This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa File: 5fa89d53-c65a-344e-8232-29b9daa5f984.roa (raw, json) Hash identifier: epkRObc0DMy2AVEn7toPDmHFfjjRP7mIwnwNyS9XTGY= Subject key identifier: 37:ED:5D:C2:12:86:84:5D:8D:F0:C1:79:1C:A3:5C:07:56:34:8E:8A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C49D67493A7D592D9F6E93560 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa Signing time: Wed 24 Dec 2025 02:00:31 +0000 ROA not before: Wed 24 Dec 2025 02:00:31 +0000 ROA not after: Tue 24 Mar 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.217.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:d6:74:93:a7:d5:92:d9:f6:e9:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Mar 24 01:00:31 2026 GMT Subject: CN=034f2552-b677-43c1-9fb4-04206a838cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6c:57:67:41:c8:e7:76:ed:42:65:f6:04:9e: 4c:df:ba:90:25:36:85:8d:c0:34:cc:f3:43:29:02: db:cb:5e:c0:1a:a5:fd:f6:01:89:65:c3:26:19:81: 01:bb:7f:da:1f:f0:c1:60:24:10:40:29:80:10:90: a7:cf:65:f8:f7:ca:eb:19:8b:72:f4:b1:c8:f6:8b: 46:23:bb:ef:c5:41:85:bb:51:ec:ad:5d:cb:f9:5d: 04:54:1f:58:51:2c:90:5a:5f:4a:e6:23:38:80:ff: b5:56:8c:6a:0f:20:8a:b9:9c:11:ef:7e:cf:f4:84: 8d:80:92:b2:c2:e2:57:42:6b:a2:24:67:b4:bd:fc: 38:05:37:e7:9c:3b:ff:8f:87:d9:fd:55:e0:e1:91: f1:f7:5d:34:58:75:df:30:7d:d4:78:95:43:78:5b: 21:be:3a:86:b4:f3:98:cc:f3:d3:f2:81:34:3f:2c: 15:c1:ec:af:c0:20:1c:ac:c6:94:4b:e1:9c:7d:7b: 12:f8:69:63:6a:b4:a7:66:aa:c3:6a:6e:79:28:d2: 33:42:bf:53:6c:1b:78:68:a5:60:d6:e6:b6:ae:8d: 0d:41:51:5c:18:e5:61:0d:2c:b5:37:34:7a:91:7e: 49:07:33:21:95:f5:32:62:27:cc:89:a7:ea:2b:e7: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:5D:C2:12:86:84:5D:8D:F0:C1:79:1C:A3:5C:07:56:34:8E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ad:a5:01:bc:76:ee:ca:96:7c:32:65:1d:08:ca:67:2e:29: 0c:d4:4b:46:0a:b3:c0:3c:d4:fb:9a:44:e4:ef:85:d1:27:a0: 18:02:d1:40:63:2f:8b:75:f5:03:df:c7:6a:0f:76:a5:e9:0c: 4e:66:cc:45:83:d7:7e:2d:3f:78:2d:67:95:12:31:4b:1e:6d: 94:09:82:8d:f5:77:41:b1:d1:d7:9d:c3:c3:02:46:61:8b:c4: fd:93:c5:88:dc:9a:e2:7c:43:36:36:d8:73:21:14:a6:4a:b1: 11:a2:2e:29:ee:e1:c9:29:07:a5:bd:66:2f:1f:8d:44:25:7b: fb:c4:b3:42:ae:95:0b:80:70:9a:fe:fa:07:70:74:fa:11:a6: 07:f1:12:9d:26:3a:5d:1d:a9:7b:4a:79:72:7e:ac:dd:7b:4b: b8:1a:3c:2a:14:b0:01:3b:70:17:81:d7:7c:cf:25:53:af:9f: 95:49:f8:5e:44:31:54:a2:fa:28:34:9b:7a:98:76:6b:8d:a0: d6:80:3a:45:2c:df:a1:7f:22:1e:04:e6:09:8d:e3:de:ad:47: 5b:5c:65:1f:af:a8:9f:77:6b:78:3f:12:09:d3:85:76:a1:62: 9e:9e:e6:a6:f4:77:75:7c:8b:08:31:01:dd:b7:71:9a:4d:24: 45:ce:4a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExJ1nSTp9WS2fbpNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyNDAyMDAzMVoXDTI2MDMyNDAxMDAzMVowLzEtMCsGA1UEAxMk MDM0ZjI1NTItYjY3Ny00M2MxLTlmYjQtMDQyMDZhODM4Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2xXZ0HI53btQmX2BJ5M37qQJTaFjcA0zPND KQLby17AGqX99gGJZcMmGYEBu3/aH/DBYCQQQCmAEJCnz2X498rrGYty9LHI9otG I7vvxUGFu1HsrV3L+V0EVB9YUSyQWl9K5iM4gP+1VoxqDyCKuZwR737P9ISNgJKy wuJXQmuiJGe0vfw4BTfnnDv/j4fZ/VXg4ZHx9100WHXfMH3UeJVDeFshvjqGtPOY zPPT8oE0PywVweyvwCAcrMaUS+GcfXsS+GljarSnZqrDam55KNIzQr9TbBt4aKVg 1ua2ro0NQVFcGOVhDSy1NzR6kX5JBzMhlfUyYifMiafqK+eBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDftXcIShoRdjfDBeRyjXAdWNI6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZhODlkNTMtYzY1YS0z NDRlLTgyMzItMjliOWRhYTVmOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKtpQG8du7KlnwyZR0IymcuKQzUS0YKs8A81PuaROTvhdEnoBgC0UBj L4t19QPfx2oPdqXpDE5mzEWD134tP3gtZ5USMUsebZQJgo31d0Gx0dedw8MCRmGL xP2TxYjcmuJ8QzY22HMhFKZKsRGiLinu4ckpB6W9Zi8fjUQle/vEs0KulQuAcJr+ +gdwdPoRpgfxEp0mOl0dqXtKeXJ+rN17S7gaPCoUsAE7cBeB13zPJVOvn5VJ+F5E MVSi+ig0m3qYdmuNoNaAOkUs36F/Ih4E5gmN496tR1tcZR+vqJ93a3g/EgnThXah Yp6e5qb0d3V8iwgxAd23cZpNJEXOSsk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:42 2026 by rpki-client