This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa File: c87c6bc1-87e9-3fd3-9602-ac677580c521.roa (raw, json) Hash identifier: 08Xlw9BytExhJR8eI59xpKj+z6sPsW0ZgeU9urNb9aw= Subject key identifier: C9:5F:06:DE:A6:90:B1:5C:47:6C:7B:E0:E4:82:2B:AC:CE:D8:C7:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A746ABA0EA45FBE5743E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:46:ab:a0:ea:45:fb:e5:74:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c0bde0d2-542b-415d-967d-6d37dcc5a6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:63:0f:69:74:4d:f2:35:13:d8:31:2e:ee: 5d:7f:36:12:37:9c:ed:b7:b2:20:61:ad:27:0c:b5: 88:14:ac:13:8c:27:75:37:62:fb:6d:75:62:4b:74: 26:9a:0c:0b:88:90:b8:17:8b:33:c8:5f:1e:58:86: df:52:28:23:7a:5e:75:57:cb:f6:55:d2:17:8d:88: 35:c4:3c:d7:44:cf:c9:4a:ff:4d:9f:06:b7:a3:9a: a0:5e:21:77:62:05:9e:75:8e:12:a8:ad:e8:79:65: 2e:d6:d1:cc:09:ef:ed:59:c1:be:81:08:dd:73:58: fb:b4:8a:10:c5:3c:88:70:cc:f4:c9:f2:b6:a3:d2: 62:d4:1b:a5:6a:ac:e9:77:1b:02:5c:d0:e2:03:16: d8:aa:9c:15:71:18:b1:73:64:79:2e:b5:b1:bd:92: d6:26:e9:84:86:ac:86:c3:5e:21:c7:99:41:50:d1: 91:9b:1a:43:19:d7:ec:58:98:eb:f8:58:55:e5:a5: d5:4f:46:c0:7a:9e:96:b1:8c:2d:4b:b2:18:cf:42: bf:f4:ba:23:f1:74:d9:c2:05:56:38:a4:09:7a:ce: 0a:68:95:cc:1e:1d:aa:27:0d:a2:98:08:54:4c:c4: 7c:0c:52:cf:58:89:cc:fb:c8:29:39:4e:31:38:6c: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:06:DE:A6:90:B1:5C:47:6C:7B:E0:E4:82:2B:AC:CE:D8:C7:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:be:ac:d3:41:c7:b2:80:49:cc:01:ec:08:01:4c:1f:95:5f: 46:9d:d0:4f:81:79:66:2b:5d:98:9c:1b:95:84:2c:e7:16:87: e4:96:76:b7:e1:1d:21:9e:fd:a6:18:19:26:79:ea:e5:11:4d: 4d:04:42:c3:5c:2f:ee:f9:ed:37:1c:9e:5b:7a:c6:84:aa:45: a0:5e:5d:28:01:40:01:51:e8:a0:47:21:53:58:e9:b7:06:33: b8:6b:64:df:5d:43:56:5f:80:d7:f5:dc:de:9b:75:cf:b9:82: c2:a8:9e:73:f9:3b:db:4f:df:6f:b6:74:6c:4b:7b:56:1d:8b: 82:f3:4d:19:6e:2b:43:5e:e4:d4:a8:0b:46:1c:d8:44:6e:ef: 48:5f:fa:a8:6a:35:66:5b:df:aa:05:cb:02:81:51:8f:5c:08: b1:21:17:c7:02:e8:00:be:41:ce:5b:e4:0a:e9:2b:f5:a9:59: cb:5d:0e:fc:4c:f1:52:4a:15:e7:6c:96:8e:ff:01:53:2c:25: 86:4f:14:41:56:71:b1:45:23:9a:08:e2:11:bd:e6:42:bc:4b: 4f:69:ea:ff:ca:48:d6:56:11:9b:99:1c:49:67:52:f2:0d:85: cc:12:d8:c7:0f:14:35:80:3c:ba:28:cc:81:df:de:ca:53:15: 8b:dc:b7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0aroOpF++V0PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzBiZGUwZDItNTQyYi00MTVkLTk2N2QtNmQzN2RjYzVhNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPBjD2l0TfI1E9gxLu5dfzYSN5ztt7IgYa0n DLWIFKwTjCd1N2L7bXViS3QmmgwLiJC4F4szyF8eWIbfUigjel51V8v2VdIXjYg1 xDzXRM/JSv9Nnwa3o5qgXiF3YgWedY4SqK3oeWUu1tHMCe/tWcG+gQjdc1j7tIoQ xTyIcMz0yfK2o9Ji1BulaqzpdxsCXNDiAxbYqpwVcRixc2R5LrWxvZLWJumEhqyG w14hx5lBUNGRmxpDGdfsWJjr+FhV5aXVT0bAep6WsYwtS7IYz0K/9Loj8XTZwgVW OKQJes4KaJXMHh2qJw2imAhUTMR8DFLPWInM+8gpOU4xOGxqxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlfBt6mkLFcR2x74OSCK6zO2MfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzg3YzZiYzEtODdlOS0z ZmQzLTk2MDItYWM2Nzc1ODBjNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK+rNNBx7KAScwB7AgBTB+VX0ad0E+BeWYrXZicG5WELOcWh+SWdrfh HSGe/aYYGSZ56uURTU0EQsNcL+757Tccnlt6xoSqRaBeXSgBQAFR6KBHIVNY6bcG M7hrZN9dQ1ZfgNf13N6bdc+5gsKonnP5O9tP32+2dGxLe1Ydi4LzTRluK0Ne5NSo C0Yc2ERu70hf+qhqNWZb36oFywKBUY9cCLEhF8cC6AC+Qc5b5ArpK/WpWctdDvxM 8VJKFedslo7/AVMsJYZPFEFWcbFFI5oI4hG95kK8S09p6v/KSNZWEZuZHElnUvIN hcwS2McPFDWAPLoozIHf3spTFYvct/A= -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:24 2026 by rpki-client