Hash identifier: o8HVXb6iwEkmb08OkKSL+7a1QL1SBt3EB1SP4m8Vj4o= Subject key identifier: 46:AA:F2:60:A9:49:92:1F:29:21:DA:08:E1:64:28:8D:E9:B5:A5:9B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C37B0F6EF4F5620657CE37200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b0:f6:ef:4f:56:20:65:7c:e3:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=1fbf7c9d-e1ca-437b-8e39-e4c810de1716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f4:89:cb:5c:69:a3:f1:b8:06:8b:b3:8c:ce: 0c:dc:4e:4f:90:83:ce:52:8a:20:0b:e4:7f:5a:c8: 22:73:9b:1c:8e:26:18:03:a3:46:1a:e9:dc:3e:a6: e0:eb:45:64:56:56:28:39:11:d5:f1:56:3d:f2:c2: 87:b0:dc:d4:91:89:e9:2c:49:4e:40:30:fc:18:37: 24:84:9c:a8:e9:d1:41:fc:39:2e:66:3c:c6:bc:40: bf:97:a3:8d:42:9b:3d:d7:fd:e0:04:6d:ad:8a:96: bf:55:97:54:9e:1c:5a:60:1e:08:0d:1e:ed:6d:3e: 9b:37:e0:43:48:70:82:7c:46:f1:dc:a3:3d:3e:b3: b1:cd:ea:ba:d6:8a:f0:70:cb:9a:3b:ed:74:11:35: 2e:64:43:9e:3a:33:98:32:45:3b:c4:5e:eb:2a:23: ee:81:12:31:66:e2:05:04:89:ff:dc:d6:6b:5c:c7: 78:0f:40:3a:04:c5:11:bb:04:db:8a:d2:40:21:26: f5:a8:f1:73:89:ae:dc:da:10:b8:cf:44:68:e5:cf: 41:c9:d7:db:0c:25:05:b9:d8:83:a2:70:58:5d:d4: 62:10:a9:11:ef:0b:5b:31:7e:bd:7e:33:99:b9:a2: 53:52:7c:b8:03:d1:f0:4d:60:71:13:37:45:13:ea: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AA:F2:60:A9:49:92:1F:29:21:DA:08:E1:64:28:8D:E9:B5:A5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ad:7e:d2:53:87:96:75:23:20:f3:5b:c2:80:65:c4:1c:f0: 06:d5:96:c8:99:6a:68:58:88:89:d4:be:df:87:b0:f6:2c:ff: bc:82:b0:a3:11:4c:2b:3a:b6:89:77:b0:61:f6:89:62:d4:78: 27:31:9e:b5:47:c3:12:cf:3a:49:ea:54:a1:de:e2:65:3f:d3: a8:e6:b9:a6:d1:e8:e3:25:31:6c:d3:5a:3d:27:93:94:a1:53: 39:8c:68:f1:99:47:c9:0f:01:9a:4a:cc:93:e5:92:48:3a:03: c9:54:db:2e:4e:b7:22:4b:0c:32:ea:d7:23:90:fa:61:06:60: 38:b6:1f:0b:93:a8:00:a1:b7:8d:69:4e:3b:a6:19:e2:75:2e: 3c:1e:18:4c:2e:23:0d:65:5a:99:65:35:51:e2:e1:79:b6:42: 43:23:99:51:72:28:4e:6c:48:84:6c:ee:be:64:d3:55:02:b1: b9:3d:b6:f5:82:f5:69:d1:2d:e9:cb:85:88:68:93:8b:6c:a8: fa:1f:ca:77:ce:6a:21:8c:7f:2e:4d:f7:46:d7:56:8b:6b:2d: 96:23:de:01:f0:a0:0d:49:36:32:00:fa:ad:9e:25:c1:05:54: 46:86:99:fe:7b:91:38:19:27:38:70:11:51:87:e3:6a:df:1d: 7b:de:0d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sPbvT1YgZXzjcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk MWZiZjdjOWQtZTFjYS00MzdiLThlMzktZTRjODEwZGUxNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfSJy1xpo/G4BouzjM4M3E5PkIPOUoogC+R/ Wsgic5scjiYYA6NGGuncPqbg60VkVlYoORHV8VY98sKHsNzUkYnpLElOQDD8GDck hJyo6dFB/DkuZjzGvEC/l6ONQps91/3gBG2tipa/VZdUnhxaYB4IDR7tbT6bN+BD SHCCfEbx3KM9PrOxzeq61orwcMuaO+10ETUuZEOeOjOYMkU7xF7rKiPugRIxZuIF BIn/3NZrXMd4D0A6BMURuwTbitJAISb1qPFzia7c2hC4z0Ro5c9BydfbDCUFudiD onBYXdRiEKkR7wtbMX69fjOZuaJTUny4A9HwTWBxEzdFE+rojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaq8mCpSZIfKSHaCOFkKI3ptaWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWMzM2VlMTgtZjFmOS0z NTczLTlkODEtYjVkODczOGRhZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmtftJTh5Z1IyDzW8KAZcQc8AbVlsiZamhYiInUvt+HsPYs/7yCsKMR TCs6tol3sGH2iWLUeCcxnrVHwxLPOknqVKHe4mU/06jmuabR6OMlMWzTWj0nk5Sh UzmMaPGZR8kPAZpKzJPlkkg6A8lU2y5OtyJLDDLq1yOQ+mEGYDi2HwuTqACht41p TjumGeJ1LjweGEwuIw1lWpllNVHi4Xm2QkMjmVFyKE5sSIRs7r5k01UCsbk9tvWC 9WnRLenLhYhok4tsqPofynfOaiGMfy5N90bXVotrLZYj3gHwoA1JNjIA+q2eJcEF VEaGmf57kTgZJzhwEVGH42rfHXveDfo= -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:57 2025 by rpki-client