This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f11caf2-f6f1-3d17-8c61-71ef04dde379.roa File: 6f11caf2-f6f1-3d17-8c61-71ef04dde379.roa (raw, json) Hash identifier: esHJxWRfFQ1wiYi34m0JzPniPcROHrexcwqO9Sotc50= Subject key identifier: 8D:95:ED:3C:3C:F4:5F:32:85:33:A2:67:32:F8:70:13:2C:AF:8E:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A758812D6C14C6DEAA1100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f11caf2-f6f1-3d17-8c61-71ef04dde379.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:58:81:2d:6c:14:c6:de:aa:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=27d9ef3b-6429-44d9-a8ad-9d7b15eca841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:34:58:c8:f9:08:80:aa:e8:b1:61:f0:69: 35:eb:0b:6d:1d:84:d1:bc:c4:66:b8:77:66:47:62: ca:0d:d2:e1:d9:a9:5f:b4:5f:0c:9c:3f:2c:9c:ca: 6f:fc:d9:9c:58:4d:d9:c0:3e:40:3f:8f:30:93:c9: 25:73:2d:05:3d:d7:2e:d2:b0:c1:0e:4c:e2:6c:ca: 26:fa:93:f2:0d:3e:bc:15:1d:b8:65:1e:59:cb:dd: f3:2c:76:0f:94:32:d0:b2:81:64:05:ac:80:ae:3d: 02:2a:d7:2b:28:8c:09:79:90:b4:43:6e:b8:fc:fc: 93:9e:06:2c:8a:38:47:92:4e:63:0e:52:e6:12:aa: 6c:fd:49:6e:0f:2b:25:4e:ae:6a:ba:c8:51:54:da: f1:50:ec:74:1d:52:31:97:9b:b2:72:e2:00:b2:c1: e0:24:e1:3c:0f:31:65:5a:09:f3:97:27:9c:a2:f7: 7f:2a:91:e1:b9:7f:1d:86:58:f7:01:f4:d0:bb:9a: c6:11:09:0e:25:0a:57:45:b6:37:ea:a5:93:bd:dd: e4:a1:c8:1b:35:10:cc:b7:86:dc:89:42:35:4e:d6: d9:41:4f:b2:80:f7:be:25:25:ab:65:ba:9b:d3:75: 24:30:15:88:2e:4b:43:9a:ed:29:ce:4d:73:eb:d5: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:ED:3C:3C:F4:5F:32:85:33:A2:67:32:F8:70:13:2C:AF:8E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f11caf2-f6f1-3d17-8c61-71ef04dde379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f3:dd:36:d9:43:fd:d0:05:b1:d8:2b:89:5f:cd:b6:d5:c4: 47:11:56:2e:e2:fa:1b:10:12:70:0d:20:cd:bc:48:22:2b:39: 59:69:42:b7:dc:08:43:d9:cf:65:6c:35:67:74:c4:bc:45:78: 62:1f:7d:53:3a:00:06:5b:11:79:14:dd:31:d1:ab:d8:41:b6: e0:55:51:51:82:c3:e3:4d:28:47:02:12:d1:e2:8e:ce:a9:74: 23:84:0f:0e:06:62:5d:19:be:df:3e:05:d8:2c:a5:d5:f3:37: 59:45:2a:dc:aa:1f:c4:80:15:b9:d8:96:93:f2:2b:ab:ed:3c: 9d:af:36:8a:4d:98:56:b5:a9:26:b5:4b:29:3d:0a:91:ac:56: 4b:96:50:f5:af:73:d3:7b:f3:01:e2:e1:be:56:d0:1b:83:4f: 73:9b:9b:aa:2c:44:e9:d5:94:6d:e7:14:73:55:3c:f5:86:09: 2d:82:6f:c6:8b:4d:88:6a:89:8d:5a:be:73:b5:46:6f:cf:d5: a9:69:ff:b0:4e:1a:24:d9:22:6c:e8:c2:b4:e1:9c:44:58:02: 5e:af:6f:27:57:d7:04:32:15:1d:eb:d8:2d:d8:03:70:db:07: fd:ec:2c:d1:45:40:d2:0f:32:c4:85:4b:34:49:ec:9a:4b:b6: 43:fb:65:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1iBLWwUxt6qEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MjdkOWVmM2ItNjQyOS00NGQ5LWE4YWQtOWQ3YjE1ZWNhODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8k0WMj5CICq6LFh8Gk16wttHYTRvMRmuHdm R2LKDdLh2alftF8MnD8snMpv/NmcWE3ZwD5AP48wk8klcy0FPdcu0rDBDkzibMom +pPyDT68FR24ZR5Zy93zLHYPlDLQsoFkBayArj0CKtcrKIwJeZC0Q264/PyTngYs ijhHkk5jDlLmEqps/UluDyslTq5qushRVNrxUOx0HVIxl5uycuIAssHgJOE8DzFl Wgnzlyecovd/KpHhuX8dhlj3AfTQu5rGEQkOJQpXRbY36qWTvd3kocgbNRDMt4bc iUI1TtbZQU+ygPe+JSWrZbqb03UkMBWILktDmu0pzk1z69UO5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2V7Tw89F8yhTOiZzL4cBMsr44UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmYxMWNhZjItZjZmMS0z ZDE3LThjNjEtNzFlZjA0ZGRlMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnz3TbZQ/3QBbHYK4lfzbbVxEcRVi7i+hsQEnANIM28SCIrOVlpQrfc CEPZz2VsNWd0xLxFeGIffVM6AAZbEXkU3THRq9hBtuBVUVGCw+NNKEcCEtHijs6p dCOEDw4GYl0Zvt8+BdgspdXzN1lFKtyqH8SAFbnYlpPyK6vtPJ2vNopNmFa1qSa1 Syk9CpGsVkuWUPWvc9N78wHi4b5W0BuDT3Obm6osROnVlG3nFHNVPPWGCS2Cb8aL TYhqiY1avnO1Rm/P1alp/7BOGiTZImzowrThnERYAl6vbydX1wQyFR3r2C3YA3Db B/3sLNFFQNIPMsSFSzRJ7JpLtkP7Zc8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:21 2026 by rpki-client