This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa File: 353aa361-816d-338e-89e8-88e5fd85eccc.roa (raw, json) Hash identifier: 2To0EwL7Jbzl/nzGGpWOEqLAy5n52x2LKoXpBrCO4hM= Subject key identifier: E9:34:8B:BA:4D:C1:F0:25:23:94:9C:D2:05:A1:8F:68:D4:C5:BB:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7FC6E51FBED5774701B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:fc:6e:51:fb:ed:57:74:70:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c24eede0-f9a9-44bc-9ef6-0dfdad45b727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:d3:44:c2:34:8d:bb:92:1c:16:07:57:71: 73:4e:c6:09:8a:a8:93:39:6f:21:39:03:4c:04:f0: 3d:b6:e5:4e:46:7a:6e:58:92:43:87:b2:d8:1b:b0: f6:09:54:95:71:0f:49:82:7b:96:b9:cd:ce:fc:d2: 99:b7:67:ce:53:5c:04:2d:b3:28:05:d0:c7:8f:12: 4e:8b:71:18:80:6d:25:8c:68:0d:ce:32:f1:d6:33: 32:91:34:e8:c9:60:98:92:50:25:ca:be:63:de:92: 13:95:7a:91:33:1a:0e:17:12:54:90:f3:bc:71:9f: 55:1f:5d:2b:be:21:2e:21:51:2f:42:4e:de:9b:8b: b7:48:88:51:8a:1d:2c:70:43:a4:c5:b4:2b:1b:9e: 27:f4:6c:31:6e:0d:42:45:00:8e:02:7c:c5:b1:1d: 5a:d8:ac:24:b5:35:30:98:6d:61:f7:db:8b:1f:1f: 1a:d4:30:67:85:2f:4b:3e:e8:d3:f0:f1:42:ef:06: 68:12:16:74:34:b4:b6:6a:98:f6:c6:6e:e3:c0:60: f7:42:f3:19:14:cd:9d:ca:44:93:00:0d:52:d8:21: 0a:6b:82:9b:13:66:85:bd:91:c6:f2:91:e7:c6:79: 88:d1:04:35:4d:cf:e6:4f:2f:1d:37:76:7e:21:f3: 17:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:8B:BA:4D:C1:F0:25:23:94:9C:D2:05:A1:8F:68:D4:C5:BB:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:de:f8:12:92:96:0b:4b:5e:66:17:01:0c:aa:7b:88:71:aa: 81:11:ed:2c:9e:e5:d8:75:f3:6a:28:0d:a3:11:97:4e:40:17: 12:64:dc:29:62:c7:47:83:99:ba:b3:a7:d5:a5:9e:06:7f:16: 7b:0e:9f:d4:67:2f:2e:9e:26:c5:3b:58:e7:ce:88:e6:b1:71: 39:a6:be:59:02:27:94:be:c4:3a:d5:80:ec:f7:02:c4:7e:3e: 02:bd:dd:26:a5:3e:8c:1d:27:88:4c:50:a9:24:5c:55:a7:99: e6:01:17:85:57:6e:c3:7a:97:fa:b3:ca:9f:a4:19:47:f1:f9: d1:17:e6:42:57:af:7e:54:13:a6:de:ff:fe:c1:51:49:a3:0a: 82:3b:01:b7:9d:7d:b6:f3:ab:5b:ba:89:11:95:ca:fd:f3:5e: 82:f7:d5:6d:e5:e2:0a:3e:ff:fa:96:e5:fa:76:0a:d7:8f:46: 1a:0e:e8:99:bb:27:4e:10:30:4f:ed:78:52:9a:a8:54:bc:32: f7:f7:03:3c:f3:f5:94:f4:97:b1:59:34:00:46:05:9e:c7:16: a7:61:05:8b:5b:ac:f5:61:bb:d5:c7:cd:10:c8:0b:5d:b8:dd: 14:7d:e9:24:7c:2e:2d:b3:7d:a2:4b:3b:d6:a0:60:fe:dc:8b: 0e:00:59:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/xuUfvtV3RwGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzI0ZWVkZTAtZjlhOS00NGJjLTllZjYtMGRmZGFkNDViNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxLTRMI0jbuSHBYHV3FzTsYJiqiTOW8hOQNM BPA9tuVORnpuWJJDh7LYG7D2CVSVcQ9JgnuWuc3O/NKZt2fOU1wELbMoBdDHjxJO i3EYgG0ljGgNzjLx1jMykTToyWCYklAlyr5j3pITlXqRMxoOFxJUkPO8cZ9VH10r viEuIVEvQk7em4u3SIhRih0scEOkxbQrG54n9Gwxbg1CRQCOAnzFsR1a2KwktTUw mG1h99uLHx8a1DBnhS9LPujT8PFC7wZoEhZ0NLS2apj2xm7jwGD3QvMZFM2dykST AA1S2CEKa4KbE2aFvZHG8pHnxnmI0QQ1Tc/mTy8dN3Z+IfMXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk0i7pNwfAlI5Sc0gWhj2jUxbt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzUzYWEzNjEtODE2ZC0z MzhlLTg5ZTgtODhlNWZkODVlY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACje+BKSlgtLXmYXAQyqe4hxqoER7Sye5dh182ooDaMRl05AFxJk3Cli x0eDmbqzp9WlngZ/FnsOn9RnLy6eJsU7WOfOiOaxcTmmvlkCJ5S+xDrVgOz3AsR+ PgK93SalPowdJ4hMUKkkXFWnmeYBF4VXbsN6l/qzyp+kGUfx+dEX5kJXr35UE6be //7BUUmjCoI7Abedfbbzq1u6iRGVyv3zXoL31W3l4go+//qW5fp2CtePRhoO6Jm7 J04QME/teFKaqFS8Mvf3Azzz9ZT0l7FZNABGBZ7HFqdhBYtbrPVhu9XHzRDIC124 3RR96SR8Li2zfaJLO9agYP7ciw4AWZ8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:43 2026 by rpki-client