This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa File: 8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa (raw, json) Hash identifier: OuVF8Wtlelni2BMCtOK3Ai3L01Ol9wusydFGM04SN6A= Subject key identifier: 65:94:B0:C8:10:C4:4C:90:C1:DE:14:45:59:62:10:70:80:FE:CE:74 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7F94F43291A0988702700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 172.217.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:f9:4f:43:29:1a:09:88:70:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=8b0c6fc2-0e89-41e3-9191-fa55b82cf5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f5:9d:b9:84:46:2a:08:b6:2d:62:71:a2:c6: 19:78:5f:1b:97:be:63:8b:d0:7c:6e:5a:b7:15:bd: b2:28:a7:0f:7f:98:64:23:11:ba:6d:aa:2a:3e:04: b7:82:b9:41:46:8f:d8:68:d5:03:5f:c5:8e:c7:55: f0:d6:34:c5:f6:b3:cb:59:7e:91:b9:cb:7c:d0:60: a1:9c:66:45:85:de:3f:5b:97:b8:c7:35:05:62:5d: 91:f2:53:2d:ec:b7:53:52:5e:e0:f1:bb:41:15:c2: d2:c6:5f:6c:88:95:db:41:25:ab:49:84:b2:e9:81: e3:f7:87:7a:75:38:23:9a:42:97:40:e3:ae:7b:c4: 02:31:89:d8:32:43:6e:a1:66:9d:a8:ae:b6:08:f7: 2c:60:f5:65:f2:b3:37:9d:d3:16:6b:24:a3:cc:2d: 4b:10:9f:85:55:5d:56:a6:ef:5c:b2:43:4e:8a:0c: e8:7b:33:27:d7:0c:d3:b1:e9:36:63:d2:de:ce:cd: 57:b2:1e:30:cb:94:99:35:0b:ad:6a:d0:0b:f8:3e: 8b:f9:60:21:cc:97:02:08:fc:51:0f:7c:05:75:db: b1:23:91:5f:3e:6e:68:b1:d2:b4:55:f9:69:e5:df: f0:7e:83:10:46:df:68:c2:fe:41:06:8d:36:f9:65: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:B0:C8:10:C4:4C:90:C1:DE:14:45:59:62:10:70:80:FE:CE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f2:09:65:5a:98:ef:72:19:5a:dd:38:5e:23:03:47:2b:6f: 41:94:f3:7a:9e:4f:06:3a:79:80:4d:5d:7a:8a:5b:46:d0:2e: 3b:29:85:c2:38:6c:32:d7:18:b2:65:9b:f2:2e:ba:3a:b7:b4: 50:13:2f:90:ee:41:d8:5e:09:ae:93:dd:1e:86:f3:36:07:f6: 14:52:e9:b8:04:df:82:3a:d0:b5:cd:90:d9:e4:7c:72:37:0f: 67:fd:66:e9:d8:d6:64:4d:11:fe:99:a5:f9:10:ed:4c:3d:cc: 79:25:df:cf:d4:45:0f:8f:b8:2e:37:57:4d:bd:91:ff:28:09: ac:16:c8:44:1a:66:67:9b:29:cf:50:c2:ed:53:c2:12:d1:32: 18:c5:e4:c4:ed:98:22:1c:65:05:ef:0b:83:6a:49:27:bc:0b: 88:39:15:0b:03:0f:f7:3c:32:7e:ce:4b:b7:33:9e:94:3e:d7: a2:3c:93:b2:58:8a:82:d7:29:3e:30:e4:b2:b6:de:44:cf:f1: 0d:9c:b2:8d:57:4e:2e:49:b4:8c:e6:57:8a:b6:be:b7:ea:1a: 50:a9:c8:7f:b5:fc:90:3b:b8:55:db:43:1d:52:60:a4:3a:28: d9:fc:f8:06:c6:9a:6a:6e:c8:1f:af:da:12:1b:3f:1f:45:2f: 74:4e:24:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/lPQykaCYhwJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OGIwYzZmYzItMGU4OS00MWUzLTkxOTEtZmE1NWI4MmNmNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfWduYRGKgi2LWJxosYZeF8bl75ji9B8blq3 Fb2yKKcPf5hkIxG6baoqPgS3grlBRo/YaNUDX8WOx1Xw1jTF9rPLWX6Ruct80GCh nGZFhd4/W5e4xzUFYl2R8lMt7LdTUl7g8btBFcLSxl9siJXbQSWrSYSy6YHj94d6 dTgjmkKXQOOue8QCMYnYMkNuoWadqK62CPcsYPVl8rM3ndMWaySjzC1LEJ+FVV1W pu9cskNOigzoezMn1wzTsek2Y9Lezs1Xsh4wy5SZNQutatAL+D6L+WAhzJcCCPxR D3wFdduxI5FfPm5osdK0Vflp5d/wfoMQRt9owv5BBo02+WV3gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWUsMgQxEyQwd4URVliEHCA/s50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGUwMDcwYjctOGI0My0z MmJlLWJhYmYtNGJkYjU5YzJmYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrNk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPyCWVamO9yGVrdOF4jA0crb0GU83qeTwY6eYBNXXqKW0bQLjsphcI4 bDLXGLJlm/Iuujq3tFATL5DuQdheCa6T3R6G8zYH9hRS6bgE34I60LXNkNnkfHI3 D2f9ZunY1mRNEf6ZpfkQ7Uw9zHkl38/URQ+PuC43V029kf8oCawWyEQaZmebKc9Q wu1TwhLRMhjF5MTtmCIcZQXvC4NqSSe8C4g5FQsDD/c8Mn7OS7cznpQ+16I8k7JY ioLXKT4w5LK23kTP8Q2cso1XTi5JtIzmV4q2vrfqGlCpyH+1/JA7uFXbQx1SYKQ6 KNn8+AbGmmpuyB+v2hIbPx9FL3ROJJc= -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:16 2026 by rpki-client