This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa File: 3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa (raw, json) Hash identifier: FSGD6u7Ni2uPjf3GPty7807bPNegO45jG6ZF1ueeNho= Subject key identifier: BD:23:47:C8:55:49:35:6D:B7:1E:99:34:54:FF:3C:AC:37:5A:29:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C5BFBEE177B7ECECFAA516840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa Signing time: Tue 30 Dec 2025 14:00:38 +0000 ROA not before: Tue 30 Dec 2025 14:00:38 +0000 ROA not after: Mon 30 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 172.253.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:fb:ee:17:7b:7e:ce:cf:aa:51:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 30 14:00:38 2025 GMT Not After : Mar 30 13:00:38 2026 GMT Subject: CN=440cee0e-acf9-4da1-8e76-ff206aeab589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:5a:50:9b:d4:8c:ac:55:57:39:5c:77:33: 00:4a:ae:48:33:7d:36:aa:5a:d7:25:1b:03:2e:f8: 75:10:cf:06:22:94:d9:4f:7d:0e:a0:26:5d:00:4c: 98:45:91:98:3b:35:44:ac:3d:6e:0e:f6:5e:2a:c5: 4d:b2:fd:83:10:ce:45:cc:c0:11:72:3e:89:d9:1d: 7b:c3:db:77:3b:5f:55:ae:92:b9:18:f8:a4:58:ff: 96:9c:ec:35:1e:65:fb:ca:9f:b6:ee:60:38:50:32: 58:2b:10:44:53:5b:34:bc:3e:f9:6a:06:13:73:c9: e3:b3:c0:6a:ee:78:3a:ed:68:44:78:9c:49:d2:b1: 76:3d:f5:2f:05:6c:bf:bb:79:04:39:1e:50:4f:c3: df:4f:f3:0e:21:8a:37:70:e6:d3:f4:06:f3:b6:6c: c7:57:a7:0d:b7:c4:d6:99:60:b9:00:83:a2:f6:bb: 87:77:fd:9e:07:3d:65:6b:3e:ce:9f:18:1f:9a:b4: ce:a7:e8:b8:75:1e:29:22:a8:4f:d5:1d:83:c5:c2: 40:a3:3f:f0:5f:db:2a:0a:41:f1:aa:cf:52:01:0b: 78:48:8b:8c:9b:9a:85:3a:a4:98:f2:41:40:b3:9f: 97:a3:c2:dd:62:8c:df:72:03:9c:29:d9:be:df:93: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:47:C8:55:49:35:6D:B7:1E:99:34:54:FF:3C:AC:37:5A:29:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:99:96:73:27:1e:57:1a:9c:4f:b2:af:78:e4:b6:ff:b5:c8: 82:7e:ea:44:6b:40:54:06:0a:ec:06:49:ef:78:5b:29:16:64: 64:1e:d3:3d:68:d3:be:5d:37:48:9e:42:7e:79:c5:d3:fe:66: 88:1c:ec:56:cb:db:2c:da:0c:7b:4f:2e:65:35:30:5e:b9:aa: 0b:6c:b3:ec:46:e0:ad:4c:77:3a:45:81:21:bc:e4:a0:b1:d5: 77:52:c9:f5:85:32:89:24:a9:98:8f:b9:01:87:29:24:c2:88: 4d:76:95:b6:15:38:66:c3:25:1c:48:30:40:be:ec:4e:27:75: 01:18:2a:4d:16:2e:0f:c9:55:5e:4d:d4:96:8c:a1:24:c8:27: ce:23:d4:85:ec:1d:b6:ce:c0:81:0c:71:79:7c:c8:9a:57:73: 2a:5c:3f:70:1d:16:64:c9:89:e2:1c:47:3c:65:b9:40:ac:e0: 5d:d3:09:bb:42:85:dc:8c:df:8f:67:c8:f1:c6:3c:1a:f8:e8: 96:8c:0d:fc:b0:4f:37:1f:68:1c:1f:4f:1e:54:11:2e:6c:4c: 6c:45:e6:c5:14:06:be:74:36:20:f7:90:cb:86:e6:63:94:a0: 3b:c3:38:d7:83:14:ce:06:28:c4:93:8b:e3:ff:0c:fe:8b:0d: 08:60:3c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExb++4Xe37Oz6pRaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIzMDE0MDAzOFoXDTI2MDMzMDEzMDAzOFowLzEtMCsGA1UEAxMk NDQwY2VlMGUtYWNmOS00ZGExLThlNzYtZmYyMDZhZWFiNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxxaUJvUjKxVVzlcdzMASq5IM302qlrXJRsD Lvh1EM8GIpTZT30OoCZdAEyYRZGYOzVErD1uDvZeKsVNsv2DEM5FzMARcj6J2R17 w9t3O19VrpK5GPikWP+WnOw1HmX7yp+27mA4UDJYKxBEU1s0vD75agYTc8njs8Bq 7ng67WhEeJxJ0rF2PfUvBWy/u3kEOR5QT8PfT/MOIYo3cObT9AbztmzHV6cNt8TW mWC5AIOi9ruHd/2eBz1laz7OnxgfmrTOp+i4dR4pIqhP1R2DxcJAoz/wX9sqCkHx qs9SAQt4SIuMm5qFOqSY8kFAs5+Xo8LdYozfcgOcKdm+35M17wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0jR8hVSTVttx6ZNFT/PKw3WinwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M0Yjk2Y2MtMmYyYS0z MWQ3LWJkZGEtZjU2YWM2ODhhMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCZlnMnHlcanE+yr3jktv+1yIJ+6kRrQFQGCuwGSe94WykWZGQe0z1o 075dN0ieQn55xdP+Zogc7FbL2yzaDHtPLmU1MF65qgtss+xG4K1MdzpFgSG85KCx 1XdSyfWFMokkqZiPuQGHKSTCiE12lbYVOGbDJRxIMEC+7E4ndQEYKk0WLg/JVV5N 1JaMoSTIJ84j1IXsHbbOwIEMcXl8yJpXcypcP3AdFmTJieIcRzxluUCs4F3TCbtC hdyM349nyPHGPBr46JaMDfywTzcfaBwfTx5UES5sTGxF5sUUBr50NiD3kMuG5mOU oDvDONeDFM4GKMSTi+P/DP6LDQhgPF8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:22 2026 by rpki-client