This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa File: 2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa (raw, json) Hash identifier: w20Y9+4uHKADZUNbAc1OqyQ+rquhFZX67Ne6Tt6ZQgU= Subject key identifier: EC:D5:A4:73:82:13:0A:BE:B4:09:0C:7B:6B:C1:DD:9C:01:C3:83:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7F76988A11A2A75701E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 173.194.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:f7:69:88:a1:1a:2a:75:70:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=649fa5fb-303d-42c2-8446-89f1a3462e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:b0:14:a9:43:ce:03:c2:02:d1:41:5c:8a: 64:f1:c4:e6:fa:43:d1:ad:2f:ae:c1:21:2d:a8:ae: b7:e5:3a:a0:b2:32:d2:02:6b:6d:a6:9a:c6:46:2b: 5d:8b:63:94:7f:2e:41:b1:27:05:d3:c0:38:1f:be: cd:19:8e:3a:90:f7:11:f1:b5:9d:56:f9:86:cf:73: 86:65:d4:39:7a:21:13:45:d2:58:f5:d1:09:75:84: dc:a6:51:36:d2:f4:4b:f2:38:de:f7:0e:e5:a4:c6: 9f:4d:b3:f1:9b:d6:b9:3b:b2:7d:d7:e8:5c:43:b9: 3e:dc:0d:5f:3b:47:40:37:49:02:70:a4:3b:78:8e: 72:56:80:00:19:bd:ef:68:a0:7f:ee:c9:4a:76:e0: c6:2f:c6:34:9b:d6:75:d6:c3:8b:5d:2e:c0:12:57: 80:f2:b1:fd:9e:07:91:ba:84:ef:bf:79:91:8d:88: 57:6f:66:8f:c5:85:55:01:4b:de:41:68:bc:96:3b: af:0a:29:93:fd:87:da:2a:18:b7:3c:9c:f8:80:f7: 96:5c:55:bf:12:d4:8d:82:6f:2f:31:9e:d8:42:fe: d8:94:16:7d:98:31:de:6a:4a:46:06:43:e1:d3:cf: 5c:09:30:dc:3b:ec:90:68:41:60:a4:2d:0c:4a:a1: f4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D5:A4:73:82:13:0A:BE:B4:09:0C:7B:6B:C1:DD:9C:01:C3:83:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:15:a4:f5:30:c4:c5:81:44:7e:4b:c6:ca:1d:7f:28:a4:99: dd:04:b9:b3:d4:c4:d4:5e:be:d3:42:28:f8:c3:24:8c:3c:63: d6:d9:23:0f:aa:2d:cb:b8:8a:5f:23:5d:88:33:f1:87:bb:e0: 87:50:6a:78:b6:b3:12:74:c8:e1:24:e7:25:7c:44:80:b9:45: 88:8d:da:32:fe:d9:f8:94:e8:de:aa:54:8f:09:b4:17:6e:27: 15:e8:ba:70:d5:30:a5:2b:19:6c:35:37:e9:23:1c:84:55:d2: 2f:29:00:69:6d:8e:a3:dc:8d:28:08:a8:c6:4b:ed:31:13:bb: 23:46:59:bd:30:63:52:03:28:4c:1d:5c:a0:69:a0:25:87:cc: a1:f6:28:e1:f3:31:8c:49:b6:07:fc:99:8d:fb:e6:d1:17:73: 0c:09:4e:26:28:7b:ee:f5:8a:65:3a:ee:99:c2:a7:b9:a4:91: 7c:4f:95:7d:19:94:47:45:d2:79:a0:d5:0c:87:1a:f3:21:b5: ad:88:d9:54:3f:a5:1a:8d:8e:ab:9c:fa:95:96:22:75:2d:b3: 12:fc:d5:43:a1:e4:8c:b0:70:82:32:61:f9:71:89:bc:4c:4c: ba:70:cf:6c:a4:87:5c:b6:03:de:09:2d:ed:38:e8:43:f1:69: 86:6c:a7:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/dpiKEaKnVwHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjQ5ZmE1ZmItMzAzZC00MmMyLTg0NDYtODlmMWEzNDYyZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbewFKlDzgPCAtFBXIpk8cTm+kPRrS+uwSEt qK635TqgsjLSAmttpprGRitdi2OUfy5BsScF08A4H77NGY46kPcR8bWdVvmGz3OG ZdQ5eiETRdJY9dEJdYTcplE20vRL8jje9w7lpMafTbPxm9a5O7J91+hcQ7k+3A1f O0dAN0kCcKQ7eI5yVoAAGb3vaKB/7slKduDGL8Y0m9Z11sOLXS7AEleA8rH9ngeR uoTvv3mRjYhXb2aPxYVVAUveQWi8ljuvCimT/YfaKhi3PJz4gPeWXFW/EtSNgm8v MZ7YQv7YlBZ9mDHeakpGBkPh089cCTDcO+yQaEFgpC0MSqH0pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzVpHOCEwq+tAkMe2vB3ZwBw4NIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5MmQ1ZTItZDhiMy0z ZWI4LWFiODEtOTcyMDQ2ZmQyOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEVpPUwxMWBRH5Lxsodfyikmd0EubPUxNRevtNCKPjDJIw8Y9bZIw+q Lcu4il8jXYgz8Ye74IdQani2sxJ0yOEk5yV8RIC5RYiN2jL+2fiU6N6qVI8JtBdu JxXounDVMKUrGWw1N+kjHIRV0i8pAGltjqPcjSgIqMZL7TETuyNGWb0wY1IDKEwd XKBpoCWHzKH2KOHzMYxJtgf8mY375tEXcwwJTiYoe+71imU67pnCp7mkkXxPlX0Z lEdF0nmg1QyHGvMhta2I2VQ/pRqNjquc+pWWInUtsxL81UOh5IywcIIyYflxibxM TLpwz2ykh1y2A94JLe046EPxaYZsp/c= -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:47 2026 by rpki-client