This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: KYQdJ+eFsdiERBv85y9W7XXDaFW77uB81zADSGiWeTk= Subject key identifier: 7C:33:38:10:63:B2:53:46:F5:71:42:7B:D4:A1:B5:40:7B:DD:80:17 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584C8046EBDE41FE349FD14B3ED8 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:eb:de:41:fe:34:9f:d1:4b:3e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=1c0ddd25-d46e-4ab4-bda4-ddb4784b7409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:06:66:38:af:86:a6:4e:b0:3e:31:3d:38: 55:cc:3d:6d:0a:eb:09:0b:55:75:5b:79:87:99:f5: 10:ed:ab:33:fa:b5:76:15:84:db:50:79:20:59:b2: ec:21:b6:1f:d7:38:38:d3:85:9f:0b:0a:b7:a4:f1: 31:68:a0:22:1e:26:87:71:59:c6:27:84:ab:27:2b: 87:65:a7:b7:05:91:be:06:7a:89:c9:df:9f:3d:f9: a6:d7:bb:d2:ce:29:50:e0:3b:1b:79:cb:ca:0c:bb: cd:72:e3:fc:71:14:cb:7e:8a:a3:6b:d4:13:5f:eb: d5:8c:d4:75:cf:5f:05:18:81:cb:d1:a0:f0:67:3d: 69:95:bf:d6:16:77:0f:e2:82:8f:2a:64:70:d2:d7: ae:08:e9:a9:d9:c8:ca:10:f6:1d:12:29:86:8f:19: f7:29:75:da:4c:9c:3d:19:ac:b0:f0:38:ef:79:3e: 7d:0f:a5:46:54:59:59:9c:c9:ed:7f:f3:ee:c9:fe: 18:9f:76:22:60:c1:be:52:a7:dc:18:f0:4d:ee:03: de:c7:3b:2f:ce:4c:3d:83:08:cb:fd:ad:41:e2:67: 95:37:44:3a:fe:fd:24:ec:9f:91:87:44:84:56:34: c7:a3:92:f7:cc:b9:87:2c:7b:06:95:4a:6d:fe:d0: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:38:10:63:B2:53:46:F5:71:42:7B:D4:A1:B5:40:7B:DD:80:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8a:59:8c:ae:d7:52:57:12:f5:54:c0:90:08:8a:07:ac:06: 5b:da:d8:3e:79:40:1d:ba:6c:a2:bb:b9:d2:95:14:02:d0:b3: 78:00:c3:c4:65:12:1c:4f:2c:d6:be:79:be:13:03:3a:46:3a: 9a:30:de:60:6f:d3:38:cd:a0:1f:e0:b5:4a:a5:79:4c:1a:01: bc:e6:b5:9a:5c:f8:ae:8e:31:43:a3:e4:f9:da:9d:ea:05:11: cd:f3:90:d8:88:b8:74:5f:0d:62:0e:8b:f0:7a:b4:97:d4:db: 6b:5c:d4:e9:85:bc:c6:a6:1d:8d:eb:51:8b:7e:4e:fb:7f:35: ee:26:99:86:b0:33:a9:7d:84:4b:94:12:6d:b4:ec:34:2b:9c: 2e:7d:f2:f9:12:e9:b4:cc:15:32:cf:8f:ee:6b:5a:ff:c6:41: f4:06:c5:2e:6b:5e:fc:d4:ae:9b:b5:b3:a8:6f:c6:cb:d7:e7: 9f:6f:05:a9:59:33:57:5d:18:ab:70:e8:67:d8:f6:e2:81:9a: 55:08:ad:c5:b7:5d:1f:c7:f6:93:b6:be:4e:45:45:77:4f:37: 9e:de:14:50:f2:e9:e9:e8:30:f8:02:1a:a6:ea:64:bf:c2:16: 66:07:ce:a8:98:aa:b8:98:6a:b1:3e:12:68:d2:e8:32:ec:91: 84:23:a7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARuveQf40n9FLPtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk MWMwZGRkMjUtZDQ2ZS00YWI0LWJkYTQtZGRiNDc4NGI3NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0EGZjivhqZOsD4xPThVzD1tCusJC1V1W3mH mfUQ7asz+rV2FYTbUHkgWbLsIbYf1zg404WfCwq3pPExaKAiHiaHcVnGJ4SrJyuH Zae3BZG+BnqJyd+fPfmm17vSzilQ4DsbecvKDLvNcuP8cRTLfoqja9QTX+vVjNR1 z18FGIHL0aDwZz1plb/WFncP4oKPKmRw0teuCOmp2cjKEPYdEimGjxn3KXXaTJw9 Gayw8DjveT59D6VGVFlZnMntf/Puyf4Yn3YiYMG+UqfcGPBN7gPexzsvzkw9gwjL /a1B4meVN0Q6/v0k7J+Rh0SEVjTHo5L3zLmHLHsGlUpt/tBTgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwzOBBjslNG9XFCe9ShtUB73YAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCKWYyu11JXEvVUwJAIigesBlva2D55QB26bKK7udKVFALQs3gAw8Rl EhxPLNa+eb4TAzpGOpow3mBv0zjNoB/gtUqleUwaAbzmtZpc+K6OMUOj5PnaneoF Ec3zkNiIuHRfDWIOi/B6tJfU22tc1OmFvMamHY3rUYt+Tvt/Ne4mmYawM6l9hEuU Em207DQrnC598vkS6bTMFTLPj+5rWv/GQfQGxS5rXvzUrpu1s6hvxsvX559vBalZ M1ddGKtw6GfY9uKBmlUIrcW3XR/H9pO2vk5FRXdPN57eFFDy6enoMPgCGqbqZL/C FmYHzqiYqriYarE+EmjS6DLskYQjpxo= -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:56 2026 by rpki-client