This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: gqZc78tqhNm5JOAxxgCc+oYxgQ9YgIn7GHpet7wBmGw= Subject key identifier: 93:4F:97:32:9D:9D:EC:75:CA:DE:A5:41:0C:63:D0:43:E7:68:7A:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A741ABB738BDF79C39D640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:41:ab:b7:38:bd:f7:9c:39:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b39039d7-6dd6-4a88-a576-5dd34945a663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:86:e6:34:bd:cd:cb:8d:20:2f:c3:53:b2: 0c:03:20:54:9d:94:5d:ad:4b:31:10:21:71:d0:b5: 8c:cb:52:25:8f:fd:a5:48:8b:06:38:c7:92:c7:e7: 30:98:e9:53:37:38:29:98:86:80:46:ab:9b:3a:28: 73:4a:fb:0e:b5:ee:9e:58:19:49:2e:ff:82:be:d4: 7f:8c:69:9b:ea:29:01:5f:92:06:78:00:75:86:ff: 1b:d5:52:b0:2a:9e:c7:59:0f:69:52:8f:f0:c2:e2: 3a:63:bc:82:0b:60:70:ca:8a:49:6d:07:3a:de:f5: 5d:80:ff:15:c8:af:c5:60:3b:7a:1d:67:a8:cb:0f: c6:c3:f2:7c:dc:22:75:1d:2e:0b:39:9b:fb:3c:c0: 3d:59:6f:d3:be:0c:ba:01:05:19:30:2c:6d:08:18: ff:fd:26:3e:da:bc:03:1d:d4:76:93:c7:d7:a3:ff: 13:49:e7:98:cc:ee:f8:27:ae:e6:55:39:79:ad:47: 06:16:94:37:6e:e0:b1:f8:fd:4f:f4:3d:a8:39:34: 27:4f:39:25:b9:2c:4b:9b:b5:b3:41:8e:06:44:0e: 0e:a7:5c:de:9e:52:2f:a2:0a:58:d2:4d:6a:61:2a: 12:05:8f:d3:a0:16:b9:a7:8c:c4:d2:64:34:1e:fc: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4F:97:32:9D:9D:EC:75:CA:DE:A5:41:0C:63:D0:43:E7:68:7A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:02:39:50:5b:18:66:59:0d:54:8a:1d:bc:c6:17:19:08:51: 93:14:d4:78:3f:d8:3e:ae:00:7a:d9:ac:97:c3:6b:03:bb:53: 91:81:2d:a3:ff:ac:da:5e:f5:14:97:5e:a4:f5:f7:a0:00:11: 88:d6:9d:0e:4a:76:54:0c:04:e9:9d:4a:12:0e:5e:96:f0:d6: c6:d2:64:0c:3a:c0:a7:87:6e:ed:f1:93:89:ff:8c:ce:24:2c: 71:64:ef:e0:06:7b:43:26:90:8d:a5:a9:d2:f2:cb:0c:22:f0: ff:68:f3:19:12:6e:b2:d2:61:d7:92:f7:ff:a7:f7:16:0d:0a: 22:8f:2e:1b:4e:7f:c7:d8:2d:ee:b0:c4:f0:92:ed:d0:6c:94: 34:88:1d:76:93:74:e6:cc:3a:53:67:23:d6:99:13:c7:e0:e5: 06:e4:f0:53:7a:56:65:99:01:cd:2e:3f:0f:82:df:fd:3f:b1: 3b:6e:77:d2:a0:30:38:30:c7:8d:11:c2:56:38:7d:b9:be:f9: c8:ef:00:bf:97:11:7e:7d:49:41:71:cf:0b:b4:74:d4:17:2c: 4e:41:8d:5d:53:4e:eb:14:ea:89:54:6e:30:35:6b:b6:df:29: f1:0a:fa:06:25:1b:f9:8b:56:17:cd:e8:8b:a3:9d:f3:54:fa: 89:8a:a2:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0Grtzi995w51kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YjM5MDM5ZDctNmRkNi00YTg4LWE1NzYtNWRkMzQ5NDVhNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSWG5jS9zcuNIC/DU7IMAyBUnZRdrUsxECFx 0LWMy1Ilj/2lSIsGOMeSx+cwmOlTNzgpmIaARqubOihzSvsOte6eWBlJLv+CvtR/ jGmb6ikBX5IGeAB1hv8b1VKwKp7HWQ9pUo/wwuI6Y7yCC2BwyopJbQc63vVdgP8V yK/FYDt6HWeoyw/Gw/J83CJ1HS4LOZv7PMA9WW/Tvgy6AQUZMCxtCBj//SY+2rwD HdR2k8fXo/8TSeeYzO74J67mVTl5rUcGFpQ3buCx+P1P9D2oOTQnTzkluSxLm7Wz QY4GRA4Op1zenlIvogpY0k1qYSoSBY/ToBa5p4zE0mQ0HvyoxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNPlzKdnex1yt6lQQxj0EPnaHppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHECOVBbGGZZDVSKHbzGFxkIUZMU1Hg/2D6uAHrZrJfDawO7U5GBLaP/ rNpe9RSXXqT196AAEYjWnQ5KdlQMBOmdShIOXpbw1sbSZAw6wKeHbu3xk4n/jM4k LHFk7+AGe0MmkI2lqdLyywwi8P9o8xkSbrLSYdeS9/+n9xYNCiKPLhtOf8fYLe6w xPCS7dBslDSIHXaTdObMOlNnI9aZE8fg5Qbk8FN6VmWZAc0uPw+C3/0/sTtud9Kg MDgwx40RwlY4fbm++cjvAL+XEX59SUFxzwu0dNQXLE5BjV1TTusU6olUbjA1a7bf KfEK+gYlG/mLVhfN6IujnfNU+omKoqQ= -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:08 2026 by rpki-client