This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa File: 60375f84-058e-3934-9882-84d1a2ec55d3.roa (raw, json) Hash identifier: e+ZPvoOIL8IVpLkQ95i3ree0lQThsDdYfFGXTOZ9c0I= Subject key identifier: 96:0B:04:D0:C4:2C:B3:83:C9:93:93:F3:92:09:B7:35:38:D4:04:89 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C40114BEDC570AD9F8E29AD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396982 IP address blocks: 108.170.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:4b:ed:c5:70:ad:9f:8e:29:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=c5e878a0-f07e-4eaf-a38c-5c216a8b1518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:b8:2a:a8:2c:5f:87:ba:21:0d:91:72:01: 5a:39:0c:b1:0a:59:ad:a1:16:40:e0:eb:9f:eb:21: ee:7c:aa:e9:04:00:da:29:35:06:80:1a:b7:63:5a: c2:de:dd:a6:ce:6d:fc:e8:69:e4:e8:dd:00:61:a6: 1d:c1:d2:04:09:77:37:80:b0:e5:17:92:59:23:fa: 54:f1:68:b7:3c:dd:fd:61:02:0b:fe:68:c9:e3:c9: b0:92:c7:f3:35:d9:11:e9:bd:8c:89:b4:69:64:8b: 5d:7a:ca:b8:31:c2:9b:2e:0a:b5:35:cb:1e:05:81: 08:ac:e8:44:ce:8c:b5:78:22:14:0c:f9:1d:73:75: 20:90:f7:e6:b4:d4:a8:ab:73:06:1c:6a:75:4a:3b: dd:14:14:90:61:19:14:1c:6b:3c:d4:a7:e3:fd:0d: 3d:ef:af:f5:89:f6:76:4d:92:41:af:9a:1e:e1:bd: 4b:f1:31:a9:dd:51:3b:e5:bb:ed:70:2c:87:14:2c: d9:d8:46:63:18:e3:4e:6f:07:8a:19:2f:1a:b1:b6: 59:1a:2c:4a:4e:1b:d0:76:f5:1c:b9:de:12:dd:f9: 5b:2b:64:38:17:ac:73:64:0b:b3:d6:d4:e5:c0:7e: 1d:11:9c:23:a1:17:84:04:1a:9e:df:b6:99:3d:04: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0B:04:D0:C4:2C:B3:83:C9:93:93:F3:92:09:B7:35:38:D4:04:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:83:ff:a9:bf:66:b0:99:01:cd:7e:ca:ee:d7:7d:3f:bc:ce: b3:37:e3:2f:d0:73:58:96:bd:ba:40:0f:ee:cf:a4:91:40:e6: bf:82:50:74:14:b5:b8:73:00:3d:40:7a:6a:da:bd:a0:58:20: e3:83:76:d2:2a:3e:96:ac:c0:a0:ae:1f:ce:b8:74:b6:50:c1: 91:83:3e:e5:3f:0f:6a:87:2f:93:f8:c2:09:52:0f:83:eb:8f: ed:dd:0a:d0:ad:8c:e5:1d:6a:30:0a:60:4d:24:72:54:90:40: 33:a6:67:85:27:7c:2b:88:d5:52:9f:78:17:5b:81:d7:6d:85: 2c:2b:76:1e:58:51:e1:6c:02:8c:35:15:43:18:cb:52:dd:6a: 18:82:8f:56:76:4f:3b:5a:34:a9:65:ec:5b:b0:bf:36:61:d3: 95:cc:89:54:73:e2:cf:09:39:8d:0c:19:18:fd:65:01:cf:46: 04:bd:7f:a6:70:b1:10:37:72:70:4a:b9:91:d4:36:4a:0f:4d: 67:23:97:67:ef:93:96:d7:47:7c:50:ac:d4:a2:54:24:e1:6f: 85:35:c7:65:4a:a7:39:93:36:c8:a0:af:cf:7d:b5:b0:92:25: 00:0b:ff:1c:d8:83:61:6a:0a:27:73:ab:a6:9c:0e:77:bc:3a: bb:7a:0d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEUvtxXCtn44prQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YzVlODc4YTAtZjA3ZS00ZWFmLWEzOGMtNWMyMTZhOGIxNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m+4KqgsX4e6IQ2RcgFaOQyxClmtoRZA4Ouf 6yHufKrpBADaKTUGgBq3Y1rC3t2mzm386Gnk6N0AYaYdwdIECXc3gLDlF5JZI/pU 8Wi3PN39YQIL/mjJ48mwksfzNdkR6b2MibRpZItdesq4McKbLgq1NcseBYEIrOhE zoy1eCIUDPkdc3UgkPfmtNSoq3MGHGp1SjvdFBSQYRkUHGs81Kfj/Q0976/1ifZ2 TZJBr5oe4b1L8TGp3VE75bvtcCyHFCzZ2EZjGONObweKGS8asbZZGixKThvQdvUc ud4S3flbK2Q4F6xzZAuz1tTlwH4dEZwjoReEBBqe37aZPQRVzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYLBNDELLODyZOT85IJtzU41ASJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjAzNzVmODQtMDU4ZS0z OTM0LTk4ODItODRkMWEyZWM1NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiD/6m/ZrCZAc1+yu7XfT+8zrM34y/Qc1iWvbpAD+7PpJFA5r+CUHQU tbhzAD1AemravaBYIOODdtIqPpaswKCuH864dLZQwZGDPuU/D2qHL5P4wglSD4Pr j+3dCtCtjOUdajAKYE0kclSQQDOmZ4UnfCuI1VKfeBdbgddthSwrdh5YUeFsAow1 FUMYy1LdahiCj1Z2TztaNKll7FuwvzZh05XMiVRz4s8JOY0MGRj9ZQHPRgS9f6Zw sRA3cnBKuZHUNkoPTWcjl2fvk5bXR3xQrNSiVCThb4U1x2VKpzmTNsigr899tbCS JQAL/xzYg2FqCidzq6acDne8Ort6DTU= -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:57 2025 by rpki-client