This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: Sn8bzXu4Cp4bB+H60oi+hrrq01e5xI1pgdgfDXTPoP0= Subject key identifier: CC:DD:F4:76:6B:4B:CB:4F:49:DF:24:94:12:49:DB:CA:CF:88:52:DF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7F8CE459A358DAA487A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:f8:ce:45:9a:35:8d:aa:48:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=9c26e9ad-5c90-4e0a-9bad-5fddac7fac9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:92:36:59:0a:a0:50:f7:28:83:cd:e3:d4: 36:a8:3c:62:8e:98:79:c0:07:91:4c:9f:57:74:ea: eb:29:14:11:e7:2c:0a:15:36:16:bd:b1:51:f7:f6: 9f:88:6e:36:27:e0:34:a8:be:5f:d0:cd:5f:12:2e: 6a:00:44:32:20:24:ad:f4:3d:d4:c9:9e:b9:ea:b2: 37:79:4d:10:93:0f:a3:2f:7b:07:79:14:95:49:f2: 85:85:17:71:8d:60:af:29:1b:d3:2d:b3:24:96:8f: 5d:2b:b8:36:0d:91:67:f8:83:0c:ac:5f:00:4b:63: 3c:39:b6:ff:4c:bf:47:02:11:bb:25:5c:0e:e6:a5: 27:a2:ec:87:a3:fb:fa:a7:7b:0f:db:65:13:9d:cb: d4:18:7a:1f:93:8e:4c:ef:6a:3a:cf:14:35:20:ec: 1a:04:cb:49:d5:af:20:46:b6:8b:6d:ac:c9:4f:ae: 86:9d:2d:a7:93:3b:c8:28:f5:11:69:5e:13:a7:91: d1:15:f6:b6:3b:f8:60:f3:ca:d3:48:99:28:9b:57: 3c:27:0f:4a:51:41:a7:ab:21:42:fd:fe:f2:04:b2: 9b:8d:1b:cc:5f:f8:d6:b1:27:20:7a:7b:cc:71:0f: 21:4b:ce:61:35:32:8b:d0:13:a3:4f:f7:02:ee:54: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DD:F4:76:6B:4B:CB:4F:49:DF:24:94:12:49:DB:CA:CF:88:52:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7a:5f:63:d6:a2:a9:11:5d:85:c6:5b:0b:2b:51:4d:ea:5b: f5:ec:36:c4:c7:ad:98:69:22:08:a2:ce:cc:95:d0:ca:4b:70: 7a:44:ea:3f:dd:6c:b9:6d:7d:2f:ce:f4:62:70:cb:98:c7:a0: e5:76:28:22:ed:2c:a1:69:47:40:ae:1b:16:28:40:5a:01:04: ee:15:97:c0:3e:a1:f8:1b:6b:56:8a:38:db:4f:ef:d4:67:59: c0:a2:8b:1b:12:bc:d7:34:a3:d3:4b:a7:c2:b1:85:47:c8:10: 8b:76:5d:a9:ff:5b:30:b3:a0:fa:b2:6a:20:d2:de:89:d7:f1: a7:f5:00:84:be:d1:b4:cd:9d:5b:53:45:28:3a:ae:a9:e4:77: c1:6a:ec:f4:ff:d8:52:c5:3c:fc:a1:6b:1d:9e:9e:27:f3:11: e8:9e:c3:29:4c:27:04:94:72:51:bd:1e:f3:62:65:26:23:1d: c7:2d:e6:79:cd:ac:cd:4e:74:ea:e0:ac:36:49:5e:cc:47:05: 2d:b5:26:32:b6:ac:35:0f:7f:7f:79:99:b8:60:98:1f:17:8b: 34:b7:d2:49:9c:1d:43:0f:a1:d6:b6:57:ee:92:5b:ce:76:3f: 40:98:79:19:03:fd:5a:2c:d4:30:58:d7:1f:45:b1:1d:3f:40: 9a:0a:10:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/jORZo1japIegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OWMyNmU5YWQtNWM5MC00ZTBhLTliYWQtNWZkZGFjN2ZhYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNGSNlkKoFD3KIPN49Q2qDxijph5wAeRTJ9X dOrrKRQR5ywKFTYWvbFR9/afiG42J+A0qL5f0M1fEi5qAEQyICSt9D3UyZ656rI3 eU0Qkw+jL3sHeRSVSfKFhRdxjWCvKRvTLbMklo9dK7g2DZFn+IMMrF8AS2M8Obb/ TL9HAhG7JVwO5qUnouyHo/v6p3sP22UTncvUGHofk45M72o6zxQ1IOwaBMtJ1a8g RraLbazJT66GnS2nkzvIKPURaV4Tp5HRFfa2O/hg88rTSJkom1c8Jw9KUUGnqyFC /f7yBLKbjRvMX/jWsScgenvMcQ8hS85hNTKL0BOjT/cC7lT2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzd9HZrS8tPSd8klBJJ28rPiFLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR6X2PWoqkRXYXGWwsrUU3qW/XsNsTHrZhpIgiizsyV0MpLcHpE6j/d bLltfS/O9GJwy5jHoOV2KCLtLKFpR0CuGxYoQFoBBO4Vl8A+ofgba1aKONtP79Rn WcCiixsSvNc0o9NLp8KxhUfIEIt2Xan/WzCzoPqyaiDS3onX8af1AIS+0bTNnVtT RSg6rqnkd8Fq7PT/2FLFPPyhax2enifzEeiewylMJwSUclG9HvNiZSYjHcct5nnN rM1OdOrgrDZJXsxHBS21JjK2rDUPf395mbhgmB8XizS30kmcHUMPoda2V+6SW852 P0CYeRkD/Vos1DBY1x9FsR0/QJoKEEQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:54 2026 by rpki-client