This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa File: fa243cfe-a92e-3e35-a136-c32c50a344e0.roa (raw, json) Hash identifier: GkZPdx245KoiTZOK8buBIbKXh2sYwT8E8xhmQJQQhgI= Subject key identifier: D7:6E:3F:C1:10:E7:BE:F4:FF:05:03:8A:DC:BD:17:0F:0A:0B:A1:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C48711FD64466378604FDD110 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.21.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:1f:d6:44:66:37:86:04:fd:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=5fadfa1a-3c7c-4c4d-b13b-dd8d3e934eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cc:7c:ab:b7:4b:4a:9c:56:4c:98:c5:8f:2b: 00:2c:bb:6a:87:2b:cc:ed:8b:8c:28:d3:be:78:e7: a9:38:f0:e0:5c:65:ba:bd:7c:2b:a0:e5:e1:75:54: 51:49:ef:af:bf:f7:1b:f1:30:f8:73:ec:78:99:e9: 3f:62:75:28:f9:30:9a:6e:9b:5c:18:24:9e:dc:6e: bc:35:85:9f:d4:a0:ff:29:9c:1e:8f:a4:e0:42:40: 1e:dc:d5:ac:e3:4c:0c:2f:57:b2:c6:e6:1b:97:d7: 84:d7:f4:78:6b:c3:bc:d3:a3:5c:93:45:35:cc:e4: 12:05:13:cb:93:75:10:f6:e7:ec:0b:4b:02:8b:df: 8a:f5:0b:6f:c1:41:1f:56:2d:7d:63:77:48:d3:43: 07:de:51:aa:08:a8:b6:02:d0:a8:55:73:a6:dc:74: 47:0c:d0:c2:7d:21:b8:e9:4f:1b:fa:bc:2f:98:a8: 98:dd:3e:cc:35:0d:ae:cc:5b:8f:57:24:28:02:99: 98:86:8d:58:61:fa:67:9a:e5:4b:90:cd:56:c6:8a: d2:4a:c0:3d:b2:83:2f:ed:7f:3a:6b:ae:cd:ee:b0: fa:e1:eb:fb:5a:d7:4d:62:05:86:22:70:d4:08:53: ca:9a:82:d8:2a:4a:32:f8:d3:03:58:d9:e1:74:cc: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6E:3F:C1:10:E7:BE:F4:FF:05:03:8A:DC:BD:17:0F:0A:0B:A1:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9f:34:61:53:44:74:d0:59:77:2b:3e:b3:75:02:02:43:c3: f8:14:69:48:6d:c7:77:50:2f:6f:3e:d2:4c:8a:d2:03:b7:cb: dc:68:af:36:d0:68:c0:1b:73:6c:5f:29:36:bb:35:70:30:c3: be:a9:de:4c:89:6b:fe:a5:f5:a8:5a:e4:6b:7f:c0:85:5f:d8: c6:f3:b9:da:04:51:f6:0a:ac:f6:49:61:82:76:9b:dd:89:92: 7a:65:0d:52:48:e7:48:35:df:4f:f9:82:d7:69:d5:90:05:42: 7a:16:ae:50:16:6f:43:5a:a4:46:4d:99:9e:e6:ff:4a:6d:6a: 42:5c:35:d2:8c:75:c3:50:65:c2:94:fd:4a:56:0a:f6:b3:8f: 09:4d:d5:ba:74:92:b0:e5:13:7e:22:01:7a:92:3a:fa:c4:af: 02:e2:99:57:fc:d6:cc:4e:3f:f2:f8:88:46:9a:3f:bc:89:3b: 61:1c:33:69:87:79:88:ab:95:25:52:1a:1a:61:ee:52:96:5a: a7:ce:4c:63:52:a1:c0:1f:a9:26:80:9b:71:35:99:ef:92:82: 63:f9:fa:6f:a6:7a:53:41:69:fc:c8:14:67:8a:5b:74:0d:ec: 90:59:f7:27:9c:ee:7b:9c:30:cb:4d:83:7b:9a:bc:e0:21:3a: 6a:0a:a0:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcR/WRGY3hgT90RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NWZhZGZhMWEtM2M3Yy00YzRkLWIxM2ItZGQ4ZDNlOTM0ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cx8q7dLSpxWTJjFjysALLtqhyvM7YuMKNO+ eOepOPDgXGW6vXwroOXhdVRRSe+vv/cb8TD4c+x4mek/YnUo+TCabptcGCSe3G68 NYWf1KD/KZwej6TgQkAe3NWs40wML1eyxuYbl9eE1/R4a8O806Nck0U1zOQSBRPL k3UQ9ufsC0sCi9+K9QtvwUEfVi19Y3dI00MH3lGqCKi2AtCoVXOm3HRHDNDCfSG4 6U8b+rwvmKiY3T7MNQ2uzFuPVyQoApmYho1YYfpnmuVLkM1WxorSSsA9soMv7X86 a67N7rD64ev7WtdNYgWGInDUCFPKmoLYKkoy+NMDWNnhdMxjQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNduP8EQ5770/wUDity9Fw8KC6GdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEyNDNjZmUtYTkyZS0z ZTM1LWExMzYtYzMyYzUwYTM0NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACefNGFTRHTQWXcrPrN1AgJDw/gUaUhtx3dQL28+0kyK0gO3y9xorzbQ aMAbc2xfKTa7NXAww76p3kyJa/6l9aha5Gt/wIVf2MbzudoEUfYKrPZJYYJ2m92J knplDVJI50g130/5gtdp1ZAFQnoWrlAWb0NapEZNmZ7m/0ptakJcNdKMdcNQZcKU /UpWCvazjwlN1bp0krDlE34iAXqSOvrErwLimVf81sxOP/L4iEaaP7yJO2EcM2mH eYirlSVSGhph7lKWWqfOTGNSocAfqSaAm3E1me+SgmP5+m+melNBafzIFGeKW3QN 7JBZ9yec7nucMMtNg3uavOAhOmoKoB4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:46:17 2026 by rpki-client