This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa File: 43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa (raw, json) Hash identifier: thhuEXciPMxB0ko3jAJdmWFOV0lezu4qV6nOtLl/AeE= Subject key identifier: 74:9D:74:4E:C2:D1:05:48:CE:E7:59:91:1F:AE:40:09:25:16:3B:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A74AC97D2D61C486A20380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 172.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:4a:c9:7d:2d:61:c4:86:a2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=38ee0ade-505e-450e-a9ee-96a258ac7cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:19:ad:c2:ac:dd:b3:e3:15:3f:68:6c:1d: cf:e8:fc:58:f5:3b:15:ce:89:c1:57:4a:a6:55:01: c1:47:21:58:cf:e5:c8:aa:8c:cf:10:cd:aa:0a:ae: 98:86:2a:98:38:1f:d1:9f:04:6f:04:f8:b9:33:d2: d2:6d:79:90:6b:a6:a6:58:75:cb:d6:01:5b:bd:5a: c5:5a:c2:80:7b:b0:0d:7e:53:35:68:66:90:30:c4: 77:93:0e:c1:95:d2:57:3f:7c:6d:9b:98:3f:9d:ee: a9:d3:e6:3d:22:ea:ff:aa:a9:6e:9d:c6:25:54:2c: b1:73:72:fc:a0:a6:b1:89:aa:ab:db:2a:8e:3c:15: 98:8a:e4:15:0c:c9:5a:f6:a1:19:c7:30:0e:30:8c: bd:55:bf:1b:70:65:6c:1c:3a:59:96:9b:a0:79:e4: af:aa:03:58:db:d8:f3:12:d0:50:71:22:36:70:f0: 98:cd:13:95:20:0b:57:cb:5b:95:f0:6e:33:cc:5d: 6b:6e:30:86:f8:63:aa:e5:14:8c:ee:6a:b6:e9:fc: cf:fc:85:37:bc:6f:08:c9:a7:e0:e2:d5:e8:ce:63: 02:89:70:59:4e:f1:f3:0f:74:af:e0:7e:ba:6b:b2: 23:e5:55:5e:96:0b:91:38:7d:25:1a:4b:ac:e8:4f: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:74:4E:C2:D1:05:48:CE:E7:59:91:1F:AE:40:09:25:16:3B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a9:22:8c:23:ff:e3:68:88:a9:0b:86:66:85:21:b7:c2:f5: d8:96:ca:e1:e6:53:57:be:02:b0:ee:12:17:61:0f:17:53:b1: 08:ff:75:c0:a1:39:4e:85:78:36:ee:90:79:cb:f7:5a:0f:e5: bc:29:82:41:86:db:1f:d8:da:77:2a:9f:4c:e4:ea:37:48:ef: e1:6b:85:8f:9c:0d:4a:b1:d3:02:f3:e5:31:e1:cb:f2:a5:2f: 13:f7:9d:12:aa:df:30:04:f0:d3:91:d8:6d:60:cf:fa:71:7c: e4:85:1e:87:84:1b:e0:6a:9a:d5:8f:2f:a9:2c:7e:94:50:2a: 1c:8e:c5:69:7c:95:c9:67:b0:64:85:bb:79:0d:08:68:74:c1: d2:1d:47:5a:8f:85:5c:38:58:f5:f9:ba:e2:37:b1:bc:bc:d8: 51:7a:2c:d4:96:a9:70:33:54:49:6c:8d:c3:e8:ab:b1:6b:f6: 04:01:e1:b5:b4:df:a9:91:0d:f1:40:3e:fb:a3:00:cb:26:cc: 08:56:e6:e1:7c:73:72:26:26:4e:ad:50:82:ae:01:ab:63:1f: 45:17:09:05:1c:dd:73:98:ec:d9:6c:df:94:37:12:07:27:36: 65:3f:2b:a6:4f:e5:ac:3e:d4:2f:84:f8:7c:47:b5:8b:75:45: 69:5c:3e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0rJfS1hxIaiA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzhlZTBhZGUtNTA1ZS00NTBlLWE5ZWUtOTZhMjU4YWM3Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5YZrcKs3bPjFT9obB3P6PxY9TsVzonBV0qm VQHBRyFYz+XIqozPEM2qCq6YhiqYOB/RnwRvBPi5M9LSbXmQa6amWHXL1gFbvVrF WsKAe7ANflM1aGaQMMR3kw7BldJXP3xtm5g/ne6p0+Y9Iur/qqluncYlVCyxc3L8 oKaxiaqr2yqOPBWYiuQVDMla9qEZxzAOMIy9Vb8bcGVsHDpZlpugeeSvqgNY29jz EtBQcSI2cPCYzROVIAtXy1uV8G4zzF1rbjCG+GOq5RSM7mq26fzP/IU3vG8Iyafg 4tXozmMCiXBZTvHzD3Sv4H66a7Ij5VVelguROH0lGkus6E9/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSddE7C0QVIzudZkR+uQAklFjsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNhOWYzZmYtZWQ0Yi0z YjUxLWI4ODEtZmFjMTlkMjE5M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmpIowj/+NoiKkLhmaFIbfC9diWyuHmU1e+ArDuEhdhDxdTsQj/dcCh OU6FeDbukHnL91oP5bwpgkGG2x/Y2ncqn0zk6jdI7+FrhY+cDUqx0wLz5THhy/Kl LxP3nRKq3zAE8NOR2G1gz/pxfOSFHoeEG+BqmtWPL6ksfpRQKhyOxWl8lclnsGSF u3kNCGh0wdIdR1qPhVw4WPX5uuI3sby82FF6LNSWqXAzVElsjcPoq7Fr9gQB4bW0 36mRDfFAPvujAMsmzAhW5uF8c3ImJk6tUIKuAatjH0UXCQUc3XOY7Nls35Q3Egcn NmU/K6ZP5aw+1C+E+HxHtYt1RWlcPgk= -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:35 2026 by rpki-client