This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa File: 894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa (raw, json) Hash identifier: Ca6jKcpLZSXYFN+fP6bHoOs1Fb0u7Z6UloJCzgAgyQc= Subject key identifier: 26:ED:2F:1F:31:F5:7C:C5:C6:07:60:49:AA:33:E0:BA:E6:99:42:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C28565DA5C4925DF6C9541980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 15169 IP address blocks: 172.253.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:5d:a5:c4:92:5d:f6:c9:54:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=3a304222-dcd4-461d-8750-5511bbe4469d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:a9:5c:56:73:94:b8:62:d9:79:64:8f:0d: 6a:99:0f:b8:28:2c:33:87:27:ee:58:54:76:f4:6c: 2d:7f:06:d2:50:85:d8:64:ee:a5:46:c2:b4:1f:c8: e3:60:de:b3:ac:22:86:ef:0f:ff:50:db:ca:82:dd: cb:0d:e0:37:0d:e8:74:d0:65:5a:cd:5c:f3:d8:14: 6c:0a:45:fc:16:11:34:0c:9a:fb:39:33:c7:3b:e6: 21:c7:e1:7d:ca:ef:f0:9a:7d:26:03:46:d6:cd:fb: 23:59:8d:2d:a9:01:c8:00:50:73:7d:6f:94:dc:78: b3:42:b3:11:3c:e0:df:98:2b:c0:84:13:8a:8b:c2: da:fc:80:38:d9:8a:ce:1d:1d:5b:bc:15:84:58:1f: 4e:3f:c8:4f:39:bf:4a:8d:fc:3f:e6:5e:f2:1d:fe: d1:c7:1e:0a:d1:ac:29:05:39:6d:79:1e:e9:55:1d: 30:2b:56:8e:eb:d3:63:b0:8b:c6:aa:fc:84:6c:15: c9:4b:4a:f6:d9:05:2c:29:3b:9e:d2:bf:d6:10:11: e1:5e:34:a5:79:68:2b:56:03:ce:4e:a6:20:1c:ce: 4b:ce:bd:f4:78:51:75:c1:ee:c6:32:34:81:37:09: 5e:62:14:c6:9f:d8:bd:22:de:29:05:38:98:b6:46: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:2F:1F:31:F5:7C:C5:C6:07:60:49:AA:33:E0:BA:E6:99:42:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:45:c0:18:88:8a:94:dd:04:29:af:99:ca:7c:33:95:86:33: 21:62:b9:e7:c9:27:2b:92:d2:46:5a:db:5d:d9:71:36:97:3c: 8e:4c:9b:e2:30:e4:aa:da:f4:1f:63:f3:fc:82:fd:4a:99:0b: 2f:7c:08:a4:d2:02:ee:3c:83:e8:65:07:4c:55:22:eb:53:a8: 25:5c:3f:e3:db:17:eb:fb:b7:2c:e8:7c:0b:57:2c:6b:9c:04: e8:09:55:9f:1e:15:c8:1d:e1:1c:9c:b8:73:ef:4e:d6:36:f8: 20:ec:2e:d4:7c:2e:e9:d0:a7:52:1f:86:a5:c3:85:d0:ef:7e: 85:7c:14:ba:05:f2:26:71:a3:76:66:2c:e6:09:0a:3e:8a:4c: d6:90:9e:c9:a8:87:fe:90:a2:1f:48:c1:a9:51:04:43:a6:aa: 5a:29:7a:cb:5a:31:53:50:42:d4:5f:82:cd:eb:4f:53:f8:6b: d2:15:f3:77:b7:7f:6f:04:0f:03:ac:ee:fb:6d:71:34:96:36: 2e:86:5b:cf:ec:41:e1:f4:1e:ea:20:30:d7:f3:4d:d7:51:1f: dc:11:9c:64:52:06:19:9e:13:99:3b:75:0e:04:cb:19:52:df: 03:cb:e3:2b:6d:ae:19:73:03:29:56:7a:09:ea:f5:d5:bc:b3: 21:c5:74:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVl2lxJJd9slUGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk M2EzMDQyMjItZGNkNC00NjFkLTg3NTAtNTUxMWJiZTQ0NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1epXFZzlLhi2Xlkjw1qmQ+4KCwzhyfuWFR2 9GwtfwbSUIXYZO6lRsK0H8jjYN6zrCKG7w//UNvKgt3LDeA3Deh00GVazVzz2BRs CkX8FhE0DJr7OTPHO+Yhx+F9yu/wmn0mA0bWzfsjWY0tqQHIAFBzfW+U3HizQrMR PODfmCvAhBOKi8La/IA42YrOHR1bvBWEWB9OP8hPOb9Kjfw/5l7yHf7Rxx4K0awp BTlteR7pVR0wK1aO69NjsIvGqvyEbBXJS0r22QUsKTue0r/WEBHhXjSleWgrVgPO TqYgHM5Lzr30eFF1we7GMjSBNwleYhTGn9i9It4pBTiYtkb0OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbtLx8x9XzFxgdgSaoz4LrmmULkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk0YjkzZTctMjJhNS0z NmI3LTk1ZTUtY2I4ZmE5N2E0ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINFwBiIipTdBCmvmcp8M5WGMyFiuefJJyuS0kZa213ZcTaXPI5Mm+Iw 5Kra9B9j8/yC/UqZCy98CKTSAu48g+hlB0xVIutTqCVcP+PbF+v7tyzofAtXLGuc BOgJVZ8eFcgd4RycuHPvTtY2+CDsLtR8LunQp1IfhqXDhdDvfoV8FLoF8iZxo3Zm LOYJCj6KTNaQnsmoh/6Qoh9IwalRBEOmqlopestaMVNQQtRfgs3rT1P4a9IV83e3 f28EDwOs7vttcTSWNi6GW8/sQeH0HuogMNfzTddRH9wRnGRSBhmeE5k7dQ4EyxlS 3wPL4yttrhlzAylWegnq9dW8syHFdMg= -----END CERTIFICATE-----Generated at Sat Dec 20 11:04:00 2025 by rpki-client