This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa File: 00c8ed4f-37f4-323f-8afb-55168be0c0df.roa (raw, json) Hash identifier: bnuFQuFYHjNr1XhYOV1IKZR7jtJPIPwPnzAooGzJ7Lc= Subject key identifier: DE:E7:DB:1F:4A:64:49:E4:B9:18:35:48:65:12:93:D8:12:21:CF:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A75799B282C40876F2D920 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:57:99:b2:82:c4:08:76:f2:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=08730d6d-5bd0-42c8-ab04-08a6c5ea212e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:77:0a:34:62:b7:33:90:21:d4:bd:32:fc:d6: 2a:33:7f:18:51:43:8b:81:f0:57:e1:0d:27:4b:b5: bd:c2:f6:35:22:a8:04:da:e5:e2:16:4f:b0:aa:6e: 68:06:56:89:07:03:d7:fd:3f:5a:97:fe:72:16:8a: 60:d8:a0:e8:85:58:78:fc:fb:fa:d0:0e:0f:a6:f8: 49:ed:64:7c:36:36:51:e3:c6:a0:f9:e1:d7:ea:d5: db:1f:19:e5:f6:d3:d9:37:6f:d4:5d:44:0c:0c:c4: d0:02:ac:60:2c:b9:34:76:eb:3b:8e:4d:76:aa:e2: 90:84:f8:9d:9d:28:da:30:00:56:36:f9:db:96:3c: 43:1e:4f:d4:c0:1e:b8:24:8d:a8:40:20:16:06:05: 85:7d:39:52:a4:9a:f4:ca:ac:7c:16:38:37:7c:78: 41:88:29:81:95:e5:cf:6a:b1:97:6b:fd:ee:b1:71: 13:23:b7:da:8b:ff:fd:9b:d4:f5:83:32:ac:23:2e: ec:22:d0:4a:c4:9e:7a:b5:a7:46:32:de:32:2c:ab: 12:d2:ef:08:c6:6a:f3:f0:0c:d6:f7:55:55:58:5c: 32:f9:36:48:46:d0:33:ff:c3:26:87:e0:0a:cb:0c: 53:a1:07:38:3b:0e:58:9e:7e:8a:4e:80:e6:f8:2e: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:DB:1F:4A:64:49:E4:B9:18:35:48:65:12:93:D8:12:21:CF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:23:15:d2:3a:ce:3e:5d:f5:70:b1:ac:87:7b:78:db:92:22: 00:02:35:33:51:fa:06:05:88:6d:da:9d:ed:ca:71:4b:f5:13: 81:05:00:32:ab:31:62:08:8a:45:af:a7:e9:e6:b9:63:d7:f2: fb:24:65:66:96:14:64:82:e5:0e:df:de:0f:34:48:51:a7:2d: 5c:ec:88:6f:33:0c:d8:66:a7:cb:29:76:8a:bf:10:86:50:24: fa:85:42:66:23:dc:9d:92:4f:c2:81:82:5f:f8:47:ae:a2:ef: b6:7e:ce:bd:ac:9a:7f:2b:4d:19:d6:17:ac:a4:0f:14:17:ec: 12:0b:9a:df:b1:c2:40:40:05:18:5d:64:14:3c:86:84:6c:7c: cc:8b:fc:d8:26:f5:56:4c:ed:28:00:bd:ff:fc:b3:da:69:5f: 9b:01:c9:42:99:bc:dd:29:0f:4e:24:2a:47:5f:3a:7f:04:a6: 1a:e4:2d:ff:c4:d7:b2:bc:69:e0:f6:46:35:3a:71:f0:ca:40: 54:79:b6:a4:d8:3d:d2:47:c3:b6:69:d5:19:0f:bb:a2:88:00: 81:0e:d7:1f:89:8c:1c:a5:d8:63:91:41:33:96:5d:4f:a7:e5: 46:dc:8e:73:c7:ef:52:9c:bc:64:57:cb:c6:6b:d5:c3:d0:1b: 62:73:21:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1eZsoLECHby2SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MDg3MzBkNmQtNWJkMC00MmM4LWFiMDQtMDhhNmM1ZWEyMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XcKNGK3M5Ah1L0y/NYqM38YUUOLgfBX4Q0n S7W9wvY1IqgE2uXiFk+wqm5oBlaJBwPX/T9al/5yFopg2KDohVh4/Pv60A4PpvhJ 7WR8NjZR48ag+eHX6tXbHxnl9tPZN2/UXUQMDMTQAqxgLLk0dus7jk12quKQhPid nSjaMABWNvnbljxDHk/UwB64JI2oQCAWBgWFfTlSpJr0yqx8Fjg3fHhBiCmBleXP arGXa/3usXETI7fai//9m9T1gzKsIy7sItBKxJ56tadGMt4yLKsS0u8Ixmrz8AzW 91VVWFwy+TZIRtAz/8Mmh+AKywxToQc4Ow5Ynn6KToDm+C5LKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7n2x9KZEnkuRg1SGUSk9gSIc/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBjOGVkNGYtMzdmNC0z MjNmLThhZmItNTUxNjhiZTBjMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQjFdI6zj5d9XCxrId7eNuSIgACNTNR+gYFiG3ane3KcUv1E4EFADKr MWIIikWvp+nmuWPX8vskZWaWFGSC5Q7f3g80SFGnLVzsiG8zDNhmp8spdoq/EIZQ JPqFQmYj3J2ST8KBgl/4R66i77Z+zr2smn8rTRnWF6ykDxQX7BILmt+xwkBABRhd ZBQ8hoRsfMyL/Ngm9VZM7SgAvf/8s9ppX5sByUKZvN0pD04kKkdfOn8EphrkLf/E 17K8aeD2RjU6cfDKQFR5tqTYPdJHw7Zp1RkPu6KIAIEO1x+JjByl2GORQTOWXU+n 5UbcjnPH71KcvGRXy8Zr1cPQG2JzIQo= -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:51 2026 by rpki-client