This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa File: 0aac0a89-c692-33ad-b439-320e12b19fad.roa (raw, json) Hash identifier: EKxNsoMjfNHkuG3zIZRIltrah/IX2o1N4LM+YX9vIX8= Subject key identifier: 46:62:3C:9A:FE:54:A2:2A:14:30:7C:E6:DA:EC:82:4E:FE:3F:87:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7F38D4DE9CA797F680180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 216.58.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:f3:8d:4d:e9:ca:79:7f:68:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=cd8fefb3-5a83-4f5e-bac0-9606a9313830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:44:ee:07:86:30:eb:a3:01:fe:f9:9d:54: f9:35:42:e1:ee:24:8b:91:9f:54:d2:49:db:5f:46: ff:8d:a8:d4:63:30:62:32:61:ee:f4:76:c3:a6:df: 16:f7:f1:91:6f:7d:b1:83:d3:35:39:69:d1:19:cb: e2:f4:a4:d9:15:5b:30:9c:cb:48:4a:f4:e4:66:ba: f8:86:03:9f:19:3e:3e:13:4e:7a:26:2e:9c:8a:66: 7e:a4:a1:2d:b0:90:93:7e:3c:66:b7:36:f1:d7:d9: 99:2a:42:aa:ea:29:07:4f:7e:c2:0f:b2:33:54:6e: 0a:3e:0d:27:ad:9d:a7:07:f2:19:cf:9e:8a:1d:c7: ee:6e:21:e5:d0:a0:e7:a9:78:fc:c9:85:6a:d1:f9: 64:15:03:33:8f:6f:3b:a6:60:5f:cd:92:9d:92:53: aa:14:94:ca:58:04:19:d1:7f:a5:92:52:f1:6f:ab: 13:ac:1e:66:aa:cb:f9:45:d9:3b:30:c4:03:5b:6f: 07:9d:9e:c1:1c:0c:f2:38:13:62:dc:81:0e:59:da: 6b:e9:e3:41:8a:c8:eb:3d:15:fb:df:47:9b:c2:7c: be:02:a2:eb:83:12:1a:b5:86:19:6b:9a:fb:a2:57: 5f:92:7e:3f:34:a4:44:9a:46:46:ee:85:6d:46:29: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:62:3C:9A:FE:54:A2:2A:14:30:7C:E6:DA:EC:82:4E:FE:3F:87:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:28:38:c4:00:ab:0f:ee:5c:ee:68:23:67:a9:2d:ab:5e:04: 21:d8:24:9d:ac:6d:2a:ad:f4:ac:ff:c5:c3:be:5e:e5:f4:f1: 8e:dd:9a:31:26:6b:25:d5:28:98:dc:6b:f6:2b:ac:02:c6:76: 2b:d9:7c:a4:79:07:c8:73:a2:c9:42:8f:e9:3b:7f:12:c8:20: e6:f1:23:ae:ab:8e:2c:b8:e1:cc:72:0e:f4:b0:a4:22:53:e3: c6:90:74:b4:01:7f:54:ed:b5:ae:08:8a:ea:3d:d1:4d:08:9b: 43:64:11:a8:ec:7a:09:db:1c:e9:25:7b:9c:e6:c5:37:64:17: a7:a4:c8:13:e6:f6:d3:ca:81:14:79:d2:80:00:85:b1:8c:ea: 71:2d:df:ad:e2:03:b7:25:25:2b:53:1a:1c:2e:2d:29:f3:39: 62:88:ab:75:7d:26:af:b2:ea:41:ae:43:be:f5:1f:92:61:e3: c9:92:4c:e1:35:4f:62:fb:e2:83:f5:ed:5a:cd:81:ac:3a:74: df:af:6e:0f:6f:24:4b:30:a3:bd:c5:7d:99:d9:4a:31:01:a3: cc:0b:ad:e3:2b:8a:56:6f:76:18:ec:e9:bd:28:11:2f:03:a2: 78:d1:4d:2b:e2:3e:37:b5:5a:7c:fc:e2:69:7d:23:af:6f:79: f7:46:6b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/ONTenKeX9oAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Y2Q4ZmVmYjMtNWE4My00ZjVlLWJhYzAtOTYwNmE5MzEzODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C1E7geGMOujAf75nVT5NULh7iSLkZ9U0knb X0b/jajUYzBiMmHu9HbDpt8W9/GRb32xg9M1OWnRGcvi9KTZFVswnMtISvTkZrr4 hgOfGT4+E056Ji6cimZ+pKEtsJCTfjxmtzbx19mZKkKq6ikHT37CD7IzVG4KPg0n rZ2nB/IZz56KHcfubiHl0KDnqXj8yYVq0flkFQMzj287pmBfzZKdklOqFJTKWAQZ 0X+lklLxb6sTrB5mqsv5Rdk7MMQDW28HnZ7BHAzyOBNi3IEOWdpr6eNBisjrPRX7 30ebwny+AqLrgxIatYYZa5r7oldfkn4/NKREmkZG7oVtRikU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZiPJr+VKIqFDB85trsgk7+P4dPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFhYzBhODktYzY5Mi0z M2FkLWI0MzktMzIwZTEyYjE5ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0oOMQAqw/uXO5oI2epLateBCHYJJ2sbSqt9Kz/xcO+XuX08Y7dmjEm ayXVKJjca/YrrALGdivZfKR5B8hzoslCj+k7fxLIIObxI66rjiy44cxyDvSwpCJT 48aQdLQBf1Ttta4Iiuo90U0Im0NkEajsegnbHOkle5zmxTdkF6ekyBPm9tPKgRR5 0oAAhbGM6nEt363iA7clJStTGhwuLSnzOWKIq3V9Jq+y6kGuQ771H5Jh48mSTOE1 T2L74oP17VrNgaw6dN+vbg9vJEswo73FfZnZSjEBo8wLreMrilZvdhjs6b0oES8D onjRTSviPje1Wnz84ml9I69vefdGa0E= -----END CERTIFICATE-----Generated at Wed Dec 24 16:40:23 2025 by rpki-client