This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa File: f0c9577f-c221-3ac5-ab74-db09890f238d.roa (raw, json) Hash identifier: SErNY0hRQhxWvOyaakwT2amSC86ZN52fLRTy9M9gUms= Subject key identifier: E8:BE:64:CA:71:22:14:08:D1:DB:B4:DA:45:DD:40:E7:C8:A5:63:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7FF783A9D2611C58DDC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:ff:78:3a:9d:26:11:c5:8d:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=40f7d0a8-0096-47c0-919d-db1a4c8c0ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:66:13:f8:80:59:e7:c9:8c:b1:ef:86:bd: 8a:62:08:06:a4:9f:9a:5a:ad:99:2a:e1:fb:36:75: 64:be:0c:3b:20:14:7e:d9:81:6a:f5:af:3d:05:29: b7:9d:da:af:2e:07:3e:aa:55:03:a0:9e:16:8a:bb: 14:b3:39:f2:89:59:da:25:37:0e:63:e3:3b:e9:d5: 77:cd:ec:7a:19:a6:79:2f:61:eb:39:f8:66:fd:dd: 2f:83:b6:60:13:46:5c:e0:bb:3b:af:fa:6f:4f:da: 1b:ab:26:75:39:0e:96:d8:fa:55:b2:b7:61:b5:c3: c3:f4:cc:38:70:97:31:57:0c:c5:c2:7a:b5:74:dc: 3b:87:df:da:a7:74:71:25:22:1d:ff:11:59:a7:e0: ed:8a:f7:41:1f:75:60:9b:b2:bd:1d:20:78:da:fb: 91:79:59:f0:d1:e6:d9:c8:fd:cd:e1:7d:92:2d:0c: 09:fa:17:e9:b5:74:ed:fb:7f:c4:2f:74:82:ee:51: 60:f7:9c:ea:a9:ac:98:63:8f:ae:f2:a8:76:dc:a9: 6c:40:76:2f:34:54:3f:95:c5:46:82:e8:d9:d2:0f: df:02:8f:c0:d7:14:1c:86:e6:be:06:62:f6:ad:95: 1c:29:90:3c:71:bb:85:4d:a4:a8:3a:e7:68:e8:37: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:64:CA:71:22:14:08:D1:DB:B4:DA:45:DD:40:E7:C8:A5:63:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:db:71:df:ed:dd:b1:37:b0:64:75:c1:49:5c:0c:80:a2:eb: 9f:69:bc:ec:48:47:a9:35:8a:48:e3:41:19:32:a4:6a:47:a7: 60:fa:91:d5:dc:7e:5b:06:a5:4f:d9:89:8f:30:28:b3:2d:6d: 1e:13:23:e9:9c:b0:12:f5:c7:f0:0d:65:e3:22:1e:b3:93:2b: cf:c9:a2:38:07:b8:04:8d:8a:97:af:07:92:70:8b:62:0a:e7: 5b:99:10:ae:36:cc:ac:f6:e3:32:48:2b:c7:15:12:b3:3e:e5: 95:83:4f:2a:fc:08:89:4e:8d:dc:59:e5:95:29:fc:d0:5e:18: 17:a9:41:3b:d0:f3:5c:22:aa:77:b2:76:1c:30:0f:a6:5e:03: 75:4c:c2:ed:a9:90:9e:e8:4f:f9:a2:83:8b:11:3c:43:e8:ed: de:32:b5:4d:db:9c:81:68:8c:be:f9:a8:aa:68:47:ef:5c:b9: 3f:04:cd:33:ba:a8:8a:ee:5a:fd:a9:bb:fb:b3:4c:e9:cd:2e: 15:1b:71:69:ad:a1:09:f6:a5:08:d3:62:c2:06:4c:3e:49:50: f8:04:65:26:c6:e0:15:0a:39:7b:06:a0:7e:ae:70:a5:12:05: 0e:c8:41:10:32:54:ad:fb:10:4a:cf:0b:e6:62:94:c9:fb:ac: 53:c6:13:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/94Op0mEcWN3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NDBmN2QwYTgtMDA5Ni00N2MwLTkxOWQtZGIxYTRjOGMwYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsJmE/iAWefJjLHvhr2KYggGpJ+aWq2ZKuH7 NnVkvgw7IBR+2YFq9a89BSm3ndqvLgc+qlUDoJ4WirsUsznyiVnaJTcOY+M76dV3 zex6GaZ5L2HrOfhm/d0vg7ZgE0Zc4Ls7r/pvT9obqyZ1OQ6W2PpVsrdhtcPD9Mw4 cJcxVwzFwnq1dNw7h9/ap3RxJSId/xFZp+DtivdBH3Vgm7K9HSB42vuReVnw0ebZ yP3N4X2SLQwJ+hfptXTt+3/EL3SC7lFg95zqqayYY4+u8qh23KlsQHYvNFQ/lcVG gujZ0g/fAo/A1xQchua+BmL2rZUcKZA8cbuFTaSoOudo6Df4LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi+ZMpxIhQI0du02kXdQOfIpWM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjBjOTU3N2YtYzIyMS0z YWM1LWFiNzQtZGIwOTg5MGYyMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTbcd/t3bE3sGR1wUlcDICi659pvOxIR6k1ikjjQRkypGpHp2D6kdXc flsGpU/ZiY8wKLMtbR4TI+mcsBL1x/ANZeMiHrOTK8/JojgHuASNipevB5Jwi2IK 51uZEK42zKz24zJIK8cVErM+5ZWDTyr8CIlOjdxZ5ZUp/NBeGBepQTvQ81wiqney dhwwD6ZeA3VMwu2pkJ7oT/mig4sRPEPo7d4ytU3bnIFojL75qKpoR+9cuT8EzTO6 qIruWv2pu/uzTOnNLhUbcWmtoQn2pQjTYsIGTD5JUPgEZSbG4BUKOXsGoH6ucKUS BQ7IQRAyVK37EErPC+ZilMn7rFPGExk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:16 2026 by rpki-client