This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa File: e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa (raw, json) Hash identifier: xDTvoW17IzRMtOHMFeXVX4I7TlWsrlq5PA10lyzHujY= Subject key identifier: C7:26:06:4A:12:C5:AD:79:D6:9C:E4:C5:11:F2:65:A0:74:6A:D8:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C401154DE85F920E5DD0DFF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.177.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:54:de:85:f9:20:e5:dd:0d:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=df8edaac-3127-4658-893a-2b36c3c15a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:bf:8c:a2:98:77:29:c6:ae:ed:13:69:4a: ad:81:e6:46:dc:f0:3c:23:3d:c0:0a:ab:18:2f:4a: 39:f8:87:da:00:3b:24:82:8e:6f:33:80:36:51:05: e7:28:fe:30:ff:02:7d:90:d6:c4:46:bd:64:14:64: b4:f0:6f:fd:35:9c:bd:cd:fc:b0:c6:83:69:4e:24: ee:c6:c3:9a:8b:62:f3:e6:e7:ba:dd:0b:7b:75:c8: 86:73:8a:55:0b:4d:68:c4:3a:2f:8e:b6:38:81:9c: 75:7d:6f:0c:d6:a9:13:89:b8:e3:d1:ff:c7:87:b5: 28:2d:c1:be:13:ce:4b:e6:f1:26:34:76:44:38:aa: 72:08:d4:ed:a7:3c:66:7b:81:b5:e4:0c:45:da:1a: bb:7c:39:7b:c1:0e:0e:dc:c5:4d:77:bf:d4:ce:3c: 32:36:da:5b:6a:c9:4c:ef:61:47:bb:f4:40:95:5c: 07:3d:fe:f7:6e:2c:3e:25:57:9b:1e:49:66:4e:cb: f2:3a:73:90:f5:1d:01:bf:49:3f:8a:ea:a1:20:5d: 10:e0:2b:05:09:fe:68:74:e6:83:64:36:9a:f5:ae: 29:68:2a:fe:53:ee:ec:91:90:d7:a7:50:9b:1f:1c: 90:53:7b:0c:53:5a:d3:6c:e8:61:0a:b1:a1:99:f9: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:06:4A:12:C5:AD:79:D6:9C:E4:C5:11:F2:65:A0:74:6A:D8:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ed:9f:08:c0:4c:5d:f0:94:e5:63:70:b5:59:ff:51:10:48: 97:20:59:46:77:1e:d8:d6:c7:54:44:e0:23:37:e2:76:a5:c1: 96:8a:26:a7:ce:59:6f:59:84:7c:1b:1d:50:da:93:e4:33:ec: 6e:38:d7:0a:26:53:59:83:5d:35:83:ba:9a:df:14:fc:a2:2c: 2e:00:3f:ee:98:e3:68:1e:16:87:46:b4:fb:94:e0:05:c6:78: 31:8f:80:50:31:b1:0a:f8:00:a9:5c:69:be:2a:ae:df:e6:1c: 8a:8f:7b:dd:dc:a8:17:55:f9:a8:bf:94:dd:47:c3:42:b0:45: 15:99:25:03:23:18:9d:16:c8:ed:eb:85:ab:68:02:5f:c9:24: e0:ff:8d:de:5e:b4:3e:d5:1d:7d:3e:e9:3a:ba:48:d6:7a:f9: 24:c3:43:e0:3f:5c:af:4e:38:63:0a:0a:87:e3:87:c4:c9:8f: eb:6a:f4:92:3c:e3:43:69:55:81:d8:4b:34:6f:41:a0:53:a4: f0:7e:e9:6c:1f:ec:4e:26:13:9d:00:b6:f3:e6:15:7e:83:11: d9:16:56:b8:ad:f8:ad:a2:ba:95:53:80:1b:c7:21:27:e1:91: 21:25:e0:01:8b:b8:18:2f:30:2d:0d:79:7f:7b:f5:fb:56:b6: a7:db:ee:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEVTehfkg5d0N/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZGY4ZWRhYWMtMzEyNy00NjU4LTg5M2EtMmIzNmMzYzE1YTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC6/jKKYdynGru0TaUqtgeZG3PA8Iz3ACqsY L0o5+IfaADskgo5vM4A2UQXnKP4w/wJ9kNbERr1kFGS08G/9NZy9zfywxoNpTiTu xsOai2Lz5ue63Qt7dciGc4pVC01oxDovjrY4gZx1fW8M1qkTibjj0f/Hh7UoLcG+ E85L5vEmNHZEOKpyCNTtpzxme4G15AxF2hq7fDl7wQ4O3MVNd7/UzjwyNtpbaslM 72FHu/RAlVwHPf73biw+JVebHklmTsvyOnOQ9R0Bv0k/iuqhIF0Q4CsFCf5odOaD ZDaa9a4paCr+U+7skZDXp1CbHxyQU3sMU1rTbOhhCrGhmfkTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcmBkoSxa151pzkxRHyZaB0atirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdlNWQ2ZTUtOGJjZi0z MDVhLTg4ZmQtM2FkNGEzNjgzNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJftnwjATF3wlOVjcLVZ/1EQSJcgWUZ3HtjWx1RE4CM34nalwZaKJqfO WW9ZhHwbHVDak+Qz7G441womU1mDXTWDuprfFPyiLC4AP+6Y42geFodGtPuU4AXG eDGPgFAxsQr4AKlcab4qrt/mHIqPe93cqBdV+ai/lN1Hw0KwRRWZJQMjGJ0WyO3r hatoAl/JJOD/jd5etD7VHX0+6Tq6SNZ6+STDQ+A/XK9OOGMKCofjh8TJj+tq9JI8 40NpVYHYSzRvQaBTpPB+6Wwf7E4mE50AtvPmFX6DEdkWVrit+K2iupVTgBvHISfh kSEl4AGLuBgvMC0NeX979ftWtqfb7jw= -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:29 2025 by rpki-client