This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: f/ebrA6l6m3QuQdN5Fsmewu1WaQ4Az5vFgXhblHY3kM= Subject key identifier: 46:B0:26:1A:04:C8:B4:32:18:F8:01:67:AA:75:08:0F:F0:D5:D3:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7573AD6941C013CA26480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:57:3a:d6:94:1c:01:3c:a2:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=fe86e58b-0479-4a3f-b302-dbca5d183615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:18:9d:11:96:13:23:bd:5e:78:8b:28:5e: 14:72:c6:d5:b5:00:7b:7c:81:49:ae:ad:d6:bc:15: 78:9e:af:5d:ca:e4:de:43:26:99:0b:54:0e:71:55: ac:42:3d:72:11:c6:3d:fe:24:1f:7e:a7:b9:f2:16: 8c:2d:40:81:63:2f:b0:5d:80:f9:7f:ed:17:35:6a: a6:a7:b7:e5:7b:60:0b:b7:ca:6d:64:da:e6:9c:f8: 76:6a:89:71:80:eb:d4:ec:e6:3e:df:a8:04:d2:26: 6f:4c:1c:b6:6f:de:a9:32:e9:fb:31:1b:6d:6a:d1: 8d:e4:fb:69:3e:24:7b:98:9a:b6:c2:09:8b:d0:38: 2f:fe:3f:93:24:08:93:40:42:f9:a7:6b:93:36:9f: 43:7f:d8:3e:3b:84:68:c3:cd:6c:1d:10:17:9f:87: 4c:e3:ff:40:48:b6:ed:7b:d9:10:0e:15:22:01:91: 32:bd:57:eb:9d:f9:cc:8d:13:79:35:10:84:1d:19: 48:3e:67:57:31:eb:c1:19:0f:77:ac:34:cc:1f:00: 46:e8:6b:d7:32:bf:53:f0:b0:86:68:86:b5:e1:a2: 07:ad:0c:10:13:df:f4:0d:05:c3:f3:34:60:bd:92: b3:a8:7b:70:67:9a:ce:6c:bf:08:7e:99:90:5f:cf: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:26:1A:04:C8:B4:32:18:F8:01:67:AA:75:08:0F:F0:D5:D3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d2:62:97:34:ff:20:e3:6b:e5:d1:3f:06:1b:c8:76:d8:7e: b8:2d:ba:30:b5:f0:a8:60:a3:6b:c2:50:9b:41:97:bc:55:09: d4:51:02:d5:72:36:52:15:6f:63:b1:1d:57:ec:d6:f4:fe:19: b5:85:99:bb:88:c0:2f:f7:99:bd:bd:bc:21:08:53:b1:b8:cb: 98:d7:77:14:3e:d4:f1:84:df:66:d3:61:62:ce:9d:eb:e8:81: 97:01:87:77:da:79:5c:38:c9:00:eb:f1:33:7a:f2:4d:83:97: 93:50:54:33:80:c2:46:16:af:6f:9c:3b:64:1c:1e:8f:13:56: c5:e3:f2:34:6e:47:38:d7:cc:ac:30:f7:89:d8:02:f0:3c:b1: 6e:21:68:1a:51:b4:87:c0:48:5c:de:d5:0f:e1:87:a1:3d:8c: fd:42:b8:0d:8b:5e:f3:3e:f3:5f:f7:94:d5:c9:c2:14:9d:e4: 5d:78:28:21:6b:3b:68:6d:22:42:a2:8e:48:d9:80:67:d8:0a: b4:60:b4:6e:bf:25:7e:26:23:1c:6f:4d:16:45:3b:f5:20:6e: 8e:8e:1a:57:4e:b8:6c:d4:e5:d8:41:49:95:c2:54:b6:81:3c: eb:0f:87:80:64:7e:9c:41:56:5a:48:cc:c3:20:16:af:33:9c: e7:7a:7a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1c61pQcATyiZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZmU4NmU1OGItMDQ3OS00YTNmLWIzMDItZGJjYTVkMTgzNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs90YnRGWEyO9XniLKF4UcsbVtQB7fIFJrq3W vBV4nq9dyuTeQyaZC1QOcVWsQj1yEcY9/iQffqe58haMLUCBYy+wXYD5f+0XNWqm p7fle2ALt8ptZNrmnPh2aolxgOvU7OY+36gE0iZvTBy2b96pMun7MRttatGN5Ptp PiR7mJq2wgmL0Dgv/j+TJAiTQEL5p2uTNp9Df9g+O4Row81sHRAXn4dM4/9ASLbt e9kQDhUiAZEyvVfrnfnMjRN5NRCEHRlIPmdXMevBGQ93rDTMHwBG6GvXMr9T8LCG aIa14aIHrQwQE9/0DQXD8zRgvZKzqHtwZ5rObL8IfpmQX88v0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEawJhoEyLQyGPgBZ6p1CA/w1dOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3SYpc0/yDja+XRPwYbyHbYfrgtujC18Khgo2vCUJtBl7xVCdRRAtVy NlIVb2OxHVfs1vT+GbWFmbuIwC/3mb29vCEIU7G4y5jXdxQ+1PGE32bTYWLOnevo gZcBh3faeVw4yQDr8TN68k2Dl5NQVDOAwkYWr2+cO2QcHo8TVsXj8jRuRzjXzKww 94nYAvA8sW4haBpRtIfASFze1Q/hh6E9jP1CuA2LXvM+81/3lNXJwhSd5F14KCFr O2htIkKijkjZgGfYCrRgtG6/JX4mIxxvTRZFO/Ugbo6OGldOuGzU5dhBSZXCVLaB POsPh4BkfpxBVlpIzMMgFq8znOd6ei4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:45 2026 by rpki-client