This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa File: 8c008d44-98e9-3f98-b352-39572488247b.roa (raw, json) Hash identifier: GUZZLjlzZ4w0iOo73XSe1J0FvBz0/MBrfyv4KzYp6BU= Subject key identifier: 9E:0D:EF:BD:22:9B:9B:E9:C1:B0:89:AD:EC:47:6B:9E:2F:0D:C1:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A74828B2F48D7979A4DFA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:48:28:b2:f4:8d:79:79:a4:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=7d2a10d5-67a9-4c1a-8272-2423fefd97bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d8:61:c7:b6:89:16:f0:7a:18:03:23:69:9d: ae:40:12:34:f6:89:d2:c2:98:b0:a5:35:db:d8:f1: 30:85:ed:0c:b7:c2:c0:8c:2f:97:fd:6d:17:17:e6: 8f:7a:59:3c:9a:64:31:09:4f:63:c1:79:3f:dc:4c: 59:cb:c8:47:e8:f7:a6:fe:fd:fb:ea:45:83:ce:a9: ac:67:ad:a3:84:e3:af:c5:bb:ea:ad:14:ea:b5:ab: 7d:33:50:a4:f6:4d:5c:bb:0e:bf:a3:7f:45:2b:9b: 2c:78:2f:40:eb:0c:fd:1e:e6:e8:25:b9:f1:55:41: 29:2e:31:88:d4:2b:25:eb:7b:e5:7d:be:fd:85:cf: c0:8f:9d:c8:2f:1a:81:2c:95:44:64:aa:c9:8c:86: 78:1b:86:65:a6:d1:aa:c2:01:d2:b9:3c:4a:af:14: ef:7b:cb:f5:6d:f0:10:b1:fa:fd:3d:5e:21:c7:47: 30:d6:0b:27:f8:e8:d6:1b:65:1f:6b:4c:19:95:0c: 7e:af:c9:55:ca:b0:06:19:0f:8e:34:6c:53:ee:ab: 33:70:07:76:78:98:bd:c7:3e:96:a1:86:f4:f0:c9: e5:c9:22:c1:69:2e:2f:3a:63:fc:b3:be:62:12:23: 01:d5:8c:a5:e7:f1:d4:22:4a:a9:d4:a5:1c:58:44: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:EF:BD:22:9B:9B:E9:C1:B0:89:AD:EC:47:6B:9E:2F:0D:C1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:35:9f:fe:4a:ba:14:0f:59:45:e7:cd:03:50:eb:5d:9e:3a: ea:48:96:a3:db:b2:65:dd:08:20:01:6a:9b:2a:4e:a7:48:32: 43:ee:e9:bb:61:20:85:00:a0:dd:6e:9a:94:04:52:32:48:c6: 03:f2:f0:fe:72:a3:c9:79:ef:ff:a0:5f:f7:83:47:88:28:7c: ed:4d:d5:fc:ab:6d:82:9a:d5:8c:5f:49:5d:12:34:87:89:ab: 01:e9:a4:40:4b:85:f8:7b:e0:3a:8c:4b:e2:0d:23:5f:87:c9: 42:5f:6f:d2:a8:e2:84:d1:47:22:13:22:16:e8:93:0f:ee:d6: a9:fb:54:04:f0:16:bb:4f:b2:dc:5c:ec:db:31:ba:2c:ab:b0: ad:0f:d5:65:0d:68:ae:2a:39:87:46:e0:ef:82:c8:e2:90:33: 29:a2:06:74:5e:f1:31:d8:15:41:0c:c6:26:24:a6:91:83:ba: 24:dd:32:db:be:5a:64:15:b5:3f:85:78:cc:b3:c7:c1:75:ce: 25:39:82:e9:d6:ce:c0:81:c8:aa:be:3f:fa:a5:73:e6:97:3b: 3e:af:5a:9c:9d:d2:7f:6b:48:87:50:e0:f2:56:95:97:9b:e9: 77:08:25:0d:09:62:23:01:16:88:3e:d3:b7:02:52:e8:89:24: 5e:8a:26:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0gosvSNeXmk36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk N2QyYTEwZDUtNjdhOS00YzFhLTgyNzItMjQyM2ZlZmQ5N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdhhx7aJFvB6GAMjaZ2uQBI09onSwpiwpTXb 2PEwhe0Mt8LAjC+X/W0XF+aPelk8mmQxCU9jwXk/3ExZy8hH6Pem/v376kWDzqms Z62jhOOvxbvqrRTqtat9M1Ck9k1cuw6/o39FK5sseC9A6wz9HuboJbnxVUEpLjGI 1Csl63vlfb79hc/Aj53ILxqBLJVEZKrJjIZ4G4ZlptGqwgHSuTxKrxTve8v1bfAQ sfr9PV4hx0cw1gsn+OjWG2Ufa0wZlQx+r8lVyrAGGQ+ONGxT7qszcAd2eJi9xz6W oYb08MnlySLBaS4vOmP8s75iEiMB1Yyl5/HUIkqp1KUcWEQirQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4N770im5vpwbCJrexHa54vDcFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGMwMDhkNDQtOThlOS0z Zjk4LWIzNTItMzk1NzI0ODgyNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU1n/5KuhQPWUXnzQNQ612eOupIlqPbsmXdCCABapsqTqdIMkPu6bth IIUAoN1umpQEUjJIxgPy8P5yo8l57/+gX/eDR4gofO1N1fyrbYKa1YxfSV0SNIeJ qwHppEBLhfh74DqMS+INI1+HyUJfb9Ko4oTRRyITIhbokw/u1qn7VATwFrtPstxc 7NsxuiyrsK0P1WUNaK4qOYdG4O+CyOKQMymiBnRe8THYFUEMxiYkppGDuiTdMtu+ WmQVtT+FeMyzx8F1ziU5gunWzsCByKq+P/qlc+aXOz6vWpyd0n9rSIdQ4PJWlZeb 6XcIJQ0JYiMBFog+07cCUuiJJF6KJrY= -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:59 2025 by rpki-client