This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa File: 3abee81f-b508-3c4e-9dc5-859969e3d79e.roa (raw, json) Hash identifier: UMO5aA95YgoO7BRFDAE8V5nlqfaNA5EVT5IxF3ZV2FE= Subject key identifier: EB:3A:85:A6:C9:49:42:BA:A2:91:CB:C1:09:92:50:36:0A:69:D0:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7566EFE3301A2AC26CAB8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:56:6e:fe:33:01:a2:ac:26:ca:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=9f3395cf-2554-48ef-88f1-39a237639010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:b3:e7:4f:c5:bd:af:89:bd:cb:74:64:05: da:7e:dd:c8:5e:5d:dc:22:6e:05:7d:16:f2:53:62: c2:61:90:66:28:07:43:6c:43:02:87:2e:b8:db:d3: c7:0a:79:8e:0d:24:3a:5a:28:0f:5d:80:cb:74:c1: 60:61:5f:27:3d:a0:f8:dc:71:0a:53:a4:44:08:c0: 83:b6:63:08:01:48:b6:f0:e9:22:8e:81:4c:20:5e: 8f:b9:59:c1:d3:6b:15:0c:41:90:9d:54:eb:02:0b: 76:8b:ea:0f:47:3c:f9:bf:e8:a1:01:b3:97:d6:70: 2e:7e:1d:a6:d0:87:3e:b4:a2:8a:16:bc:90:cb:fb: 2f:c2:01:e9:cf:81:34:d0:64:d6:c1:27:ea:68:06: 70:c3:12:a9:b2:92:b8:1f:00:ae:cc:2b:b9:3b:45: 42:c7:66:98:10:2f:5f:2d:19:f1:fc:72:a7:f8:12: f2:0f:62:de:8f:f1:c9:ea:a6:1c:09:2f:ee:04:1a: 12:79:61:fc:3e:86:65:8b:93:62:82:f1:64:96:23: b8:84:e6:87:d2:58:12:b4:d3:6c:d2:89:ff:48:69: 0f:ab:18:51:73:da:07:f5:65:b7:2f:ef:d3:91:86: 5f:69:1b:3d:79:4a:22:9e:4b:90:fb:95:5f:f0:9d: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3A:85:A6:C9:49:42:BA:A2:91:CB:C1:09:92:50:36:0A:69:D0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:90:aa:cf:fb:2d:92:31:4d:b7:d9:86:58:87:8f:b3:52:8c: 5b:62:11:39:57:b9:02:40:ae:70:35:d5:d5:68:a5:7e:62:57: 1d:d8:4d:4b:96:eb:64:f7:d0:0f:96:26:64:80:95:33:28:6e: c1:ba:a3:24:77:10:b9:c0:dd:90:33:2f:f9:13:b8:62:d3:eb: f7:26:cc:10:7a:a2:88:89:e5:6b:05:12:bd:e7:93:20:d8:66: e6:11:68:3b:3b:c2:e4:0f:c9:24:20:28:38:55:99:35:00:94: e0:f1:a0:ad:ae:1d:8f:39:11:25:32:22:d8:7b:12:aa:c3:ab: 55:21:24:c9:4a:6d:08:d9:0d:56:77:2b:8d:ca:86:a0:1c:e3: d7:11:4b:4c:46:75:de:a7:44:f2:9e:48:d5:cd:52:3b:85:6c: fc:d0:82:45:66:99:28:a9:7b:a8:1e:15:8d:ad:a2:a6:4b:45: d8:40:04:ed:25:0b:79:1a:a1:b8:ec:26:7e:a4:e9:a8:19:48: 1e:0a:40:5b:ac:89:e7:b3:43:76:33:df:45:68:d2:73:51:67: b4:b6:a8:c6:27:57:0b:20:d2:8d:de:17:4f:1f:ba:af:3c:de: cc:2f:d5:43:25:94:04:e6:95:bb:bc:c9:8c:86:79:25:9a:f1: ee:8f:46:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1Zu/jMBoqwmyrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OWYzMzk1Y2YtMjU1NC00OGVmLTg4ZjEtMzlhMjM3NjM5MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR2z50/Fva+Jvct0ZAXaft3IXl3cIm4FfRby U2LCYZBmKAdDbEMChy6429PHCnmODSQ6WigPXYDLdMFgYV8nPaD43HEKU6RECMCD tmMIAUi28OkijoFMIF6PuVnB02sVDEGQnVTrAgt2i+oPRzz5v+ihAbOX1nAufh2m 0Ic+tKKKFryQy/svwgHpz4E00GTWwSfqaAZwwxKpspK4HwCuzCu5O0VCx2aYEC9f LRnx/HKn+BLyD2Lej/HJ6qYcCS/uBBoSeWH8PoZli5NigvFkliO4hOaH0lgStNNs 0on/SGkPqxhRc9oH9WW3L+/TkYZfaRs9eUoinkuQ+5Vf8J22qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs6habJSUK6opHLwQmSUDYKadBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiZWU4MWYtYjUwOC0z YzRlLTlkYzUtODU5OTY5ZTNkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeQqs/7LZIxTbfZhliHj7NSjFtiETlXuQJArnA11dVopX5iVx3YTUuW 62T30A+WJmSAlTMobsG6oyR3ELnA3ZAzL/kTuGLT6/cmzBB6ooiJ5WsFEr3nkyDY ZuYRaDs7wuQPySQgKDhVmTUAlODxoK2uHY85ESUyIth7EqrDq1UhJMlKbQjZDVZ3 K43KhqAc49cRS0xGdd6nRPKeSNXNUjuFbPzQgkVmmSipe6geFY2toqZLRdhABO0l C3kaobjsJn6k6agZSB4KQFusieezQ3Yz30Vo0nNRZ7S2qMYnVwsg0o3eF08fuq88 3swv1UMllATmlbu8yYyGeSWa8e6PRm4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:54 2026 by rpki-client