This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa File: 661fdda3-d9b9-336b-868c-5694c1d1cfea.roa (raw, json) Hash identifier: O7dxC1E4o9y/2LTsLCKCEg+h48zpac1dwcrPnOxMeQE= Subject key identifier: 0C:7B:BF:B3:3B:1A:FC:A2:A7:41:16:2D:8B:D4:41:CC:49:D5:A4:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A754CD0864D243C4FFBE97 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:54:cd:08:64:d2:43:c4:ff:be:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1f2256fd-4116-47bf-9497-5a862b020a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:a2:c5:2f:15:1c:a4:44:f1:5c:a6:9b:e5: 74:aa:36:aa:54:c3:1b:6a:ba:72:7b:c4:59:9f:e9: f3:5d:12:e2:73:74:3d:70:0c:25:0e:b8:4e:5b:31: 54:a9:3e:de:f7:28:94:e4:5d:5e:40:ca:ea:3b:5e: aa:2a:7e:5d:e1:c6:76:41:6a:79:18:7f:89:2c:1b: ef:ba:de:a9:00:2e:d3:b1:74:c5:c0:30:1a:7f:ad: e2:e5:44:ec:52:da:e1:8e:d6:e2:14:6d:b6:39:51: dd:63:03:29:df:33:b3:3a:fb:ad:3e:82:ae:02:fa: 87:05:9b:b3:c6:dc:4b:9f:27:44:b2:c5:da:de:6e: 7a:ef:3f:07:95:9c:4d:52:80:b0:de:d9:a8:3c:2a: d1:19:3a:1e:88:70:9b:4a:72:92:9c:1a:aa:62:f1: 65:12:41:58:65:eb:98:1b:a9:0e:05:04:62:b9:ae: b4:bd:df:ef:d6:17:3b:9f:93:0e:dc:20:eb:09:7a: 40:ac:d2:ea:dc:65:f3:fa:87:45:ee:02:e5:8b:51: 2a:08:92:af:bb:1d:25:c3:88:f3:90:1b:93:52:ba: 3a:d1:f9:ca:be:6d:a4:e6:67:5e:cb:1b:3d:da:af: b8:e7:4b:ab:41:72:0d:da:52:19:f4:0d:9d:81:d6: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:BF:B3:3B:1A:FC:A2:A7:41:16:2D:8B:D4:41:CC:49:D5:A4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c9:b9:03:a9:3a:e4:10:c8:59:ee:53:88:01:36:8d:2b:08: 5e:b2:b3:60:dc:99:8e:70:32:90:70:dc:c3:06:d2:5e:a6:04: 2d:23:10:28:7b:b7:68:c4:73:f4:6a:be:03:f8:80:2b:59:14: 6b:53:0c:4c:10:13:f4:9b:11:70:cd:4b:b9:3c:bb:ab:17:65: d9:b7:29:d6:2b:21:c4:04:82:5d:a8:b6:6e:f7:9e:c8:17:53: d6:2b:10:dd:f6:7e:81:69:5e:de:7b:dd:fe:6a:10:7a:72:21: 5d:90:42:44:5b:9c:b0:69:53:31:40:b5:47:38:0e:d0:b2:8f: 37:13:61:6a:a1:ad:58:38:d6:da:3f:6d:ca:65:ef:ab:be:b7: ae:89:9f:6b:28:6d:fa:a3:e6:d3:84:1c:bf:c1:a5:ec:b5:70: 4b:2a:a7:84:cb:92:a4:4b:f4:58:e7:dd:28:45:87:6a:93:cb: 36:f7:cc:cc:04:d9:cb:de:67:df:6b:96:0f:2b:9f:72:d0:aa: 27:e0:5a:25:54:48:06:73:6d:f1:39:31:31:9e:6d:9f:ed:99: 9c:7c:53:48:f9:6c:bf:b7:3a:93:a8:4d:8e:50:ea:ae:f2:60: cd:02:0a:b2:b2:a1:50:6a:2d:1f:e8:3e:24:0f:f6:23:02:9a: e6:93:e8:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1TNCGTSQ8T/vpcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWYyMjU2ZmQtNDExNi00N2JmLTk0OTctNWE4NjJiMDIwYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydeixS8VHKRE8Vymm+V0qjaqVMMbarpye8RZ n+nzXRLic3Q9cAwlDrhOWzFUqT7e9yiU5F1eQMrqO16qKn5d4cZ2QWp5GH+JLBvv ut6pAC7TsXTFwDAaf63i5UTsUtrhjtbiFG22OVHdYwMp3zOzOvutPoKuAvqHBZuz xtxLnydEssXa3m567z8HlZxNUoCw3tmoPCrRGToeiHCbSnKSnBqqYvFlEkFYZeuY G6kOBQRiua60vd/v1hc7n5MO3CDrCXpArNLq3GXz+odF7gLli1EqCJKvux0lw4jz kBuTUro60fnKvm2k5mdeyxs92q+450urQXIN2lIZ9A2dgdb/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx7v7M7Gvyip0EWLYvUQcxJ1aQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjYxZmRkYTMtZDliOS0z MzZiLTg2OGMtNTY5NGMxZDFjZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHJuQOpOuQQyFnuU4gBNo0rCF6ys2DcmY5wMpBw3MMG0l6mBC0jECh7 t2jEc/RqvgP4gCtZFGtTDEwQE/SbEXDNS7k8u6sXZdm3KdYrIcQEgl2otm73nsgX U9YrEN32foFpXt573f5qEHpyIV2QQkRbnLBpUzFAtUc4DtCyjzcTYWqhrVg41to/ bcpl76u+t66Jn2sobfqj5tOEHL/Bpey1cEsqp4TLkqRL9Fjn3ShFh2qTyzb3zMwE 2cveZ99rlg8rn3LQqifgWiVUSAZzbfE5MTGebZ/tmZx8U0j5bL+3OpOoTY5Q6q7y YM0CCrKyoVBqLR/oPiQP9iMCmuaT6Gg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:27 2026 by rpki-client