This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa File: d5fd37bd-341a-30b3-a5bf-c402e4909202.roa (raw, json) Hash identifier: yJhrbkCxESob846TMDB9vQ6ZZw0nngLdx9IUi3t0bXU= Subject key identifier: F7:0F:6A:FD:33:67:D0:12:13:09:6F:D5:25:4A:F6:FB:C5:F1:F8:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7FC507BED84962A444B90 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:fc:50:7b:ed:84:96:2a:44:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=5cfab4b9-e69a-4d6f-823e-7443f863659d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:27:8d:49:b8:2f:bd:c1:6f:32:04:4a:a8: bb:be:db:df:dc:02:70:90:f6:eb:8e:7d:c6:8f:77: 35:bf:3c:47:bb:c4:2b:16:d2:e4:ea:e7:91:53:bd: 0f:eb:e9:3b:82:16:84:58:d7:96:83:c5:80:28:09: a0:e0:e7:57:46:72:7f:91:f4:67:cc:f9:a7:9d:04: 23:a4:00:24:bb:22:06:4f:d2:5a:12:45:89:29:14: 8c:45:9b:df:50:2b:a6:a4:88:c5:8a:98:15:1d:12: 72:4a:e2:55:4d:ec:bd:6d:52:be:2e:e7:1c:58:90: cc:1a:c7:96:3b:e0:af:04:51:79:6e:42:bf:98:43: 53:01:96:ec:54:e2:df:87:c6:25:87:54:8c:7b:88: 17:a7:33:6a:1b:a5:1d:8a:cc:3f:ae:c9:3d:5b:e8: 39:28:de:92:b0:8f:bc:1f:a7:76:f7:7f:a1:45:a2: 81:71:dc:36:e8:a8:84:29:9e:ea:6a:7e:80:26:a0: 09:94:ab:52:9e:2b:75:dc:e6:be:69:58:b4:9d:98: d7:be:a2:82:79:f4:c5:85:8a:a6:dc:43:71:1c:6d: b8:4b:30:c7:fb:fd:08:b1:61:b2:c7:fb:93:85:bf: fa:6b:a4:5e:48:20:e4:b9:15:1f:34:22:a9:20:96: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0F:6A:FD:33:67:D0:12:13:09:6F:D5:25:4A:F6:FB:C5:F1:F8:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c1:37:33:f4:92:ab:b2:66:74:53:9d:74:3d:c9:3d:91:16: e7:3a:28:7e:67:42:66:50:ae:69:18:a9:87:93:a1:b5:69:d1: 42:15:fd:08:28:43:68:08:d0:3e:22:b1:6b:30:5f:cc:e6:6e: 03:a3:d4:72:ae:8a:27:cc:df:9e:3b:b9:8b:4f:ee:67:80:ce: 5d:8c:54:35:71:14:7e:77:94:f2:80:03:89:f9:7e:db:1d:5d: 9a:80:36:43:31:1c:ee:53:f8:f2:68:b9:d5:b6:75:20:64:6c: 8e:fc:a1:23:60:e0:33:d9:11:81:f3:00:53:6b:f1:8a:1f:db: 52:7d:66:ce:37:09:8c:95:58:5e:62:85:1c:ab:0d:90:b9:96: 19:a9:9d:30:84:95:c6:97:fe:56:40:bd:75:48:91:90:e5:1d: a6:e8:69:41:68:06:4a:b4:d7:dc:5f:14:08:88:28:7d:66:d2: 2c:6f:d8:5e:12:17:1e:a1:83:c2:b9:db:45:89:82:8f:ae:6f: ca:a8:f2:58:02:e2:80:f9:db:72:e0:e7:2a:ad:6a:0b:3e:d2: f1:5e:d0:c2:56:13:f5:92:69:70:3b:c5:0a:6c:3f:9e:7c:a2: d0:c1:e0:99:74:4c:02:dc:29:01:1d:f9:a2:c4:b6:b6:27:5b: cf:06:a2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/xQe+2ElipES5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NWNmYWI0YjktZTY5YS00ZDZmLTgyM2UtNzQ0M2Y4NjM2NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF0njUm4L73BbzIESqi7vtvf3AJwkPbrjn3G j3c1vzxHu8QrFtLk6ueRU70P6+k7ghaEWNeWg8WAKAmg4OdXRnJ/kfRnzPmnnQQj pAAkuyIGT9JaEkWJKRSMRZvfUCumpIjFipgVHRJySuJVTey9bVK+LuccWJDMGseW O+CvBFF5bkK/mENTAZbsVOLfh8Ylh1SMe4gXpzNqG6Udisw/rsk9W+g5KN6SsI+8 H6d293+hRaKBcdw26KiEKZ7qan6AJqAJlKtSnit13Oa+aVi0nZjXvqKCefTFhYqm 3ENxHG24SzDH+/0IsWGyx/uThb/6a6ReSCDkuRUfNCKpIJb3wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcPav0zZ9ASEwlv1SVK9vvF8fhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVmZDM3YmQtMzQxYS0z MGIzLWE1YmYtYzQwMmU0OTA5MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzBNzP0kquyZnRTnXQ9yT2RFuc6KH5nQmZQrmkYqYeTobVp0UIV/Qgo Q2gI0D4isWswX8zmbgOj1HKuiifM3547uYtP7meAzl2MVDVxFH53lPKAA4n5ftsd XZqANkMxHO5T+PJoudW2dSBkbI78oSNg4DPZEYHzAFNr8Yof21J9Zs43CYyVWF5i hRyrDZC5lhmpnTCElcaX/lZAvXVIkZDlHaboaUFoBkq019xfFAiIKH1m0ixv2F4S Fx6hg8K520WJgo+ub8qo8lgC4oD523Lg5yqtags+0vFe0MJWE/WSaXA7xQpsP558 otDB4Jl0TALcKQEd+aLEtrYnW88Gosg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:22 2026 by rpki-client