This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac78b85f-2533-39cc-a4c6-0e6e59274549.roa
File: ac78b85f-2533-39cc-a4c6-0e6e59274549.roa (raw, json)
Hash identifier: UQ/Rpvb/XWlnFpJxBvA+SXh5t0aACFaoviWGsk899Fs=
Subject key identifier: 12:F8:3C:AD:2F:8D:93:C1:D5:59:29:4C:C2:81:0C:1C:F9:CA:B4:4C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C45A744C6737E41790F547400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac78b85f-2533-39cc-a4c6-0e6e59274549.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 15169
IP address blocks: 142.251.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:44:c6:73:7e:41:79:0f:54:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=9eb3e71c-b95e-4a90-936c-aafb3d146aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:69:fc:07:fa:20:76:01:b9:a8:37:e9:57:
3b:1d:86:77:0e:d2:a0:85:e4:f0:d4:dd:91:c0:d9:
7b:6f:47:00:e2:f8:74:15:7e:41:6b:40:e6:cd:68:
9f:eb:b6:ef:90:97:8a:ea:c1:0c:67:7d:5a:cb:19:
76:e3:6f:39:30:e5:ea:1e:72:11:92:2b:2e:37:ec:
d3:8f:9b:b7:2a:64:a4:c5:4c:ed:a2:3f:d1:2b:22:
95:be:af:1c:49:9d:1c:d7:cf:b6:75:fb:34:8d:ba:
b8:ba:41:e8:a1:02:ed:18:6c:20:0c:0d:5a:7d:fc:
5b:dc:16:19:43:71:06:05:27:8e:f0:0e:3b:3b:de:
df:0b:1b:67:06:49:6e:d7:12:b4:30:71:dd:36:d3:
06:c4:53:83:e4:9f:d6:1c:9b:ca:94:f7:ad:1c:d0:
e8:3c:0c:b6:f1:f8:a8:16:e6:c5:b5:7a:57:97:16:
0c:d7:14:9d:4b:16:b7:9e:ea:16:11:40:37:88:36:
d4:a0:2c:94:59:82:96:7c:0c:db:ed:cd:a1:d4:ea:
36:e6:27:12:56:f8:5d:cd:bf:0c:a1:1e:4b:3f:cc:
f4:e0:2d:e7:c2:2a:e6:4d:b7:6b:5b:2d:b0:00:5d:
c4:21:0f:37:02:f1:1a:2e:63:f9:71:cb:0c:ac:55:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:3C:AD:2F:8D:93:C1:D5:59:29:4C:C2:81:0C:1C:F9:CA:B4:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac78b85f-2533-39cc-a4c6-0e6e59274549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:7a:9f:3e:1a:e0:5d:d4:69:f5:48:c3:fd:a7:e0:4d:79:a8:
40:a5:30:98:0a:21:29:b0:9c:14:74:38:7b:a0:25:c0:57:80:
d1:f9:56:94:a6:48:c7:9f:2d:d3:7c:ea:02:cb:47:48:ea:7b:
68:47:7d:da:56:2f:b9:8d:de:39:9b:48:80:fc:e3:a0:74:d9:
2b:77:15:a4:f4:08:d2:47:6c:8e:5c:87:c6:8b:08:de:9d:e8:
a8:c5:80:05:96:4f:ae:f7:6f:b0:38:b1:62:72:43:6b:60:f6:
29:fd:6f:ed:7e:8c:2c:a9:76:f1:d5:1a:0f:0a:ed:c7:ef:a2:
2d:6a:87:89:2e:be:f7:cb:af:cc:91:15:84:b6:6e:4d:b8:eb:
b6:90:71:df:59:3c:3e:52:af:d1:c7:b0:26:e7:6a:b5:73:d6:
92:f1:7c:ff:5a:56:89:2d:77:2a:38:f3:3e:0f:72:b3:d5:6f:
e3:65:73:3f:7c:2b:00:c0:8d:20:c5:eb:24:c6:95:bb:44:33:
de:2c:eb:86:c3:37:49:03:e6:bc:9d:17:30:96:68:39:65:ff:
e9:3c:ad:2f:58:99:fc:f9:4f:29:0f:83:0e:27:56:c7:ce:db:
a9:41:be:64:e2:0e:5c:61:96:06:36:4c:fc:bd:69:8f:02:de:
6e:60:43:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0TGc35BeQ9UdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
OWViM2U3MWMtYjk1ZS00YTkwLTkzNmMtYWFmYjNkMTQ2YWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLRp/Af6IHYBuag36Vc7HYZ3DtKgheTw1N2R
wNl7b0cA4vh0FX5Ba0DmzWif67bvkJeK6sEMZ31ayxl24285MOXqHnIRkisuN+zT
j5u3KmSkxUztoj/RKyKVvq8cSZ0c18+2dfs0jbq4ukHooQLtGGwgDA1affxb3BYZ
Q3EGBSeO8A47O97fCxtnBklu1xK0MHHdNtMGxFOD5J/WHJvKlPetHNDoPAy28fio
FubFtXpXlxYM1xSdSxa3nuoWEUA3iDbUoCyUWYKWfAzb7c2h1Oo25icSVvhdzb8M
oR5LP8z04C3nwirmTbdrWy2wAF3EIQ83AvEaLmP5ccsMrFVvqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBL4PK0vjZPB1VkpTMKBDBz5yrRMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWM3OGI4NWYtMjUzMy0z
OWNjLWE0YzYtMGU2ZTU5Mjc0NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvutMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJd6nz4a4F3UafVIw/2n4E15qEClMJgKISmwnBR0OHugJcBXgNH5VpSm
SMefLdN86gLLR0jqe2hHfdpWL7mN3jmbSID846B02St3FaT0CNJHbI5ch8aLCN6d
6KjFgAWWT673b7A4sWJyQ2tg9in9b+1+jCypdvHVGg8K7cfvoi1qh4kuvvfLr8yR
FYS2bk2467aQcd9ZPD5Sr9HHsCbnarVz1pLxfP9aVoktdyo48z4PcrPVb+Nlcz98
KwDAjSDF6yTGlbtEM94s64bDN0kD5rydFzCWaDll/+k8rS9Ymfz5TykPgw4nVsfO
26lBvmTiDlxhlgY2TPy9aY8C3m5gQ5k=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:14 2026 by rpki-client