This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa File: 72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa (raw, json) Hash identifier: 7u/yt2GMwNfaoHhQre6jz7H4FEOs24rQVLNFQiifqVM= Subject key identifier: DC:F1:AE:84:86:87:9C:70:66:32:77:B1:C0:00:7D:E5:51:56:4D:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7EE080808A5939D7CD280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:ee:08:08:08:a5:93:9d:7c:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=a34d101f-7b10-408d-870c-83fe77990fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:7d:8e:67:15:ed:8c:af:76:5e:cb:5a:42: 84:4b:be:47:16:7f:bf:e2:41:19:16:85:fe:5e:6a: e7:ce:3e:18:60:c5:2f:7a:8d:df:41:56:ca:b5:49: a5:b4:86:b6:81:8c:ae:18:2a:24:8e:7e:f1:30:58: a7:15:99:c5:a1:a8:a5:9c:dd:b7:eb:d6:38:89:8e: 3c:29:64:25:05:96:a1:1c:0c:8e:fc:d5:aa:e5:ef: bc:ac:b5:2e:78:40:a2:a5:93:3a:69:1c:a9:1a:66: d3:d3:f0:76:30:af:bd:01:d0:af:64:45:5b:66:0a: d6:32:89:02:98:46:2c:d1:2f:d6:7c:4f:34:56:b5: 7d:60:48:37:ef:16:fe:97:1c:b1:89:e1:94:6d:74: 9e:82:3a:13:4e:bf:bf:d9:60:38:32:25:03:e7:0b: d5:41:4e:7a:c9:4b:57:a4:b4:a1:c5:5d:67:8e:2d: 9a:53:7b:01:ad:e2:50:e7:07:4e:fd:28:7a:4a:42: b5:8d:8f:28:33:c4:4b:04:f3:ab:1d:be:14:55:ea: b3:ee:b7:af:cc:62:54:af:0f:46:c7:88:7a:9e:86: d3:e0:a6:cb:a7:ee:c8:85:12:42:b0:2e:a3:09:1f: 4f:ca:5e:bd:8b:c4:69:f6:cf:b5:6e:7d:66:06:f8: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F1:AE:84:86:87:9C:70:66:32:77:B1:C0:00:7D:E5:51:56:4D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72c2487c-b8e9-3d8a-9bf5-8c048b2511e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:58:a6:a2:11:36:70:0c:8e:6e:b4:74:c4:f0:47:14:76:4f: ec:25:7a:12:91:4d:d4:ef:63:84:1b:e7:6c:c5:3e:47:bb:f5: c2:af:0e:a9:5a:59:96:2e:9d:cd:01:a1:26:03:c1:2d:e1:97: 4e:41:ca:c2:a2:ac:ed:e5:31:13:6f:30:a3:77:8b:41:d5:fe: f1:1b:8f:3e:d4:20:34:fb:c7:b2:a0:f0:32:75:2c:ea:88:84: d4:5d:24:47:d8:0e:eb:ea:98:8f:93:26:bb:41:7e:32:a4:a3: 28:fd:53:33:cc:e5:cf:5d:1e:d9:c8:12:93:e1:bb:7b:5a:03: 84:34:e4:25:f5:f9:96:27:4c:c1:15:fe:96:d8:9a:a1:b6:db: ae:46:d5:57:16:81:c6:a8:dc:69:db:36:45:cf:d5:13:7f:eb: 57:53:5b:a6:1e:d2:2d:b6:4b:e4:7b:66:70:53:68:b9:fb:26: 7d:53:48:63:2a:1e:29:fa:dd:23:56:f3:26:55:84:b1:57:3c: 98:ef:0a:98:1a:c6:9b:8c:25:b9:69:a9:d4:0d:a4:ac:08:4c: 97:8a:9f:b5:8e:68:a0:7d:7e:02:b9:89:80:58:85:c7:64:c7: 20:25:0b:94:ef:66:1c:ef:59:ad:9d:1e:fb:ee:26:a8:31:dd: d2:96:fa:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp+4ICAilk5180oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YTM0ZDEwMWYtN2IxMC00MDhkLTg3MGMtODNmZTc3OTkwZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3B9jmcV7Yyvdl7LWkKES75HFn+/4kEZFoX+ Xmrnzj4YYMUveo3fQVbKtUmltIa2gYyuGCokjn7xMFinFZnFoailnN2369Y4iY48 KWQlBZahHAyO/NWq5e+8rLUueECipZM6aRypGmbT0/B2MK+9AdCvZEVbZgrWMokC mEYs0S/WfE80VrV9YEg37xb+lxyxieGUbXSegjoTTr+/2WA4MiUD5wvVQU56yUtX pLShxV1nji2aU3sBreJQ5wdO/Sh6SkK1jY8oM8RLBPOrHb4UVeqz7revzGJUrw9G x4h6nobT4KbLp+7IhRJCsC6jCR9Pyl69i8Rp9s+1bn1mBvjpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzxroSGh5xwZjJ3scAAfeVRVk2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJjMjQ4N2MtYjhlOS0z ZDhhLTliZjUtOGMwNDhiMjUxMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNYpqIRNnAMjm60dMTwRxR2T+wlehKRTdTvY4Qb52zFPke79cKvDqla WZYunc0BoSYDwS3hl05BysKirO3lMRNvMKN3i0HV/vEbjz7UIDT7x7Kg8DJ1LOqI hNRdJEfYDuvqmI+TJrtBfjKkoyj9UzPM5c9dHtnIEpPhu3taA4Q05CX1+ZYnTMEV /pbYmqG2265G1VcWgcao3GnbNkXP1RN/61dTW6Ye0i22S+R7ZnBTaLn7Jn1TSGMq Hin63SNW8yZVhLFXPJjvCpgaxpuMJblpqdQNpKwITJeKn7WOaKB9fgK5iYBYhcdk xyAlC5TvZhzvWa2dHvvuJqgx3dKW+lU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:59 2026 by rpki-client