This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa File: 0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa (raw, json) Hash identifier: Nx3Zs8SuvfSpIhOVbXA+tKaFpuJ4BTJuy33yONXUFVI= Subject key identifier: B6:FE:65:69:52:2D:62:E1:3E:57:CB:47:FE:A7:BB:10:1F:3F:65:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A73E0E58A397AFACDE1040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:3e:0e:58:a3:97:af:ac:de:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1057c150-7b06-45ad-a233-b1d2731149bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:bf:1f:e2:c7:49:81:ca:ce:60:d2:74:ed: 6a:14:5b:c3:2e:87:00:a3:72:1c:4c:d4:a6:aa:71: 56:86:f0:45:94:57:c1:41:e2:95:a9:80:58:8c:04: 35:9f:35:0a:38:7f:ed:9a:7a:55:67:e7:b7:79:ce: 98:2b:f0:ab:18:d5:a7:64:ac:a3:c8:8d:7c:e5:3b: 7b:de:40:3a:aa:67:b6:97:af:66:ca:62:08:47:3c: dc:39:3f:cf:35:f8:47:4c:98:7b:32:b5:75:b9:1b: f2:2a:97:67:30:2c:78:7f:7b:9b:a0:2e:61:fa:81: 09:1c:fe:4d:cf:62:b3:40:3c:eb:07:70:d6:5b:d0: ce:71:2f:16:fb:ea:d0:55:3e:49:0c:9b:b4:48:58: 72:27:86:4d:53:b7:65:a1:b2:7e:98:3b:7a:8a:79: c6:50:a2:b6:23:94:20:5d:b4:06:b0:77:ff:a4:cc: e4:1d:08:23:85:5a:86:05:bd:ce:4a:48:6d:d7:e3: c6:b9:ce:f4:b4:78:80:40:64:c3:f4:d2:15:b3:7c: 44:d0:97:30:54:0c:75:15:80:02:ee:13:cc:60:7d: 44:4c:fe:6b:30:75:a5:24:e4:ad:06:7b:e9:8b:a5: 68:aa:be:cc:e0:1d:f5:fc:0f:c7:06:5e:4b:3c:21: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FE:65:69:52:2D:62:E1:3E:57:CB:47:FE:A7:BB:10:1F:3F:65:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6c:5c:6a:f9:e5:7c:4a:b0:c2:f7:26:f3:9f:99:c0:02:94: 79:55:ad:5d:9b:b8:1b:a6:49:22:29:5b:81:40:f8:73:3d:34: 91:d2:70:ef:35:8b:db:a4:9a:76:c3:9d:35:fc:e9:ae:87:45: 0c:02:6e:b7:69:c1:67:e3:7f:44:c2:f6:73:f8:9c:ed:74:57: 71:8a:8b:2f:18:32:02:8b:f7:c8:72:42:13:ae:53:8f:28:c1: 96:f3:dc:98:6f:3f:74:99:ad:b5:08:46:46:62:ca:54:4e:82: d9:ea:c3:9d:61:e2:19:35:ec:3e:f3:5d:c8:34:db:93:19:57: 53:9f:cc:d8:99:26:e1:9f:9b:52:1b:9b:c3:3c:b5:12:80:26: 93:0d:e9:49:08:4e:2e:92:07:f4:4d:d4:64:00:7d:08:f8:0e: 42:36:b4:11:fd:19:6e:9f:2d:54:1a:70:65:56:ae:a8:da:96: f8:59:28:9e:97:81:26:ef:84:14:d2:30:3a:17:c3:73:e6:5e: 4c:10:f3:d7:e0:85:69:3d:fa:1c:aa:0b:aa:b3:88:b1:1b:7e: a8:25:36:07:14:17:a9:24:49:56:21:80:b5:83:9a:6e:4e:a9: e0:69:a2:5c:10:5b:fb:57:c7:01:5c:9d:9f:35:46:ea:cd:e9: 9b:c0:35:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpz4OWKOXr6zeEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MTA1N2MxNTAtN2IwNi00NWFkLWEyMzMtYjFkMjczMTE0OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6e/H+LHSYHKzmDSdO1qFFvDLocAo3IcTNSm qnFWhvBFlFfBQeKVqYBYjAQ1nzUKOH/tmnpVZ+e3ec6YK/CrGNWnZKyjyI185Tt7 3kA6qme2l69mymIIRzzcOT/PNfhHTJh7MrV1uRvyKpdnMCx4f3uboC5h+oEJHP5N z2KzQDzrB3DWW9DOcS8W++rQVT5JDJu0SFhyJ4ZNU7dlobJ+mDt6innGUKK2I5Qg XbQGsHf/pMzkHQgjhVqGBb3OSkht1+PGuc70tHiAQGTD9NIVs3xE0JcwVAx1FYAC 7hPMYH1ETP5rMHWlJOStBnvpi6Voqr7M4B31/A/HBl5LPCH/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb+ZWlSLWLhPlfLR/6nuxAfP2WaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIyMTQ4NGItZjBmMi0z Y2E0LWJjZTUtN2U1YTY1YWE0MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpsXGr55XxKsML3JvOfmcAClHlVrV2buBumSSIpW4FA+HM9NJHScO81 i9ukmnbDnTX86a6HRQwCbrdpwWfjf0TC9nP4nO10V3GKiy8YMgKL98hyQhOuU48o wZbz3JhvP3SZrbUIRkZiylROgtnqw51h4hk17D7zXcg025MZV1OfzNiZJuGfm1Ib m8M8tRKAJpMN6UkITi6SB/RN1GQAfQj4DkI2tBH9GW6fLVQacGVWrqjalvhZKJ6X gSbvhBTSMDoXw3PmXkwQ89fghWk9+hyqC6qziLEbfqglNgcUF6kkSVYhgLWDmm5O qeBpolwQW/tXxwFcnZ81RurN6ZvANec= -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:21 2026 by rpki-client