This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa File: 1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa (raw, json) Hash identifier: p/cY6kGcLtqOn2yIJcOjpoX4Uv/CGhs6MYJKOGig9so= Subject key identifier: A2:22:52:2F:D4:B3:E0:BF:08:5C:80:4D:5F:5A:EB:B1:8B:57:D0:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C5EC6A7678DA33D68FF381B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 172.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:a7:67:8d:a3:3d:68:ff:38:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=27d9ae35-29ba-4703-9817-1138483dd534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e5:99:56:90:19:7a:58:28:46:ac:ed:64:c8: 17:1e:8f:c6:71:32:93:69:df:f9:e4:c7:35:7c:f6: 17:41:bf:a9:ba:be:5e:d7:5b:be:c4:bd:8d:2f:2a: 76:fa:15:8c:4c:28:e4:55:ac:8c:fe:75:4d:03:93: 3c:20:51:52:f7:89:b4:5b:96:08:4b:9e:1a:a1:c5: 3a:59:05:11:dd:0b:bf:e9:f4:8d:ad:c8:95:6f:e2: 79:8a:51:ea:d1:d2:5d:0e:ae:d4:19:74:3e:26:ab: 79:e5:f2:b8:a7:74:fa:79:4c:5c:27:dc:a4:7d:5a: c4:9c:fc:4b:62:13:65:ef:5c:93:33:b5:20:a1:d7: ee:2e:67:d4:b5:89:ac:c5:df:02:26:05:9e:a2:d4: c5:8b:a5:d3:bf:55:5c:bf:c1:7f:52:9f:03:6c:af: ab:3d:f1:e1:34:2a:c5:39:4f:b2:80:fc:f7:a4:e5: 8c:71:26:b1:e3:7b:2b:88:30:6a:07:e1:9a:96:58: 11:76:b7:28:43:ea:1a:06:9f:ba:ad:89:58:0e:a2: 3b:d8:80:6d:6d:07:42:2e:fe:09:54:02:1a:8b:71: ff:4d:8d:2f:97:e9:9c:e2:3d:d3:8a:49:16:2f:59: d2:2b:30:fe:9e:e7:cd:48:86:c9:b8:96:8f:49:33: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:22:52:2F:D4:B3:E0:BF:08:5C:80:4D:5F:5A:EB:B1:8B:57:D0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5b:e4:fd:12:23:cd:a4:e3:b0:5c:bf:12:23:a2:c9:78:96: dc:6f:02:cc:2f:38:13:5d:31:22:ff:b1:ba:46:d3:64:44:b4: e9:d8:fa:b1:68:ed:7c:02:a1:20:99:fe:ba:d9:4f:a3:fd:c9: a2:b4:9d:56:22:06:8d:6e:45:72:c4:ff:9a:c1:ba:fb:6b:48: 04:4b:a8:b8:3e:91:dc:15:6f:50:4c:95:d0:7f:41:2d:5c:7b: 6a:3b:e2:e3:5e:15:2a:0a:51:91:c7:77:4b:61:54:96:02:89: 14:0c:0c:22:80:d7:6c:1e:49:96:8b:39:49:93:86:c5:d0:44: da:15:37:3f:49:d1:0c:7f:b5:cc:35:72:76:af:dd:17:bc:7f: be:37:20:68:f1:a2:49:5e:14:17:2e:d8:52:5f:1b:ea:a5:fe: 49:b4:7f:73:7b:a7:e4:7f:62:5f:78:68:4b:15:38:86:d3:bb: 98:9d:c9:dd:82:17:4c:39:75:f0:d3:60:fe:89:e2:81:e8:f6: 15:3d:22:aa:31:38:d1:79:d4:0c:59:fc:6b:76:f6:8d:07:09: 14:51:e8:77:6b:46:cf:31:f4:14:87:b7:6f:95:99:3e:6a:6d: 36:cd:56:9e:70:73:9d:05:a2:94:30:1f:bf:a1:6f:cb:28:b9: c9:8d:26:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexqdnjaM9aP84G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MjdkOWFlMzUtMjliYS00NzAzLTk4MTctMTEzODQ4M2RkNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OWZVpAZelgoRqztZMgXHo/GcTKTad/55Mc1 fPYXQb+pur5e11u+xL2NLyp2+hWMTCjkVayM/nVNA5M8IFFS94m0W5YIS54aocU6 WQUR3Qu/6fSNrciVb+J5ilHq0dJdDq7UGXQ+Jqt55fK4p3T6eUxcJ9ykfVrEnPxL YhNl71yTM7UgodfuLmfUtYmsxd8CJgWeotTFi6XTv1Vcv8F/Up8DbK+rPfHhNCrF OU+ygPz3pOWMcSax43sriDBqB+GallgRdrcoQ+oaBp+6rYlYDqI72IBtbQdCLv4J VAIai3H/TY0vl+mc4j3TikkWL1nSKzD+nufNSIbJuJaPSTMEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIiUi/Us+C/CFyATV9a67GLV9CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZmZTEwMDgtNTZiMy0z ZDk1LWIzZWEtZTc5ZGUxNDBhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVb5P0SI82k47BcvxIjosl4ltxvAswvOBNdMSL/sbpG02REtOnY+rFo 7XwCoSCZ/rrZT6P9yaK0nVYiBo1uRXLE/5rBuvtrSARLqLg+kdwVb1BMldB/QS1c e2o74uNeFSoKUZHHd0thVJYCiRQMDCKA12weSZaLOUmThsXQRNoVNz9J0Qx/tcw1 cnav3Re8f743IGjxokleFBcu2FJfG+ql/km0f3N7p+R/Yl94aEsVOIbTu5idyd2C F0w5dfDTYP6J4oHo9hU9IqoxONF51AxZ/Gt29o0HCRRR6HdrRs8x9BSHt2+VmT5q bTbNVp5wc50FopQwH7+hb8soucmNJmE= -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:33 2026 by rpki-client