This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa File: de6a6b49-15fb-3327-a988-9139a73a70b1.roa (raw, json) Hash identifier: iFZyI65DeHylsQzkK5pSxsOdbnj3L4lsfLxQbp0XMVE= Subject key identifier: 62:4A:84:AC:3E:B2:47:CA:82:B6:D1:57:54:F7:18:40:B1:D8:CA:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7340F115CEAA975C25920 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 173.194.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:34:0f:11:5c:ea:a9:75:c2:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=65256245-63a0-4e12-8b70-735f5176c584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:04:13:40:83:66:db:79:ee:d7:56:57:e8: 5b:83:de:41:71:17:a3:9c:a7:3c:3f:ca:9c:94:ea: bb:45:9d:9f:69:50:f1:25:45:2b:75:40:40:7f:cd: 43:b4:1d:93:30:d1:87:8d:5b:29:83:25:e4:8f:6b: a9:ce:53:78:4e:3f:2e:6c:ff:ba:b7:1e:3d:96:05: ae:82:fb:b7:2f:4f:d7:68:2f:a6:0a:0c:3f:7e:c1: 8c:2d:94:53:37:44:af:cc:8e:32:a2:76:be:1b:3c: d1:7a:67:a6:b0:85:92:2d:ea:c3:53:4a:4e:ae:ea: f1:51:5c:ee:b9:c6:33:62:b3:22:32:b3:2d:b9:21: 7e:ca:b9:2a:40:1d:90:0f:42:ef:d7:3a:22:f3:99: 01:bb:bb:44:ce:6e:02:d6:1b:57:86:11:77:53:62: 75:ef:49:99:db:d8:c6:98:59:13:96:27:09:7c:cf: 40:1c:5d:40:b6:90:e2:e1:69:30:1b:49:ab:fd:58: 73:d1:70:9e:1d:e8:ba:73:aa:36:25:c8:d8:c8:09: 5b:69:d8:12:1c:30:64:79:f2:68:95:37:50:f8:a3: 16:e0:aa:6e:78:48:8b:e4:2c:4b:c9:a8:5d:3b:1b: fa:8f:f6:3d:e3:d4:5f:46:7b:52:b0:f6:5a:ef:fd: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4A:84:AC:3E:B2:47:CA:82:B6:D1:57:54:F7:18:40:B1:D8:CA:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f1:10:fb:1c:88:c8:78:13:f9:c3:47:9b:d4:9d:de:ad:12: d1:91:d4:08:76:f6:dd:c0:ec:55:5c:b8:9e:e6:8b:e4:cc:6d: 62:c7:2f:8a:86:7e:b3:76:d0:99:0a:44:ce:6d:f9:46:55:24: 05:98:6c:a3:cc:37:1e:cb:39:fd:ed:3e:b7:26:31:bb:ec:ad: 62:a2:24:84:8d:5c:cc:a8:6f:ac:d7:06:0d:64:ee:e5:3d:8b: d9:18:04:e4:29:a4:cc:d7:30:d0:5b:69:94:f3:49:55:63:e1: 0b:13:14:ea:4b:15:93:0d:c4:cf:56:d8:54:19:ab:0a:3e:21: 2a:61:fb:3d:62:72:e8:31:a6:8e:4a:e7:4c:4d:cf:40:7c:e2: 1f:63:a2:f4:85:50:19:69:19:10:11:4f:c7:4f:51:9e:c6:1a: bd:03:d2:db:e4:71:c4:9d:5c:c1:03:32:80:71:39:b9:f7:ab: 90:b0:40:9a:dc:71:f6:7e:f8:ff:97:14:f9:3e:56:14:c0:ac: 30:1e:79:5a:45:fa:d4:c7:93:10:74:3b:53:fb:ff:94:18:2e: 7e:03:e8:0d:8d:95:2d:6a:f9:c6:35:aa:1c:3c:0d:69:3c:0e: 7b:3d:02:a9:51:ee:a3:ed:1a:e4:5c:02:d0:f2:7b:9b:59:36: e0:53:02:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpzQPEVzqqXXCWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjUyNTYyNDUtNjNhMC00ZTEyLThiNzAtNzM1ZjUxNzZjNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurcEE0CDZtt57tdWV+hbg95BcRejnKc8P8qc lOq7RZ2faVDxJUUrdUBAf81DtB2TMNGHjVspgyXkj2upzlN4Tj8ubP+6tx49lgWu gvu3L0/XaC+mCgw/fsGMLZRTN0SvzI4yona+GzzRememsIWSLerDU0pOrurxUVzu ucYzYrMiMrMtuSF+yrkqQB2QD0Lv1zoi85kBu7tEzm4C1htXhhF3U2J170mZ29jG mFkTlicJfM9AHF1AtpDi4WkwG0mr/Vhz0XCeHei6c6o2JcjYyAlbadgSHDBkefJo lTdQ+KMW4KpueEiL5CxLyahdOxv6j/Y949RfRntSsPZa7/3PQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJKhKw+skfKgrbRV1T3GECx2Mp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGU2YTZiNDktMTVmYi0z MzI3LWE5ODgtOTEzOWE3M2E3MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArxEPsciMh4E/nDR5vUnd6tEtGR1Ah29t3A7FVcuJ7mi+TMbWLHL4qG frN20JkKRM5t+UZVJAWYbKPMNx7LOf3tPrcmMbvsrWKiJISNXMyob6zXBg1k7uU9 i9kYBOQppMzXMNBbaZTzSVVj4QsTFOpLFZMNxM9W2FQZqwo+ISph+z1icugxpo5K 50xNz0B84h9jovSFUBlpGRART8dPUZ7GGr0D0tvkccSdXMEDMoBxObn3q5CwQJrc cfZ++P+XFPk+VhTArDAeeVpF+tTHkxB0O1P7/5QYLn4D6A2NlS1q+cY1qhw8DWk8 Dns9AqlR7qPtGuRcAtDye5tZNuBTAjY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:07 2026 by rpki-client