This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa File: 5a84109a-e093-3cc4-b314-e82aef89a710.roa (raw, json) Hash identifier: LGh+Z+ptAqKQCpXqT9r357mf7QOYtizNbRQFM3KY2do= Subject key identifier: CB:43:F9:7A:C0:79:46:4B:52:1D:49:C9:8B:73:47:E3:BA:12:12:BC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7FD62CABC3F62921A4950 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:fd:62:ca:bc:3f:62:92:1a:49:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1ce42c03-de84-4c8b-941d-878c51f8eb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b8:f2:bd:98:4b:5d:1a:45:59:77:8a:b1:f3: 00:69:21:03:b0:2f:b0:15:c6:1c:ab:ff:aa:80:c8: ae:0c:8c:2a:49:b7:10:25:87:d6:4d:c8:e1:24:06: 72:07:d7:87:bc:df:87:2e:18:10:1e:9f:35:3b:ff: 2d:5b:a8:77:21:e1:73:cb:3c:80:f6:3b:86:cb:c1: ef:71:c8:f0:94:ca:52:df:ca:13:9e:65:12:6e:12: cb:77:d2:17:ee:77:0f:ce:89:fb:5b:c9:91:ba:fb: 11:74:c3:a3:a5:62:3c:f1:c6:58:81:0e:66:69:ad: d9:bc:9a:9e:c5:b2:c5:dc:68:1f:94:5b:a1:e5:c5: 97:b4:63:6c:df:c3:52:ae:ed:26:62:e0:0e:3d:ab: 8a:27:ba:70:03:5f:4d:85:0b:79:17:8b:c8:7f:f0: 71:ea:1f:6e:36:e9:28:1b:54:32:ec:af:63:45:3b: 73:be:a5:10:f4:de:4e:46:05:d8:16:30:dc:6d:3c: 68:4b:18:96:ee:b2:c3:c5:1d:1c:d9:a5:14:c4:a3: 69:11:63:fa:31:c2:9f:42:0d:85:6d:c5:69:ef:52: 00:01:67:02:35:59:86:5f:b8:6d:7e:f4:2a:51:f2: e7:48:7b:32:d6:46:bf:b8:62:d8:5c:60:bd:24:6d: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:F9:7A:C0:79:46:4B:52:1D:49:C9:8B:73:47:E3:BA:12:12:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:24:7f:9a:20:95:79:58:d1:e2:44:8f:64:60:03:09:db:4b: 0b:8e:15:4d:22:87:21:ae:e5:f2:f2:21:8f:cf:06:fc:2e:fe: cc:9a:f3:42:29:ce:4e:14:2c:b2:1d:61:7a:14:b4:9c:a9:de: fa:88:44:d5:de:34:c7:b8:05:ec:ad:2f:6e:ea:d0:78:77:aa: d5:d7:09:f4:0b:ec:d5:c3:6c:dd:b1:2e:15:10:4d:f3:6d:0d: 25:94:c4:73:72:19:02:13:04:99:c5:f5:37:fb:83:48:68:4f: cd:8d:3f:68:28:5d:41:73:0a:ed:f3:df:fa:b1:25:cb:b4:a5: 01:d6:03:25:6f:2a:15:d9:26:6d:15:ff:09:c8:40:cd:cd:8f: ae:1c:de:0d:39:5e:e0:19:f1:9e:e5:a4:41:bd:c6:d4:eb:e7: 0f:9f:a8:5d:b1:d9:ce:62:f4:d4:bb:25:da:9d:c6:c0:52:5b: 08:20:f3:72:cf:fe:f9:1d:7c:fc:db:99:e1:50:bb:63:3e:47: ce:6b:04:76:47:25:55:90:a9:be:d0:d2:02:e0:be:03:97:ca: 1d:44:10:dd:6f:d5:c6:73:cc:8b:92:42:b6:ea:8d:36:7e:73: 67:7b:ea:ff:51:26:ee:c8:d4:42:f1:f9:36:78:c3:10:c6:6f: ee:b4:d2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/1iyrw/YpIaSVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWNlNDJjMDMtZGU4NC00YzhiLTk0MWQtODc4YzUxZjhlYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrjyvZhLXRpFWXeKsfMAaSEDsC+wFcYcq/+q gMiuDIwqSbcQJYfWTcjhJAZyB9eHvN+HLhgQHp81O/8tW6h3IeFzyzyA9juGy8Hv ccjwlMpS38oTnmUSbhLLd9IX7ncPzon7W8mRuvsRdMOjpWI88cZYgQ5maa3ZvJqe xbLF3GgflFuh5cWXtGNs38NSru0mYuAOPauKJ7pwA19NhQt5F4vIf/Bx6h9uNuko G1Qy7K9jRTtzvqUQ9N5ORgXYFjDcbTxoSxiW7rLDxR0c2aUUxKNpEWP6McKfQg2F bcVp71IAAWcCNVmGX7htfvQqUfLnSHsy1ka/uGLYXGC9JG2j/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtD+XrAeUZLUh1JyYtzR+O6EhK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE4NDEwOWEtZTA5My0z Y2M0LWIzMTQtZTgyYWVmODlhNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUkf5oglXlY0eJEj2RgAwnbSwuOFU0ihyGu5fLyIY/PBvwu/sya80Ip zk4ULLIdYXoUtJyp3vqIRNXeNMe4BeytL27q0Hh3qtXXCfQL7NXDbN2xLhUQTfNt DSWUxHNyGQITBJnF9Tf7g0hoT82NP2goXUFzCu3z3/qxJcu0pQHWAyVvKhXZJm0V /wnIQM3Nj64c3g05XuAZ8Z7lpEG9xtTr5w+fqF2x2c5i9NS7JdqdxsBSWwgg83LP /vkdfPzbmeFQu2M+R85rBHZHJVWQqb7Q0gLgvgOXyh1EEN1v1cZzzIuSQrbqjTZ+ c2d76v9RJu7I1ELx+TZ4wxDGb+600ls= -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:48 2026 by rpki-client