This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa File: 68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa (raw, json) Hash identifier: GXCkV1MDB73Fj8UW1FGzt5UY3hfpq9Ps6uXm2qzZhqg= Subject key identifier: CB:CA:6A:FF:40:A0:A7:0A:98:66:15:A3:C6:52:91:DD:D5:1D:38:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A80AF63CD7BF1F8D0B7C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 173.194.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:0a:f6:3c:d7:bf:1f:8d:0b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=bcfc3997-de68-4ac6-88c2-b67790bbfd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d5:14:ad:8c:98:97:2c:ff:4a:1a:cd:a2:1a: cc:a6:bf:96:5b:e2:21:8f:76:a3:21:e7:15:7f:fe: 66:94:84:99:d6:d4:e0:f1:dd:66:01:62:6a:4c:37: 72:ea:12:be:d4:24:8b:fa:47:ae:1e:d2:e4:b1:d3: dd:68:6c:11:d9:4d:41:32:30:a8:dc:d1:aa:ea:44: 9b:ab:83:f4:2b:90:d8:79:92:c2:9d:67:cb:ef:76: 5b:a0:0f:20:a5:ce:47:61:92:4a:f5:5c:4e:e6:a2: 30:09:ed:99:59:55:e7:11:83:7e:8d:e3:db:fd:52: 27:5d:1d:d2:40:7b:ee:49:62:18:2f:24:a4:8d:a1: fe:08:0c:9e:10:7a:fe:cd:fe:0d:0f:2c:61:82:c0: fd:42:4a:f2:da:98:9b:1d:17:d8:89:3b:2d:50:ff: a1:ad:ce:65:b6:94:02:13:b5:85:59:a4:ec:ca:31: c9:70:9d:15:96:a5:f3:e9:21:6b:91:92:92:b7:8c: 77:91:09:d3:1e:93:d2:3d:67:2c:cb:4b:74:8c:9d: ed:dd:38:7c:2a:62:1f:d4:a1:01:42:43:af:f6:88: 2b:67:ed:8c:c4:90:55:ee:11:6a:70:34:69:2e:5a: f3:c4:5e:94:ee:53:24:c5:f7:34:54:18:17:0f:8e: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CA:6A:FF:40:A0:A7:0A:98:66:15:A3:C6:52:91:DD:D5:1D:38:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68bb21ce-82b3-3eb4-af6d-a4aaf728d60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:34:84:f5:09:77:d6:ad:4c:e8:8d:e8:04:c1:14:57:5a:fa: 0a:66:11:b2:87:92:0f:77:42:79:8d:a9:46:f8:17:53:db:07: 5f:aa:22:77:4d:8c:91:e4:a8:c7:2f:2b:7d:22:a6:5e:10:5c: 36:eb:4d:d7:68:82:9b:b4:11:88:9f:ce:01:f7:01:38:bd:89: b4:dd:d3:fa:be:80:8d:d6:b8:62:93:fa:34:5f:dc:c1:0b:3c: 9f:5d:16:45:d2:6b:74:7b:fa:33:c2:31:3c:9a:46:c8:e6:a1: cc:f5:f1:1f:6a:fb:60:62:8f:fc:39:5d:f7:4b:9b:12:ca:02: 46:a8:da:1c:07:79:cb:97:54:25:f2:a5:6b:df:71:39:fe:ad: 79:e8:3b:6e:cf:f5:ba:e7:16:2b:25:99:22:10:fe:d1:f9:78: 86:cc:6f:f2:62:13:7d:c2:58:30:8e:2f:a5:3b:84:b9:8d:c4: 14:02:46:41:07:d5:57:82:1e:f4:a4:a0:ae:e4:63:b9:0b:fa: ce:38:47:99:8a:39:59:1f:5c:66:21:f4:54:34:47:7f:62:4c: 33:3d:da:7b:bf:fb:e1:0b:0e:21:82:cf:3a:e5:75:d9:f0:d8: 93:97:37:79:c6:6e:76:66:05:11:85:39:3b:48:6e:e2:df:9a: 8c:6b:2e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqAr2PNe/H40LfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YmNmYzM5OTctZGU2OC00YWM2LTg4YzItYjY3NzkwYmJmZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tUUrYyYlyz/ShrNohrMpr+WW+Ihj3ajIecV f/5mlISZ1tTg8d1mAWJqTDdy6hK+1CSL+keuHtLksdPdaGwR2U1BMjCo3NGq6kSb q4P0K5DYeZLCnWfL73ZboA8gpc5HYZJK9VxO5qIwCe2ZWVXnEYN+jePb/VInXR3S QHvuSWIYLySkjaH+CAyeEHr+zf4NDyxhgsD9Qkry2pibHRfYiTstUP+hrc5ltpQC E7WFWaTsyjHJcJ0VlqXz6SFrkZKSt4x3kQnTHpPSPWcsy0t0jJ3t3Th8KmIf1KEB QkOv9ogrZ+2MxJBV7hFqcDRpLlrzxF6U7lMkxfc0VBgXD47NlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvKav9AoKcKmGYVo8ZSkd3VHTgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhiYjIxY2UtODJiMy0z ZWI0LWFmNmQtYTRhYWY3MjhkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc0hPUJd9atTOiN6ATBFFda+gpmEbKHkg93QnmNqUb4F1PbB1+qIndN jJHkqMcvK30ipl4QXDbrTddogpu0EYifzgH3ATi9ibTd0/q+gI3WuGKT+jRf3MEL PJ9dFkXSa3R7+jPCMTyaRsjmocz18R9q+2Bij/w5XfdLmxLKAkao2hwHecuXVCXy pWvfcTn+rXnoO27P9brnFislmSIQ/tH5eIbMb/JiE33CWDCOL6U7hLmNxBQCRkEH 1VeCHvSkoK7kY7kL+s44R5mKOVkfXGYh9FQ0R39iTDM92nu/++ELDiGCzzrlddnw 2JOXN3nGbnZmBRGFOTtIbuLfmoxrLow= -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:50 2026 by rpki-client