This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa File: 069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa (raw, json) Hash identifier: rAtgc18ZsHGa7PHTgqK9UOoLE6QZkqJne1y/ndyCI7U= Subject key identifier: 8D:07:CF:77:4B:40:21:23:3A:88:3C:36:8E:08:E3:0C:E9:A0:FA:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A73484B792A4209EF58B60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 209.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:34:84:b7:92:a4:20:9e:f5:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=ddb40b61-4933-42b6-a728-403d099782a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:12:98:23:74:eb:8e:fb:70:c6:c5:75:fe: 31:e2:9b:38:c3:6f:25:f2:12:67:1f:75:2d:f3:e7: 20:f4:d7:6e:fa:62:fb:3c:02:69:51:eb:52:a8:ab: 39:b9:f0:a0:d7:77:e4:5f:f5:a6:5b:dc:1a:93:88: f0:52:0d:c8:36:72:4a:fb:23:12:79:1e:ef:c0:65: db:32:63:67:ad:b5:72:ab:25:ec:16:07:a3:b0:9f: d8:c9:68:c4:61:5c:c1:ed:4d:33:61:a5:c5:3b:aa: 89:3d:03:9f:89:11:0e:91:28:67:b7:95:fe:73:63: 84:d0:0f:1e:a2:09:67:99:47:e6:22:50:34:f5:d6: d4:a2:eb:4f:88:78:f0:aa:7b:23:73:9d:68:1b:5c: 02:77:97:d2:17:a6:26:75:f6:cc:13:cb:b7:17:15: c5:37:dd:fc:a3:cb:51:4f:83:29:d1:dd:c7:6c:19: ad:71:5d:f1:e2:3d:29:86:e6:50:fb:d7:ed:c3:bc: 74:7e:33:74:a8:1d:e7:00:ca:98:f3:69:1a:ae:d0: 05:c4:53:ce:26:fe:f4:68:ba:73:5c:9c:bc:b8:a8: ae:ab:74:ba:0e:20:cb:e3:2a:d2:92:56:4d:b4:8d: 0d:b8:7f:bd:86:a1:18:97:5c:db:6b:a1:c5:2c:dd: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:07:CF:77:4B:40:21:23:3A:88:3C:36:8E:08:E3:0C:E9:A0:FA:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e2:39:8c:a8:2c:c5:22:57:05:21:8f:3c:41:72:7e:d2:b7: e1:14:69:b8:64:dc:ff:d2:f4:31:88:21:fc:f5:53:99:cb:80: 2e:f5:81:1b:f0:91:10:17:62:db:e9:5b:8c:cd:7b:59:ef:f2: 26:8a:cc:ab:23:ac:04:f0:e9:9b:14:79:5d:68:9c:38:79:a8: 23:f6:3f:3e:87:91:91:b1:af:b9:aa:95:52:ec:8b:6d:c1:5a: ec:9b:7c:f0:af:4a:04:76:50:34:4b:5d:d1:5f:9d:ba:ec:0f: fd:ef:0a:96:97:73:2e:83:c8:a1:3e:c8:7e:5e:60:3f:80:72: 73:7b:60:71:31:e8:82:64:50:b9:2c:10:bb:6a:89:4b:60:52: d0:77:7b:90:5f:e0:ea:4a:f7:30:7a:d3:41:59:b8:bb:de:3e: 23:11:7b:ec:42:db:96:6f:50:1e:c5:6f:47:15:d5:d6:47:b1: b3:24:17:bd:ad:e4:a2:35:d1:b6:59:d7:5d:36:6a:c3:54:3a: e7:5b:40:a6:91:b3:2d:af:78:1b:40:13:95:98:00:7a:3d:d0: d9:2b:2a:74:33:fe:5a:07:dd:8f:a0:0c:18:42:c5:06:c5:cf: 97:34:24:e9:31:b0:11:8b:2d:df:dd:62:07:4e:58:2c:d8:b6: c2:f9:89:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpzSEt5KkIJ71i2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZGRiNDBiNjEtNDkzMy00MmI2LWE3MjgtNDAzZDA5OTc4MmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl4SmCN06477cMbFdf4x4ps4w28l8hJnH3Ut 8+cg9Ndu+mL7PAJpUetSqKs5ufCg13fkX/WmW9wak4jwUg3INnJK+yMSeR7vwGXb MmNnrbVyqyXsFgejsJ/YyWjEYVzB7U0zYaXFO6qJPQOfiREOkShnt5X+c2OE0A8e oglnmUfmIlA09dbUoutPiHjwqnsjc51oG1wCd5fSF6YmdfbME8u3FxXFN938o8tR T4Mp0d3HbBmtcV3x4j0phuZQ+9ftw7x0fjN0qB3nAMqY82kartAFxFPOJv70aLpz XJy8uKiuq3S6DiDL4yrSklZNtI0NuH+9hqEYl1zba6HFLN3J9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Hz3dLQCEjOog8No4I4wzpoPp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY5YTZmYWEtYTNjYy0z MGM3LTllYzItZmZkYTc4ZTE4MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTiOYyoLMUiVwUhjzxBcn7St+EUabhk3P/S9DGIIfz1U5nLgC71gRvw kRAXYtvpW4zNe1nv8iaKzKsjrATw6ZsUeV1onDh5qCP2Pz6HkZGxr7mqlVLsi23B WuybfPCvSgR2UDRLXdFfnbrsD/3vCpaXcy6DyKE+yH5eYD+AcnN7YHEx6IJkULks ELtqiUtgUtB3e5Bf4OpK9zB600FZuLvePiMRe+xC25ZvUB7Fb0cV1dZHsbMkF72t 5KI10bZZ1102asNUOudbQKaRsy2veBtAE5WYAHo90NkrKnQz/loH3Y+gDBhCxQbF z5c0JOkxsBGLLd/dYgdOWCzYtsL5ib0= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:30 2026 by rpki-client