This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa File: 86147445-4d27-3a02-b65f-dcb48ef32850.roa (raw, json) Hash identifier: /LHaqFcwOU+/xFTjfEEEwK4FPz6xEMuKD11oAPwdvQg= Subject key identifier: 6E:0F:DC:4A:F3:73:E1:81:18:36:48:19:48:6D:51:F9:A5:2C:5F:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A73B16DE0C587F0F619140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:3b:16:de:0c:58:7f:0f:61:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=09d172f7-dc3b-4a90-8186-42d103242503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b1:22:b5:57:39:df:7b:8c:a2:27:0e:ee:dc: cf:dc:b6:bc:16:56:96:95:3e:bc:32:b5:b4:12:21: 0f:84:97:71:bc:85:89:75:58:b5:63:a7:2b:ea:67: d0:e1:6f:5b:e9:e2:a1:1a:88:07:86:b0:5d:b9:03: 50:d1:65:81:f1:ae:ae:62:db:40:a2:df:18:3c:22: 4f:5d:78:48:f2:43:e1:95:9e:1a:df:f7:b1:4d:25: b4:0a:72:c4:42:30:c8:13:9c:9a:1b:2b:68:a6:4a: 4b:c2:9c:29:e1:1b:60:cb:e4:fc:20:a9:ef:66:22: dc:ec:7b:6d:33:46:c0:7b:9d:17:ba:db:03:54:40: a1:d2:68:fa:e2:f5:43:ff:b6:d3:f2:97:db:a5:dc: c7:40:e5:a7:1a:05:a2:a6:ba:16:69:bd:39:28:fa: ed:89:97:4d:84:15:1d:b8:a8:df:af:38:b8:30:4a: bf:71:11:de:fe:04:07:06:50:7d:4c:06:e4:f3:ad: 09:ad:2b:1f:96:de:55:6c:58:80:7b:57:ab:b7:7b: be:ef:89:c3:8a:2e:6a:4e:2c:55:84:c6:89:e4:1a: fb:06:56:40:f0:9e:dc:70:f1:fa:24:79:cb:ea:e0: 6e:2c:df:00:87:0d:3e:eb:89:75:7b:af:5e:be:e7: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0F:DC:4A:F3:73:E1:81:18:36:48:19:48:6D:51:F9:A5:2C:5F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c1:ed:a8:88:41:3b:df:cb:61:e0:56:c8:52:55:d3:55:0e: 2e:60:2b:86:26:c7:ff:c6:40:02:46:11:24:5c:f3:ad:52:5d: 71:2c:88:61:de:10:35:28:75:50:c7:79:3b:42:1c:b8:00:58: 80:fd:d9:d2:c3:af:0e:f5:b4:ff:bd:87:a9:5a:66:0d:b5:c6: 00:3c:e4:40:b3:66:32:de:a1:55:7e:0a:03:96:87:e7:ea:82: 99:1b:bc:1d:41:5b:c3:a2:bc:fc:65:21:4b:af:25:a5:36:2b: af:09:9f:31:5f:55:0f:15:d0:cc:b9:68:bc:63:55:5d:bb:5f: 30:e9:99:8f:4e:c0:3d:ef:bc:80:b1:3d:72:a3:a7:9a:09:e2: e1:10:55:17:a7:43:af:e5:ce:f5:16:c8:28:23:2a:b4:e8:55: 0b:bc:3b:90:4e:16:38:ae:56:6c:43:1f:8d:f6:da:20:04:59: ad:06:6c:65:33:40:e4:e7:ff:41:55:94:1b:53:4f:30:f2:4d: 67:2b:ea:aa:67:61:5d:55:72:c1:6a:e6:d2:fc:f1:3a:ab:33: 80:f3:07:8c:22:5e:ba:af:d5:ef:66:39:90:13:2c:a9:45:0d: ae:46:52:e7:14:b3:36:b8:14:b8:69:71:12:0b:04:8f:5d:35: 5e:41:77:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpzsW3gxYfw9hkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MDlkMTcyZjctZGMzYi00YTkwLTgxODYtNDJkMTAzMjQyNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbEitVc533uMoicO7tzP3La8FlaWlT68MrW0 EiEPhJdxvIWJdVi1Y6cr6mfQ4W9b6eKhGogHhrBduQNQ0WWB8a6uYttAot8YPCJP XXhI8kPhlZ4a3/exTSW0CnLEQjDIE5yaGytopkpLwpwp4Rtgy+T8IKnvZiLc7Htt M0bAe50XutsDVECh0mj64vVD/7bT8pfbpdzHQOWnGgWiproWab05KPrtiZdNhBUd uKjfrzi4MEq/cRHe/gQHBlB9TAbk860JrSsflt5VbFiAe1ert3u+74nDii5qTixV hMaJ5Br7BlZA8J7ccPH6JHnL6uBuLN8Ahw0+64l1e69evufsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4P3Erzc+GBGDZIGUhtUfmlLF/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYxNDc0NDUtNGQyNy0z YTAyLWI2NWYtZGNiNDhlZjMyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXB7aiIQTvfy2HgVshSVdNVDi5gK4Ymx//GQAJGESRc861SXXEsiGHe EDUodVDHeTtCHLgAWID92dLDrw71tP+9h6laZg21xgA85ECzZjLeoVV+CgOWh+fq gpkbvB1BW8OivPxlIUuvJaU2K68JnzFfVQ8V0My5aLxjVV27XzDpmY9OwD3vvICx PXKjp5oJ4uEQVRenQ6/lzvUWyCgjKrToVQu8O5BOFjiuVmxDH4322iAEWa0GbGUz QOTn/0FVlBtTTzDyTWcr6qpnYV1VcsFq5tL88TqrM4DzB4wiXrqv1e9mOZATLKlF Da5GUucUsza4FLhpcRILBI9dNV5Bd58= -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:28 2026 by rpki-client