This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa File: bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa (raw, json) Hash identifier: OF6nDuw/03tJCQWFV5IH0LHknGKvkwgwkqszEkin2dA= Subject key identifier: 0D:0C:A3:75:AE:0C:BB:94:EC:25:A6:0B:AE:A2:B3:8D:9D:13:FF:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7562CE28282158BC0E580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:56:2c:e2:82:82:15:8b:c0:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3b7806b0-0bb1-41e0-89e8-a6a6f5145874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:f4:fa:c7:bb:c7:bc:c4:38:27:ff:e4:6a: 0f:b4:81:be:f7:51:74:dd:78:65:5a:1b:0b:91:d0: 45:6a:27:b9:29:9b:c9:1c:de:24:cb:3c:72:30:47: 0e:40:97:28:11:96:2e:dd:59:aa:48:67:e5:75:5e: 66:71:db:a2:79:d5:8b:83:f9:70:73:fb:ce:5c:25: 0a:9d:80:70:5a:cb:91:c7:19:8b:61:22:52:cc:54: c6:52:32:7a:7c:92:75:d5:66:cb:16:7e:8c:dd:6f: 6b:e3:d6:1e:17:93:9c:67:d2:16:8b:01:16:73:d8: 86:f7:4a:ae:14:78:34:f4:f9:f6:95:45:10:b1:f6: b7:fd:95:58:8d:c6:45:a2:fc:8e:7f:e2:e0:fe:0e: ce:94:c8:2b:6b:2a:8a:14:40:99:f7:4d:61:a2:4b: 85:25:6b:f0:2b:26:d2:7a:db:a0:36:22:13:a1:f8: bc:01:e2:d8:24:cd:02:9d:64:86:0e:98:35:8c:df: 40:ff:b7:dc:b0:a5:89:5c:d9:fd:e7:51:f2:b6:83: 9e:82:f1:d1:12:7f:17:35:96:e6:fd:75:43:a8:db: cf:29:f8:72:d6:4b:6b:a4:20:1d:23:d6:27:2e:80: 13:73:4c:15:11:00:e1:4a:d0:ea:22:ce:1c:2e:cf: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0C:A3:75:AE:0C:BB:94:EC:25:A6:0B:AE:A2:B3:8D:9D:13:FF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdc29a02-dfc8-34ab-8ee9-e131179437e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:95:e8:55:29:76:25:44:91:f5:be:d9:ba:00:be:ab:99:10: 9b:9f:bd:3c:7c:21:0e:99:d7:4d:81:fe:13:57:5d:36:c7:f3: 67:83:f0:05:b2:21:86:d6:09:71:21:c3:71:21:ab:13:4f:11: f4:3e:b1:f3:42:75:9a:b3:b1:fd:76:a8:96:56:1e:9f:65:e2: 5f:60:04:0d:cd:17:32:bb:32:c2:7c:b5:a0:40:a2:db:01:7b: c9:42:63:3e:31:24:29:80:04:87:c1:7d:c8:5e:f1:a9:1f:2e: c2:74:f1:c8:5f:25:c2:bd:ef:c6:5c:10:95:34:b2:3b:b9:1b: 08:64:8b:b4:80:10:40:8d:74:ee:e8:d6:80:f4:64:09:d2:12: fb:cf:ee:37:9f:4c:20:c9:03:d5:e4:d2:05:fd:e6:fc:ce:30: dd:04:76:79:54:dd:26:91:09:77:a9:1d:f6:8c:92:cd:60:4f: 3c:eb:6d:2c:76:38:21:a7:1b:66:95:a4:c2:e0:bd:d0:1f:c7: 02:a9:f8:12:f5:d8:d5:43:43:e1:e6:c2:f8:75:66:6d:c1:35: 20:7f:99:2e:99:84:c8:5d:af:84:a3:3f:6d:68:1b:cc:b6:b3: 91:03:15:1a:88:d9:d6:1f:eb:08:3b:55:eb:82:62:19:12:7d: 64:dc:8e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1Ys4oKCFYvA5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2I3ODA2YjAtMGJiMS00MWUwLTg5ZTgtYTZhNmY1MTQ1ODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL30+se7x7zEOCf/5GoPtIG+91F03XhlWhsL kdBFaie5KZvJHN4kyzxyMEcOQJcoEZYu3VmqSGfldV5mcduiedWLg/lwc/vOXCUK nYBwWsuRxxmLYSJSzFTGUjJ6fJJ11WbLFn6M3W9r49YeF5OcZ9IWiwEWc9iG90qu FHg09Pn2lUUQsfa3/ZVYjcZFovyOf+Lg/g7OlMgrayqKFECZ901hokuFJWvwKybS etugNiITofi8AeLYJM0CnWSGDpg1jN9A/7fcsKWJXNn951HytoOegvHREn8XNZbm /XVDqNvPKfhy1ktrpCAdI9YnLoATc0wVEQDhStDqIs4cLs9k0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0Mo3WuDLuU7CWmC66is42dE/+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmRjMjlhMDItZGZjOC0z NGFiLThlZTktZTEzMTE3OTQzN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+V6FUpdiVEkfW+2boAvquZEJufvTx8IQ6Z102B/hNXXTbH82eD8AWy IYbWCXEhw3EhqxNPEfQ+sfNCdZqzsf12qJZWHp9l4l9gBA3NFzK7MsJ8taBAotsB e8lCYz4xJCmABIfBfche8akfLsJ08chfJcK978ZcEJU0sju5Gwhki7SAEECNdO7o 1oD0ZAnSEvvP7jefTCDJA9Xk0gX95vzOMN0EdnlU3SaRCXepHfaMks1gTzzrbSx2 OCGnG2aVpMLgvdAfxwKp+BL12NVDQ+Hmwvh1Zm3BNSB/mS6ZhMhdr4SjP21oG8y2 s5EDFRqI2dYf6wg7VeuCYhkSfWTcjnk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:04 2026 by rpki-client