This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa File: 0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa (raw, json) Hash identifier: 1cLJrgLKHCfaszw68U/C3YmOJbgjCTdCNGSLvjmE5o4= Subject key identifier: DA:01:0E:C3:FB:65:12:BB:09:99:9A:71:31:51:A7:73:DE:F0:78:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A80C031ED7D5CA74489B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 172.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:0c:03:1e:d7:d5:ca:74:48:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3d019598-4196-42b0-9a61-66b7e778e61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:4e:ef:1f:1c:7d:d4:94:6d:48:bd:61:a5: 66:48:bd:06:3d:9a:88:48:20:22:fc:4f:b0:e7:72: 93:13:bd:68:aa:58:79:5e:76:c2:e3:e4:e9:d9:cc: 81:d5:62:bc:fe:2d:fe:f4:78:6b:50:a4:83:19:29: 75:5e:67:51:57:4e:b5:ce:42:94:76:57:6d:3a:78: 27:4d:a4:fc:59:2e:83:53:47:e7:a6:74:eb:f8:4f: e2:04:df:f3:ff:58:67:28:c4:b4:a5:39:98:11:8e: 7a:3e:0d:f8:74:4b:d3:ac:5f:8a:4d:f4:77:7d:61: 33:8d:f2:1c:7d:6e:39:83:75:88:f7:39:52:be:b1: b8:4c:a7:95:ab:3a:0c:0c:ad:af:06:13:b0:7d:1a: 13:84:f5:db:54:0b:5e:44:58:38:ab:d5:14:2d:7d: f8:10:b0:4e:fb:66:fc:c2:75:34:b5:7f:01:60:7d: 5e:f0:1b:1a:7e:ff:29:f2:19:10:c0:5d:7c:98:62: fd:55:40:7d:3d:fc:f9:dd:b8:c5:24:9d:10:53:40: 9a:e7:eb:41:f6:48:ba:ce:0c:65:18:11:1d:97:72: b2:ba:ed:80:80:15:cf:4f:85:69:72:b7:f9:d8:ee: e2:fc:c5:6c:6c:de:5b:28:73:19:f6:65:d1:54:8f: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:0E:C3:FB:65:12:BB:09:99:9A:71:31:51:A7:73:DE:F0:78:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ab:58:27:1b:09:ad:07:a5:8f:c7:db:bd:dc:6a:65:f8:84: 4c:6d:cc:a3:75:c0:65:3e:fe:67:74:76:62:83:f6:67:18:0e: d6:34:b2:62:7b:d2:5f:d4:0b:98:df:65:3c:ef:e5:48:fc:84: 7f:69:62:46:5a:f0:d2:97:b5:c8:ad:bf:89:39:67:a3:64:a7: 57:03:46:45:49:27:07:03:60:5a:a4:28:5c:4a:cb:8b:0f:3b: f0:de:b2:6c:c5:e1:50:67:3b:b0:00:cc:09:99:ed:a3:6b:8e: 92:c4:d4:a3:3e:14:81:dc:9e:8f:f5:c7:b5:18:df:42:7e:8a: 9b:fe:35:a4:65:5a:db:19:06:75:88:1c:80:6b:1d:00:ee:bb: eb:c9:bb:43:9b:6a:1b:d8:88:3c:60:fe:db:64:c8:c5:a0:17: 02:87:78:97:2b:6d:8b:32:11:a2:3e:cf:ca:f3:21:ca:ce:b8: 41:9d:6c:76:5f:a0:4c:50:60:83:bb:38:33:69:fa:34:77:8b: 38:85:a7:ce:03:14:dc:60:29:67:0f:2d:d5:ac:22:ee:2b:18: 1c:14:80:31:a1:fe:c6:e2:5a:fa:27:3f:42:26:74:69:5b:c9: e0:2d:75:80:84:df:d4:68:2e:8c:53:3b:01:ac:44:fb:31:0e: 69:d9:e6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqAwDHtfVynRIm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2QwMTk1OTgtNDE5Ni00MmIwLTlhNjEtNjZiN2U3NzhlNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn1O7x8cfdSUbUi9YaVmSL0GPZqISCAi/E+w 53KTE71oqlh5XnbC4+Tp2cyB1WK8/i3+9HhrUKSDGSl1XmdRV061zkKUdldtOngn TaT8WS6DU0fnpnTr+E/iBN/z/1hnKMS0pTmYEY56Pg34dEvTrF+KTfR3fWEzjfIc fW45g3WI9zlSvrG4TKeVqzoMDK2vBhOwfRoThPXbVAteRFg4q9UULX34ELBO+2b8 wnU0tX8BYH1e8Bsafv8p8hkQwF18mGL9VUB9Pfz53bjFJJ0QU0Ca5+tB9ki6zgxl GBEdl3Kyuu2AgBXPT4Vpcrf52O7i/MVsbN5bKHMZ9mXRVI//hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoBDsP7ZRK7CZmacTFRp3Pe8Hg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGQ5ZDNjMTQtMzczNi0z M2E0LThkZWYtNmM0ZWIyZTAxMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABerWCcbCa0HpY/H273camX4hExtzKN1wGU+/md0dmKD9mcYDtY0smJ7 0l/UC5jfZTzv5Uj8hH9pYkZa8NKXtcitv4k5Z6Nkp1cDRkVJJwcDYFqkKFxKy4sP O/DesmzF4VBnO7AAzAmZ7aNrjpLE1KM+FIHcno/1x7UY30J+ipv+NaRlWtsZBnWI HIBrHQDuu+vJu0ObahvYiDxg/ttkyMWgFwKHeJcrbYsyEaI+z8rzIcrOuEGdbHZf oExQYIO7ODNp+jR3iziFp84DFNxgKWcPLdWsIu4rGBwUgDGh/sbiWvonP0ImdGlb yeAtdYCE39RoLoxTOwGsRPsxDmnZ5oE= -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:44 2026 by rpki-client