This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa File: 856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa (raw, json) Hash identifier: QxhbUzJslCJP6YJu9jufnNHLLI1FHI0QzvSCcqtD2iU= Subject key identifier: E4:27:ED:66:52:B6:1A:73:51:F4:22:6F:2F:D1:6F:A6:65:60:81:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584BD4959D7F1DE0223F24C1B100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa Signing time: Wed 12 Nov 2025 02:00:30 +0000 ROA not before: Wed 12 Nov 2025 02:00:30 +0000 ROA not after: Tue 10 Feb 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d4:95:9d:7f:1d:e0:22:3f:24:c1:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 12 02:00:30 2025 GMT Not After : Feb 10 02:00:30 2026 GMT Subject: CN=0d5802e1-44e8-4ce2-b2c0-d60e7d97e486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:19:56:06:3f:e9:f2:f2:d0:3a:ba:36:53: 0a:f7:b2:f9:e5:e0:fc:5b:a2:58:5a:2f:5b:2c:11: 7c:ed:47:5f:d8:fe:49:e4:97:d6:e1:8b:ae:d8:95: 77:6d:60:e5:02:b1:7b:33:8b:4c:6b:3e:14:da:c4: bb:41:ba:28:9c:81:b5:8a:f1:5b:d2:18:82:cc:3b: 0d:0d:cb:51:e9:fc:73:f8:81:2f:b7:6a:3c:f8:31: 2c:41:f9:77:f5:44:34:d9:8b:be:31:f9:e1:0d:c6: 63:99:de:72:72:3b:24:bd:37:d8:bd:68:07:92:3c: 91:eb:e5:1f:75:d3:9c:ca:34:d6:dd:44:75:e1:19: 01:b9:d5:6b:e7:af:1d:fc:75:e7:93:49:98:28:4b: 86:22:d4:b9:e1:85:ef:4e:1b:3e:8a:e3:44:d6:5f: 67:7f:b7:a1:4d:16:17:71:39:e5:20:98:5e:ba:b5: 98:7a:e6:86:e2:ec:67:5a:5c:78:df:e3:60:95:19: 5f:7c:58:b9:c9:7f:8d:af:f3:35:3e:1c:8b:af:c6: df:b9:ab:c8:04:53:ff:7c:93:6a:fe:01:7e:85:75: 69:65:58:c8:ec:fb:e8:22:ff:b3:87:3b:33:d4:2d: 9b:45:e1:ba:37:cd:bc:b7:57:e3:e1:7e:81:b0:8e: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:27:ED:66:52:B6:1A:73:51:F4:22:6F:2F:D1:6F:A6:65:60:81:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:73:4a:22:76:e8:76:da:b0:8b:cc:11:5d:7e:70:04:f9:96: 08:13:1b:dd:ec:7e:71:e5:e8:07:63:67:00:53:83:48:3c:96: 5e:e1:70:0f:0e:f4:45:ac:90:0f:33:96:fe:3b:8b:80:a5:5b: 19:bf:27:51:b0:fa:6e:cb:c7:43:d6:ff:1f:72:22:3c:d9:00: 12:f1:31:6c:9e:b3:bb:f1:7b:35:55:1f:df:be:51:a3:df:35: eb:ed:bb:1e:4c:25:42:09:cc:d4:b8:78:b0:fd:97:bc:2e:af: 4f:bf:25:5b:34:72:62:ba:e2:fd:f6:bf:7b:01:ad:3f:85:11: 04:dc:72:29:ef:41:f0:3f:fa:e3:18:a8:cf:d2:3c:b5:1d:69: 7d:60:bd:09:de:53:47:4a:af:d0:8f:0b:ce:d5:36:cb:86:3f: 9d:07:4f:20:27:42:f8:05:64:17:bf:09:ce:32:31:2b:e7:4b: b9:b0:4c:3c:37:ca:03:6a:9a:2e:b6:76:f9:f1:6f:a7:22:4a: cb:4d:c6:1c:0e:3b:97:6a:2b:73:2e:f0:16:ad:64:6a:a6:80: 5d:94:c6:b7:76:bf:98:90:6d:2f:50:14:81:77:ce:30:ac:17: a9:34:4d:92:02:03:ea:54:15:0e:71:dd:27:28:53:0b:68:cf: f9:95:92:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvUlZ1/HeAiPyTBsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTExMjAyMDAzMFoXDTI2MDIxMDAyMDAzMFowLzEtMCsGA1UEAxMk MGQ1ODAyZTEtNDRlOC00Y2UyLWIyYzAtZDYwZTdkOTdlNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7UZVgY/6fLy0Dq6NlMK97L55eD8W6JYWi9b LBF87Udf2P5J5JfW4Yuu2JV3bWDlArF7M4tMaz4U2sS7QboonIG1ivFb0hiCzDsN DctR6fxz+IEvt2o8+DEsQfl39UQ02Yu+MfnhDcZjmd5ycjskvTfYvWgHkjyR6+Uf ddOcyjTW3UR14RkBudVr568d/HXnk0mYKEuGItS54YXvThs+iuNE1l9nf7ehTRYX cTnlIJheurWYeuaG4uxnWlx43+NglRlffFi5yX+Nr/M1PhyLr8bfuavIBFP/fJNq /gF+hXVpZVjI7PvoIv+zhzsz1C2bReG6N828t1fj4X6BsI7yrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQn7WZSthpzUfQiby/Rb6ZlYIFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU2YTYyYjMtZWVkYS0z YWNkLWI3ZDUtYmU3ZDhhOWY5Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNzSiJ26HbasIvMEV1+cAT5lggTG93sfnHl6AdjZwBTg0g8ll7hcA8O 9EWskA8zlv47i4ClWxm/J1Gw+m7Lx0PW/x9yIjzZABLxMWyes7vxezVVH9++UaPf Nevtux5MJUIJzNS4eLD9l7wur0+/JVs0cmK64v32v3sBrT+FEQTccinvQfA/+uMY qM/SPLUdaX1gvQneU0dKr9CPC87VNsuGP50HTyAnQvgFZBe/Cc4yMSvnS7mwTDw3 ygNqmi62dvnxb6ciSstNxhwOO5dqK3Mu8BatZGqmgF2Uxrd2v5iQbS9QFIF3zjCs F6k0TZICA+pUFQ5x3ScoUwtoz/mVkiE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:07 2025 by rpki-client