This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa File: 739bd5a1-d6b5-3e48-8130-252f11afed97.roa (raw, json) Hash identifier: 8iBTvV/Jqs/nkfgCeaf6FKS4ko4e39ahqD60mt5lfW4= Subject key identifier: D8:17:03:B2:04:89:69:C1:96:D8:2A:6A:A7:35:F7:C1:9E:AC:52:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7462B2690B9F249936A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:46:2b:26:90:b9:f2:49:93:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=8f86c540-f1e8-4d39-9211-0157df141289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:dd:87:f1:4e:56:3c:32:01:60:a5:85:5d: 5c:24:0e:19:53:c5:8d:92:f2:92:9e:7d:5e:58:f5: f1:e3:01:80:df:d5:03:fa:c0:8e:93:a6:c6:fb:8f: 5d:98:0a:ba:5a:0f:5c:54:7f:d6:de:f5:16:d6:66: 3d:8f:6f:55:3f:52:f8:a4:57:c3:79:74:ea:56:c8: 11:c6:02:f0:7c:03:85:60:5f:9f:fb:82:de:05:b7: e4:21:a3:ee:15:58:27:59:11:3e:25:20:67:18:c4: 15:dc:8f:30:a5:91:5c:f8:3c:67:97:c8:a8:70:7a: d9:87:23:03:db:eb:a7:92:d9:ed:fb:e4:39:52:4d: af:dd:23:3c:ca:bd:b5:68:e7:58:d1:24:24:59:58: f6:9e:93:db:38:34:8c:4d:55:ad:4d:9b:9a:36:9d: f2:c6:aa:05:57:ba:2e:c6:01:ac:95:96:54:6c:b3: cd:3b:d6:be:5f:3e:68:0e:d2:63:19:6d:fe:c0:1d: 7e:39:a9:4a:28:3f:cd:d5:3d:7e:69:2d:5a:cd:9e: e6:61:8d:24:64:91:39:e0:ad:89:be:94:17:a7:1e: 77:1a:ef:dd:da:a6:08:d2:d4:a8:19:66:0a:fd:0f: fa:05:97:42:9d:8d:47:21:23:64:f7:91:cd:80:18: b0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:03:B2:04:89:69:C1:96:D8:2A:6A:A7:35:F7:C1:9E:AC:52:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/739bd5a1-d6b5-3e48-8130-252f11afed97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:71:de:38:48:bb:8a:9c:fe:60:a7:c4:04:84:a3:e0:77:4f: 61:7a:d2:c8:3e:66:a4:55:86:e0:53:1a:ed:0b:a3:d8:86:13: 50:2b:20:f2:99:66:e5:26:de:13:b0:c2:c2:e3:85:6a:79:20: 51:af:b5:70:51:13:54:30:ee:d7:c3:a9:2c:e1:13:2d:45:a8: 1d:15:ac:84:83:de:10:26:5e:c5:06:dc:28:b4:b7:5d:fa:29: d9:bb:2d:dc:bb:cc:7d:45:42:f9:c5:1e:62:b5:52:fa:0d:89: cf:5c:56:df:cf:e3:c9:6c:07:0b:03:2a:b5:90:db:41:98:5c: 09:d7:f7:94:49:ce:74:55:11:3b:50:08:f7:59:49:e2:22:b5: d4:d0:e3:4a:ee:87:f2:14:f6:dd:a6:75:83:25:30:08:27:23: 53:31:82:03:65:c6:45:ef:59:79:48:83:39:44:d0:86:83:99: 6c:03:fc:68:4c:c7:6f:e0:12:8b:52:80:e6:30:19:c1:1c:f6: 0d:c6:9c:94:4a:b0:fa:fa:42:8c:d7:3f:74:e7:6f:3c:de:76: a8:a8:0c:cf:47:7a:67:04:a5:21:78:a5:af:cc:6f:69:a4:bc: 30:38:8a:d7:c6:7e:9b:dc:87:e3:4c:8e:01:c3:11:03:23:42: 12:94:f6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0YrJpC58kmTaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OGY4NmM1NDAtZjFlOC00ZDM5LTkyMTEtMDE1N2RmMTQxMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMfdh/FOVjwyAWClhV1cJA4ZU8WNkvKSnn1e WPXx4wGA39UD+sCOk6bG+49dmAq6Wg9cVH/W3vUW1mY9j29VP1L4pFfDeXTqVsgR xgLwfAOFYF+f+4LeBbfkIaPuFVgnWRE+JSBnGMQV3I8wpZFc+Dxnl8iocHrZhyMD 2+unktnt++Q5Uk2v3SM8yr21aOdY0SQkWVj2npPbODSMTVWtTZuaNp3yxqoFV7ou xgGslZZUbLPNO9a+Xz5oDtJjGW3+wB1+OalKKD/N1T1+aS1azZ7mYY0kZJE54K2J vpQXpx53Gu/d2qYI0tSoGWYK/Q/6BZdCnY1HISNk95HNgBiw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgXA7IEiWnBltgqaqc198GerFJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM5YmQ1YTEtZDZiNS0z ZTQ4LTgxMzAtMjUyZjExYWZlZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNx3jhIu4qc/mCnxASEo+B3T2F60sg+ZqRVhuBTGu0Lo9iGE1ArIPKZ ZuUm3hOwwsLjhWp5IFGvtXBRE1Qw7tfDqSzhEy1FqB0VrISD3hAmXsUG3Ci0t136 Kdm7Ldy7zH1FQvnFHmK1UvoNic9cVt/P48lsBwsDKrWQ20GYXAnX95RJznRVETtQ CPdZSeIitdTQ40ruh/IU9t2mdYMlMAgnI1MxggNlxkXvWXlIgzlE0IaDmWwD/GhM x2/gEotSgOYwGcEc9g3GnJRKsPr6QozXP3TnbzzedqioDM9HemcEpSF4pa/Mb2mk vDA4itfGfpvch+NMjgHDEQMjQhKU9gk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:21 2026 by rpki-client