This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa File: b9223ba9-c001-3f64-a368-a9d91e996b1c.roa (raw, json) Hash identifier: xkn1Us3DhQAEEBtbG/ISk4PDIKXCcKDjrxl5xX0XtVo= Subject key identifier: DB:22:CE:76:AE:2A:F8:5F:7C:81:8B:3A:C3:62:D2:30:25:16:F6:BC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C417650239A5884521551F200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 15169 IP address blocks: 172.253.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:50:23:9a:58:84:52:15:51:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=dda8f721-aeaf-45d4-88c2-d46d058cfc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:35:08:ed:ee:5f:4a:19:cf:26:25:2c:14: 3a:5c:83:c0:05:30:66:2b:1e:fc:aa:62:d4:3e:42: ea:a6:66:63:83:45:0d:31:0d:90:1e:e4:8a:00:59: 5c:ad:50:71:9b:66:cc:4f:dd:23:c7:80:bb:3d:1d: 22:93:ff:b6:53:b5:99:26:d8:ac:9c:b9:94:78:d0: b9:bb:e5:34:f2:d8:03:a1:2a:f1:31:26:36:fb:d2: 76:8a:46:57:dd:42:b0:b9:1f:48:dc:b6:4a:8b:d1: 41:fb:69:d7:9d:e8:0a:76:43:41:bc:b5:04:54:cc: ad:a0:bf:03:b5:d0:38:3d:be:59:9c:d7:f1:93:e5: 76:9f:af:40:55:9c:aa:70:72:70:64:00:57:11:bd: 24:bc:73:36:2b:0b:0e:77:cf:61:2d:28:cf:b1:d8: 58:6e:5f:42:8a:2e:22:06:ee:82:dc:14:8e:f7:0e: a5:f0:69:7c:91:8a:7d:be:0c:51:d2:b5:94:df:78: 8c:76:25:c5:e7:7f:5c:b4:a5:95:08:cc:0a:03:98: b3:99:7d:9d:b6:6d:3b:8a:cd:11:04:f3:ef:24:ea: 4a:ce:01:4c:f3:aa:8f:69:55:b4:33:21:ee:85:0a: 57:0d:e5:61:e8:93:46:95:e5:06:a7:bd:dc:e9:59: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:22:CE:76:AE:2A:F8:5F:7C:81:8B:3A:C3:62:D2:30:25:16:F6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fe:92:41:76:a6:a1:7d:89:16:6f:da:ba:6e:81:cf:55:09: fb:bb:b3:2c:db:18:d0:5e:17:d4:2c:15:87:a0:89:d7:bd:1b: f2:e9:15:97:a3:e7:b9:f2:da:29:41:1e:9a:5b:5b:d9:2f:fd: f9:3f:42:58:b9:ea:2c:ed:a6:cb:96:07:ef:25:c0:99:cc:57: 2e:ff:94:c5:03:3f:d4:d4:b4:e3:28:5a:b7:6a:58:6a:f6:f6: 4b:7f:a3:67:7a:9e:43:5e:7a:51:aa:b0:b6:1b:3f:e0:8c:cf: 2c:88:da:2c:7e:03:8a:35:ca:45:3a:09:b3:c1:32:35:91:fb: 3a:88:07:a1:70:cd:cd:93:88:01:cd:8e:f4:be:b1:08:28:c3: bc:9c:8a:3d:33:b3:b8:07:59:d7:19:e4:24:2a:19:0a:e3:e4: 26:9c:88:92:85:f5:ce:2a:ef:57:e2:ea:9b:4d:b2:b8:2f:bc: 52:d7:eb:66:44:de:d7:b1:75:2f:7a:ae:e8:21:32:1b:d3:af: 7d:6f:ce:0b:8c:80:88:1d:12:39:2d:b3:bb:45:25:8d:a5:4a: 8d:f1:f2:23:f5:34:e2:e9:bb:3c:4a:16:5d:df:b8:3e:47:e0: 94:32:5d:86:cb:9e:e6:f5:f9:00:9f:24:6b:84:5c:06:ad:60: 3f:c9:e7:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlAjmliEUhVR8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk ZGRhOGY3MjEtYWVhZi00NWQ0LTg4YzItZDQ2ZDA1OGNmYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2s1CO3uX0oZzyYlLBQ6XIPABTBmKx78qmLU PkLqpmZjg0UNMQ2QHuSKAFlcrVBxm2bMT90jx4C7PR0ik/+2U7WZJtisnLmUeNC5 u+U08tgDoSrxMSY2+9J2ikZX3UKwuR9I3LZKi9FB+2nXnegKdkNBvLUEVMytoL8D tdA4Pb5ZnNfxk+V2n69AVZyqcHJwZABXEb0kvHM2KwsOd89hLSjPsdhYbl9Cii4i Bu6C3BSO9w6l8Gl8kYp9vgxR0rWU33iMdiXF539ctKWVCMwKA5izmX2dtm07is0R BPPvJOpKzgFM86qPaVW0MyHuhQpXDeVh6JNGleUGp73c6VkGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsiznauKvhffIGLOsNi0jAlFva8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjkyMjNiYTktYzAwMS0z ZjY0LWEzNjgtYTlkOTFlOTk2YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz+kkF2pqF9iRZv2rpugc9VCfu7syzbGNBeF9QsFYegide9G/LpFZej 57ny2ilBHppbW9kv/fk/Qli56iztpsuWB+8lwJnMVy7/lMUDP9TUtOMoWrdqWGr2 9kt/o2d6nkNeelGqsLYbP+CMzyyI2ix+A4o1ykU6CbPBMjWR+zqIB6Fwzc2TiAHN jvS+sQgow7ycij0zs7gHWdcZ5CQqGQrj5CaciJKF9c4q71fi6ptNsrgvvFLX62ZE 3texdS96rughMhvTr31vzguMgIgdEjkts7tFJY2lSo3x8iP1NOLpuzxKFl3fuD5H 4JQyXYbLnub1+QCfJGuEXAatYD/J5z4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:57 2026 by rpki-client