This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa File: a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa (raw, json) Hash identifier: JaZbma0UdfyoQmCmKI2HLbHAbffjzSbEZJFrQgdGS+U= Subject key identifier: C6:33:2A:B6:0D:34:AD:F7:85:8B:C4:2F:C9:97:0C:D0:39:3D:2A:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A73C9FE67297CCC8E0F980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 173.194.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:3c:9f:e6:72:97:cc:c8:e0:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=29f2c24e-c36f-47f0-bbfb-d1cdb4d66e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:6f:17:8d:c5:9e:f0:d6:f8:e6:11:d8:b4: 97:8c:88:55:a8:d4:82:23:38:dc:c0:b1:30:b6:fd: 5b:6e:ec:12:34:70:31:7e:6f:92:de:a8:94:4b:36: e2:d0:c6:5e:0d:d8:c6:6a:c4:8f:4d:bf:d4:6c:30: c2:fc:2f:8b:b9:e0:ca:94:c4:b1:4c:0a:ce:6d:00: ad:f5:8a:10:ff:46:dd:a6:71:40:b9:74:b8:d9:d1: df:14:96:1a:3c:97:c6:c6:29:78:16:6a:31:f4:b2: cf:00:9e:ff:ca:d7:77:ef:3f:ef:f2:07:85:fb:95: 65:62:39:54:87:51:59:d6:70:f7:7f:66:ab:7e:30: b5:30:fa:e3:54:62:16:ad:66:4b:a4:0e:61:31:8a: 59:01:71:44:66:b1:97:7e:e2:14:d6:58:e0:c1:fc: 56:9b:88:eb:9b:ce:ba:da:63:76:53:d6:e6:c8:df: e6:78:45:d8:55:83:9a:c8:70:77:06:d5:07:4d:84: 85:07:bc:0e:bb:99:f7:00:2f:75:6a:d9:7b:9c:99: 87:a5:80:7a:1c:f5:b9:fc:8a:b0:34:81:15:aa:82: 45:76:23:8a:17:71:c2:ba:f9:cb:15:bd:1f:c3:97: 5f:d0:43:90:4b:08:27:2e:0f:c5:28:1a:02:87:9e: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:33:2A:B6:0D:34:AD:F7:85:8B:C4:2F:C9:97:0C:D0:39:3D:2A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5c:34:5a:bb:5e:cf:a5:83:42:cd:4a:0b:8d:2c:8b:15:17: 1a:1c:fe:d7:66:59:5f:7c:6f:ff:36:15:84:85:82:d7:2d:d4: cd:26:63:82:4c:07:00:cd:07:9a:d3:5f:39:7d:c0:9f:86:06: 10:48:a0:ba:9b:52:07:cf:02:ee:b6:1a:5d:a2:0e:8b:11:03: d1:4d:d9:5c:ea:39:2c:65:88:52:bf:33:b3:c8:e0:9e:54:5a: af:f4:55:59:11:24:ff:7a:5b:7f:ee:8c:15:fc:93:0c:75:16: 45:e4:3c:c1:22:c5:bb:14:e9:87:fe:c3:d3:df:48:33:c8:61: 53:82:8c:c4:8a:6a:28:44:26:4e:74:c3:7b:03:35:ff:79:87: 0f:73:a1:cc:70:eb:6d:e0:03:41:1b:3d:55:7a:21:8a:5d:55: 95:99:96:bb:bb:08:9c:62:1b:b0:22:f7:19:35:7a:4c:74:90: 84:b4:45:5f:35:cd:77:77:68:6c:28:af:74:ad:20:c6:e2:f6: 6c:5a:c9:a8:20:0b:4c:89:44:73:e7:32:6c:b1:02:76:51:8d: 16:cd:79:6f:43:63:e2:5e:32:2d:d9:c9:04:a1:b5:15:a7:b3: ca:28:4a:cb:90:0e:b3:70:35:e6:25:b0:00:8a:53:31:00:65: be:cb:5c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpzyf5nKXzMjg+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MjlmMmMyNGUtYzM2Zi00N2YwLWJiZmItZDFjZGI0ZDY2ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUhvF43FnvDW+OYR2LSXjIhVqNSCIzjcwLEw tv1bbuwSNHAxfm+S3qiUSzbi0MZeDdjGasSPTb/UbDDC/C+LueDKlMSxTArObQCt 9YoQ/0bdpnFAuXS42dHfFJYaPJfGxil4Fmox9LLPAJ7/ytd37z/v8geF+5VlYjlU h1FZ1nD3f2arfjC1MPrjVGIWrWZLpA5hMYpZAXFEZrGXfuIU1ljgwfxWm4jrm866 2mN2U9bmyN/meEXYVYOayHB3BtUHTYSFB7wOu5n3AC91atl7nJmHpYB6HPW5/Iqw NIEVqoJFdiOKF3HCuvnLFb0fw5df0EOQSwgnLg/FKBoCh56ENQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYzKrYNNK33hYvEL8mXDNA5PSpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTAwYmQxYTctMDJlYS0z ZTcxLWFlYWMtZjllYjZjMTU1OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVcNFq7Xs+lg0LNSguNLIsVFxoc/tdmWV98b/82FYSFgtct1M0mY4JM BwDNB5rTXzl9wJ+GBhBIoLqbUgfPAu62Gl2iDosRA9FN2VzqOSxliFK/M7PI4J5U Wq/0VVkRJP96W3/ujBX8kwx1FkXkPMEixbsU6Yf+w9PfSDPIYVOCjMSKaihEJk50 w3sDNf95hw9zocxw623gA0EbPVV6IYpdVZWZlru7CJxiG7Ai9xk1ekx0kIS0RV81 zXd3aGwor3StIMbi9mxayaggC0yJRHPnMmyxAnZRjRbNeW9DY+JeMi3ZyQShtRWn s8ooSsuQDrNwNeYlsACKUzEAZb7LXNA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:31:19 2026 by rpki-client