This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa File: dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa (raw, json) Hash identifier: Qz8sL/ougQ0AAd8HzrAOaSxLylS/wF3INx8G/naMDbw= Subject key identifier: 91:2B:10:88:E9:96:67:D4:3E:ED:A9:93:AF:EF:86:2D:25:2A:05:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C33812035DB2EC2B4CD311800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.217.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:20:35:db:2e:c2:b4:cd:31:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=eb28b408-e844-43a2-b687-3cecedd5331e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:97:88:d5:7d:e8:56:4f:6e:c1:42:a5:01: b0:0e:d8:37:37:c2:28:b2:bc:07:9d:35:ef:6b:40: 06:0e:e0:d2:c3:48:8a:a3:42:af:3a:fe:0e:7b:da: e5:fd:fa:06:16:dd:52:ba:28:02:6e:9f:56:73:06: 38:b6:f6:b3:6a:57:6d:90:88:bb:26:af:1a:83:0b: 85:fb:c7:18:36:6b:31:17:c2:48:f3:7a:b7:bc:80: c0:0b:26:e2:30:f7:86:30:cf:94:45:3d:f9:9f:b4: a2:41:ba:54:a7:54:e0:fe:38:54:c2:a9:35:eb:43: 05:f7:44:85:f6:2c:e5:12:27:de:41:52:ee:8a:d8: 91:34:19:b8:bf:90:0b:1d:9a:f1:fd:5d:d0:e5:3d: 86:f9:38:7d:31:36:6a:10:32:89:85:f7:5f:6e:b7: ef:e1:66:3d:12:4e:c2:0a:eb:70:d8:b7:c2:d8:3a: 50:23:93:fb:53:11:1e:6a:f0:3c:ac:4c:40:e4:6b: 3b:6b:b8:a6:a6:f3:64:0d:a4:52:36:52:26:88:44: 55:0e:56:61:fb:c8:fb:20:9a:f9:65:ef:16:60:1c: ba:6d:2d:42:1c:e3:fa:04:d8:67:7c:44:49:53:4a: 1a:2a:ad:e3:95:ec:cc:7b:b7:9d:da:e7:3b:68:ec: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:10:88:E9:96:67:D4:3E:ED:A9:93:AF:EF:86:2D:25:2A:05:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfb8c5ff-4045-372f-bb31-93f51651c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b0:43:76:e5:d3:3e:c2:40:32:7a:5b:fb:1b:86:66:3f:a0: a2:35:dc:7d:83:0a:6b:6d:4c:90:a2:b1:d9:77:1c:7d:89:55: f2:cb:b6:d2:af:2f:1d:32:c4:d2:42:3f:3d:e2:82:3c:85:3a: ac:2d:e1:97:8d:57:6b:ad:75:44:88:32:7b:17:23:ea:95:57: 7f:3c:04:8a:2e:85:26:34:2f:bf:69:ad:02:13:89:1e:bd:cf: e3:15:54:34:3c:05:73:dd:31:e2:2b:36:ee:52:33:52:25:05: 64:bd:d4:c5:0f:2c:4b:7a:27:a9:d7:fc:97:01:b5:57:10:95: 38:0d:84:41:18:5d:fa:e9:7e:54:14:63:f7:f0:2c:37:5d:ac: 37:3c:50:96:45:00:ed:40:11:24:11:a6:5b:46:e0:24:5d:f3: a7:08:c1:f6:57:40:16:f5:d6:1b:96:84:ba:9a:e5:55:0f:94: f6:d5:3e:ad:ee:7f:b3:3b:8d:52:c8:89:6f:26:9d:72:88:d3: 63:ee:d5:a6:b6:50:5c:d5:14:d0:2f:9a:87:04:16:e8:3c:b2: cf:d0:81:51:db:cb:ba:db:d2:86:70:b0:e1:d5:09:cf:c2:4c: 81:d4:8f:59:e0:d3:2c:ac:23:82:37:6a:c5:6c:9f:c1:0a:54: 09:41:b7:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgSA12y7CtM0xGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZWIyOGI0MDgtZTg0NC00M2EyLWI2ODctM2NlY2VkZDUzMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPOXiNV96FZPbsFCpQGwDtg3N8IosrwHnTXv a0AGDuDSw0iKo0KvOv4Oe9rl/foGFt1SuigCbp9WcwY4tvazaldtkIi7Jq8agwuF +8cYNmsxF8JI83q3vIDACybiMPeGMM+URT35n7SiQbpUp1Tg/jhUwqk160MF90SF 9izlEifeQVLuitiRNBm4v5ALHZrx/V3Q5T2G+Th9MTZqEDKJhfdfbrfv4WY9Ek7C Cutw2LfC2DpQI5P7UxEeavA8rExA5Gs7a7impvNkDaRSNlImiERVDlZh+8j7IJr5 Ze8WYBy6bS1CHOP6BNhnfERJU0oaKq3jlezMe7ed2uc7aOwCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJErEIjplmfUPu2pk6/vhi0lKgXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZiOGM1ZmYtNDA0NS0z NzJmLWJiMzEtOTNmNTE2NTFjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKywQ3bl0z7CQDJ6W/sbhmY/oKI13H2DCmttTJCisdl3HH2JVfLLttKv Lx0yxNJCPz3igjyFOqwt4ZeNV2utdUSIMnsXI+qVV388BIouhSY0L79prQITiR69 z+MVVDQ8BXPdMeIrNu5SM1IlBWS91MUPLEt6J6nX/JcBtVcQlTgNhEEYXfrpflQU Y/fwLDddrDc8UJZFAO1AESQRpltG4CRd86cIwfZXQBb11huWhLqa5VUPlPbVPq3u f7M7jVLIiW8mnXKI02Pu1aa2UFzVFNAvmocEFug8ss/QgVHby7rb0oZwsOHVCc/C TIHUj1ng0yysI4I3asVsn8EKVAlBt88= -----END CERTIFICATE-----Generated at Sat Dec 20 09:27:01 2025 by rpki-client