This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa File: 9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa (raw, json) Hash identifier: LrfMNa29c4pSGyo/QrksuJWycemTROuUOZF9mqjGELU= Subject key identifier: B2:29:61:AA:BE:36:74:4B:A8:E9:D8:E7:42:ED:0B:52:FD:98:D8:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C4011542A0190D62C7652E680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.177.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:54:2a:01:90:d6:2c:76:52:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=4711afe3-d7f4-4b39-adfd-18c08c3d2cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:d5:cf:16:4d:38:a2:04:b3:66:07:b0:dd: cc:cf:1f:a5:a5:dd:43:14:49:f1:c0:da:8b:01:a5: a1:37:33:c9:04:71:63:d3:2a:88:0b:e5:b3:9e:ac: 2e:e5:85:fe:86:83:27:30:1b:9b:53:9a:4e:75:99: bd:2a:96:52:f2:02:ab:b5:b2:4f:68:7c:51:ba:6a: 78:e2:44:f9:c2:eb:96:ac:9b:31:ac:16:cf:fa:6d: 8c:ec:47:dd:55:34:af:c7:cb:17:53:d5:c5:7c:00: a2:38:cc:cb:32:d5:6c:f2:92:11:5c:e4:55:22:99: 44:ab:36:a0:75:b8:df:cf:4f:5f:b8:62:3a:78:6e: bd:45:e2:c8:b3:30:a2:f2:25:fe:73:6b:89:b9:66: a1:49:9f:04:1d:5c:80:e0:52:cf:87:02:96:ac:d0: 97:6f:d6:40:9e:a6:15:0e:dc:3d:35:11:ad:f1:d4: c9:7f:90:c2:68:8b:44:3e:d7:02:b0:ff:4f:b0:d2: 2b:dc:5a:7b:ea:00:0a:7c:78:5b:b0:08:e4:ec:82: f4:1c:4a:7a:73:98:1a:b1:b5:7b:1f:bc:96:61:22: 92:55:de:fa:1f:49:73:30:79:cf:d8:4d:ac:e8:1a: 14:de:af:df:2b:fe:cb:e8:f6:fa:2f:e2:ac:8f:78: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:29:61:AA:BE:36:74:4B:A8:E9:D8:E7:42:ED:0B:52:FD:98:D8:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4c:ea:a6:a9:c9:30:ce:b2:98:82:e5:b6:91:01:13:0a:df: c2:5e:f0:88:ab:5b:52:72:7c:47:bc:f9:59:36:79:82:03:32: 67:36:33:0c:3c:54:60:d1:af:0e:57:8a:f5:0e:1a:91:37:0e: c4:d7:f9:7b:8a:40:d9:a9:66:d2:4f:fc:ff:ea:6b:2c:4a:9d: 7d:a7:9b:04:c6:e8:5f:9a:9b:80:56:e1:94:62:38:51:52:62: 82:92:6c:79:14:b9:6f:c0:e2:82:6d:76:69:79:7b:9c:45:46: b2:5c:3c:e7:b1:98:07:08:c3:44:b0:85:ae:02:47:8f:6f:d4: d4:24:93:a0:24:83:68:2b:5d:2c:48:9b:89:a7:de:38:04:b9: 2b:06:a6:53:35:d7:d8:5b:13:75:4e:5d:48:b5:4e:17:32:04: 3a:b1:e3:c0:99:23:8c:c0:db:0d:ba:0b:6c:e4:59:00:0c:99: fb:84:08:eb:4d:02:a3:4e:5a:7e:1a:d2:8b:2f:a3:2b:c9:c1: 30:2e:40:39:b0:e0:f3:6c:3a:5c:35:40:43:b4:a5:20:f9:2b: 56:ca:00:50:b4:45:69:35:41:fe:4d:e3:dc:7e:fa:cb:34:2b: 5a:eb:0f:84:19:bc:a7:ab:f2:c9:78:2b:93:fb:f6:60:34:01: 84:86:49:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEVQqAZDWLHZS5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk NDcxMWFmZTMtZDdmNC00YjM5LWFkZmQtMThjMDhjM2QyY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05TVzxZNOKIEs2YHsN3Mzx+lpd1DFEnxwNqL AaWhNzPJBHFj0yqIC+Wznqwu5YX+hoMnMBubU5pOdZm9KpZS8gKrtbJPaHxRump4 4kT5wuuWrJsxrBbP+m2M7EfdVTSvx8sXU9XFfACiOMzLMtVs8pIRXORVIplEqzag dbjfz09fuGI6eG69ReLIszCi8iX+c2uJuWahSZ8EHVyA4FLPhwKWrNCXb9ZAnqYV Dtw9NRGt8dTJf5DCaItEPtcCsP9PsNIr3Fp76gAKfHhbsAjk7IL0HEp6c5gasbV7 H7yWYSKSVd76H0lzMHnP2E2s6BoU3q/fK/7L6Pb6L+Ksj3jZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIpYaq+NnRLqOnY50LtC1L9mNiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWI1Y2ZhMzMtZmMwNS0z NGFhLWIxYjktYmZlOGE3ZDBlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFM6qapyTDOspiC5baRARMK38Je8IirW1JyfEe8+Vk2eYIDMmc2Mww8 VGDRrw5XivUOGpE3DsTX+XuKQNmpZtJP/P/qayxKnX2nmwTG6F+am4BW4ZRiOFFS YoKSbHkUuW/A4oJtdml5e5xFRrJcPOexmAcIw0Swha4CR49v1NQkk6Akg2grXSxI m4mn3jgEuSsGplM119hbE3VOXUi1ThcyBDqx48CZI4zA2w26C2zkWQAMmfuECOtN AqNOWn4a0osvoyvJwTAuQDmw4PNsOlw1QEO0pSD5K1bKAFC0RWk1Qf5N49x++ss0 K1rrD4QZvKer8sl4K5P79mA0AYSGSVI= -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:49 2025 by rpki-client