This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa File: 43fcbd39-43d3-3172-b7a6-7940907cf086.roa (raw, json) Hash identifier: /YvqBfPRoIud6oUVx9ce7ow3WmYYgkpwl461KiVQu+g= Subject key identifier: C9:41:8B:9F:22:DC:B4:53:42:BB:8E:2C:DF:BB:85:DD:45:A7:5B:C8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C285624305FA6333B714EAC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 15169 IP address blocks: 172.253.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:24:30:5f:a6:33:3b:71:4e:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=d339d59f-57e6-4f4b-98c9-0e6a2484d285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:67:4a:f2:33:22:4a:c4:52:db:9c:36:fa: aa:6e:e5:b8:9b:de:fe:70:69:f0:77:27:45:3e:8c: f0:98:6d:70:88:af:de:37:40:41:f1:93:b9:18:75: 7b:f1:b6:1f:70:05:6c:df:bc:3a:31:00:08:a2:34: 07:e2:7e:d4:81:db:6b:84:c1:8f:4d:42:ee:28:fe: 17:35:74:f9:8b:7c:8a:32:5a:93:bb:c1:8a:be:89: d5:7f:27:97:4f:1b:ba:aa:55:06:5d:f2:ab:96:9e: 89:5a:f4:87:d1:f5:38:54:35:93:e4:af:68:08:7c: 21:12:1a:01:64:1e:75:56:0b:25:09:ab:46:e3:ef: 3b:e6:07:f7:6e:4b:80:ae:cd:79:26:08:f2:5f:3e: 63:c5:df:be:3e:2d:f3:68:c5:9c:4a:e9:3b:7d:1a: b1:39:69:fa:8f:23:77:16:d5:c6:36:f1:8a:94:4a: a2:9c:1d:f9:4f:c9:33:7b:e0:cb:36:36:6d:67:39: e5:ab:e0:2b:ce:b0:89:8f:2c:b8:6a:ec:c4:f4:f0: fa:a9:3a:df:d2:a2:9e:74:37:f4:aa:55:cc:b8:69: 11:e2:4c:92:36:02:4e:3e:87:e4:ce:e9:78:7b:b0: 04:48:22:b1:14:c8:4c:f3:7d:ca:d4:3c:3c:60:8c: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:41:8B:9F:22:DC:B4:53:42:BB:8E:2C:DF:BB:85:DD:45:A7:5B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:85:f5:59:a2:f9:06:86:7f:25:ed:21:78:c2:c5:72:19:c0: 00:23:a3:6c:da:76:96:20:ca:ff:c6:a9:93:0c:6a:8a:d1:94: 17:1e:5d:eb:87:be:43:d5:7f:10:e8:72:18:12:e8:23:6e:f2: 86:e0:f9:11:eb:c1:77:8f:ca:d5:41:ab:bf:ff:0f:71:36:45: d2:59:75:b5:b7:ee:04:db:b3:f8:89:c6:69:19:90:3b:95:e0: 52:82:b7:0b:23:45:f7:a1:86:21:1a:fc:9f:b8:36:fb:db:d2: 56:b6:30:7b:af:49:99:5c:26:ab:7e:bf:40:f2:a3:12:cf:62: d4:eb:86:56:5b:53:66:86:57:e9:c9:36:ab:81:2a:f2:ac:16: 02:3c:3c:55:77:67:ac:a4:fa:c6:32:4c:fe:e1:bd:fe:fc:ac: 76:e5:da:30:ea:98:1b:76:f7:05:bd:1e:79:d4:50:44:a6:a0: fb:1c:58:51:09:f2:7d:b9:db:c9:08:57:f5:79:b2:87:e4:9a: 93:08:00:4a:ff:50:bd:d8:df:0a:c7:21:9e:eb:04:b2:b9:ed: b0:b8:15:f5:2a:6c:25:bc:b1:b7:53:bc:56:80:8a:dc:0b:6f: 7b:90:0b:ac:90:84:b4:2d:78:bb:b4:67:65:24:71:98:9f:1f: 96:29:86:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoViQwX6YzO3FOrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk ZDMzOWQ1OWYtNTdlNi00ZjRiLTk4YzktMGU2YTI0ODRkMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+FnSvIzIkrEUtucNvqqbuW4m97+cGnwdydF PozwmG1wiK/eN0BB8ZO5GHV78bYfcAVs37w6MQAIojQH4n7UgdtrhMGPTULuKP4X NXT5i3yKMlqTu8GKvonVfyeXTxu6qlUGXfKrlp6JWvSH0fU4VDWT5K9oCHwhEhoB ZB51VgslCatG4+875gf3bkuArs15JgjyXz5jxd++Pi3zaMWcSuk7fRqxOWn6jyN3 FtXGNvGKlEqinB35T8kze+DLNjZtZznlq+ArzrCJjyy4auzE9PD6qTrf0qKedDf0 qlXMuGkR4kySNgJOPofkzul4e7AESCKxFMhM833K1Dw8YIy1+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlBi58i3LRTQruOLN+7hd1Fp1vIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNmY2JkMzktNDNkMy0z MTcyLWI3YTYtNzk0MDkwN2NmMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6F9Vmi+QaGfyXtIXjCxXIZwAAjo2zadpYgyv/GqZMMaorRlBceXeuH vkPVfxDochgS6CNu8obg+RHrwXePytVBq7//D3E2RdJZdbW37gTbs/iJxmkZkDuV 4FKCtwsjRfehhiEa/J+4Nvvb0la2MHuvSZlcJqt+v0DyoxLPYtTrhlZbU2aGV+nJ NquBKvKsFgI8PFV3Z6yk+sYyTP7hvf78rHbl2jDqmBt29wW9HnnUUESmoPscWFEJ 8n2528kIV/V5sofkmpMIAEr/UL3Y3wrHIZ7rBLK57bC4FfUqbCW8sbdTvFaAitwL b3uQC6yQhLQteLu0Z2UkcZifH5Yphv0= -----END CERTIFICATE-----Generated at Sat Dec 20 14:44:02 2025 by rpki-client