This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa File: ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa (raw, json) Hash identifier: Yp6Sx6dzzij5zDrLnVOm9U9q8KIuEykNHVVydFrK8wU= Subject key identifier: 2B:6B:76:70:93:12:D7:10:08:FC:BF:FA:5E:64:07:70:E2:A9:B7:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C4011484F4E47C84AF1CAE280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.177.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:48:4f:4e:47:c8:4a:f1:ca:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=e903fb07-0788-461b-b550-eb367d74a3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e9:be:a5:8a:31:ac:31:a5:1b:7f:24:ce:2a: d8:15:2e:e6:07:c0:e4:1a:cd:60:04:c6:1f:70:3c: 4e:4b:2c:50:50:25:4b:38:2e:22:41:8e:5c:50:2f: e5:a8:94:5f:fc:03:f0:3d:de:46:e3:83:7d:16:dc: db:7d:17:1e:0c:b7:89:1d:e5:43:1e:ca:46:28:18: 37:94:13:94:6f:6c:8b:11:ac:0c:4b:f0:9f:bb:cb: b6:da:3e:a8:c3:a7:0c:5e:93:4d:41:64:f5:7f:69: 08:6f:0f:e6:b4:c0:86:20:b9:a9:c4:db:4c:e9:32: 21:76:5c:4a:63:05:1d:e2:25:88:27:fa:f2:07:e2: 75:ad:7a:49:18:bb:54:13:69:eb:e5:7a:10:7e:be: 29:25:a0:c7:ca:3e:d0:db:42:84:1e:6d:8f:3a:e2: fb:19:20:56:eb:62:fe:11:81:13:fe:25:70:d6:86: 3b:b8:14:d5:de:cc:20:97:e5:9a:e6:c0:a8:3d:71: 3c:f6:32:c6:5e:e2:58:45:b6:c3:af:07:af:4a:e7: ba:27:03:99:28:27:54:e9:e1:dd:70:df:ff:aa:2e: 35:72:2a:8b:2c:79:2b:99:b9:e0:de:32:ce:bf:32: b0:1c:c8:e1:7b:d1:ff:80:42:75:fc:32:de:36:3f: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6B:76:70:93:12:D7:10:08:FC:BF:FA:5E:64:07:70:E2:A9:B7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:96:d8:cd:10:99:cc:58:a1:02:82:de:61:fa:d5:38:5b:a2: 3c:0c:cc:c0:7e:88:07:7b:73:9d:2b:d0:43:be:64:c8:17:d9: ae:7f:d8:04:99:cf:d0:08:8f:90:0a:68:a3:98:a0:fe:3b:e1: 95:97:ef:20:47:d6:3c:50:36:41:64:2b:de:95:33:fc:1f:88: e5:5b:96:5a:11:6e:65:bf:c6:13:4d:20:d9:49:57:14:ff:51: ae:ce:e2:50:6d:3b:30:90:ca:cd:8f:ce:79:34:11:41:1b:e4: aa:dd:95:dc:b0:5f:dc:01:27:fb:77:9d:11:4f:0c:47:e6:f2: 7e:a3:71:de:64:43:44:81:63:dd:f0:0d:fc:e4:11:2d:5a:4f: 14:e9:19:a4:3b:f7:e4:0f:c6:60:2f:8a:1e:a1:47:3c:35:6c: 64:e0:31:28:7c:13:79:d8:c1:4e:1b:21:49:c7:a2:41:f2:63: ba:2b:c5:ee:03:3d:35:91:7e:78:37:e9:a7:b6:4e:ff:61:57: b6:8a:21:95:b0:c7:b5:ca:2d:b4:40:4f:67:c1:25:2d:2d:22: c1:52:b1:17:6d:ce:ed:e9:05:4a:f5:b3:6f:d6:bc:d2:9d:79: d5:6a:64:a5:88:59:f0:0d:6f:1e:77:00:fc:b1:35:2a:24:4c: 4e:65:79:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEUhPTkfISvHK4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZTkwM2ZiMDctMDc4OC00NjFiLWI1NTAtZWIzNjdkNzRhM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgum+pYoxrDGlG38kzirYFS7mB8DkGs1gBMYf cDxOSyxQUCVLOC4iQY5cUC/lqJRf/APwPd5G44N9FtzbfRceDLeJHeVDHspGKBg3 lBOUb2yLEawMS/Cfu8u22j6ow6cMXpNNQWT1f2kIbw/mtMCGILmpxNtM6TIhdlxK YwUd4iWIJ/ryB+J1rXpJGLtUE2nr5XoQfr4pJaDHyj7Q20KEHm2POuL7GSBW62L+ EYET/iVw1oY7uBTV3swgl+Wa5sCoPXE89jLGXuJYRbbDrwevSue6JwOZKCdU6eHd cN//qi41ciqLLHkrmbng3jLOvzKwHMjhe9H/gEJ1/DLeNj9nMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtrdnCTEtcQCPy/+l5kB3DiqberMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWIyNGQ2MmMtMmZmZi0z YmFmLWI5MmEtMGQyOGFhYWNhMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiW2M0QmcxYoQKC3mH61ThbojwMzMB+iAd7c50r0EO+ZMgX2a5/2ASZ z9AIj5AKaKOYoP474ZWX7yBH1jxQNkFkK96VM/wfiOVblloRbmW/xhNNINlJVxT/ Ua7O4lBtOzCQys2Pznk0EUEb5KrdldywX9wBJ/t3nRFPDEfm8n6jcd5kQ0SBY93w DfzkES1aTxTpGaQ79+QPxmAvih6hRzw1bGTgMSh8E3nYwU4bIUnHokHyY7orxe4D PTWRfng36ae2Tv9hV7aKIZWwx7XKLbRAT2fBJS0tIsFSsRdtzu3pBUr1s2/WvNKd edVqZKWIWfANbx53APyxNSokTE5leXo= -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:21 2025 by rpki-client