This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa3f88f0-eccf-3972-a348-63c51ac35414.roa File: fa3f88f0-eccf-3972-a348-63c51ac35414.roa (raw, json) Hash identifier: 3GtEXghX/AC+0UmsVwfI21+HGwI9ufYdc/x8zFbZTXM= Subject key identifier: 47:E7:59:E8:F7:BF:1B:A3:AA:BA:42:D9:CB:F1:93:5B:4D:7C:06:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A73D4175EABA43D9F0B880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa3f88f0-eccf-3972-a348-63c51ac35414.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:3d:41:75:ea:ba:43:d9:f0:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=a4d8eda7-b1c5-45f3-bd3a-bc3cb2b50f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:6e:5c:d8:c1:88:df:ad:53:31:11:f7:64: c4:69:30:07:0d:33:d7:c5:30:c9:6b:16:e9:f6:51: 97:cb:f2:41:aa:ed:d3:cc:0f:d2:e9:76:26:03:b5: c7:8d:d6:22:32:60:9c:44:ec:21:ac:29:6d:ff:3e: 22:10:8e:29:2b:40:46:60:6c:f6:b3:a3:17:0e:eb: f8:3b:d4:dc:88:32:5f:ba:25:63:a2:67:11:f3:fb: dd:ed:03:fa:ac:13:6a:e7:9f:6d:96:b4:60:75:af: 08:5b:80:d9:29:fb:d9:74:bb:d1:3f:31:fb:18:ea: 5f:7b:1c:05:5d:a9:10:e0:79:bd:a6:47:00:30:af: f5:cc:ea:8f:a4:00:fe:a5:b5:3d:8c:57:10:ff:91: aa:0c:24:d4:40:be:83:0e:89:c5:06:69:53:35:40: 0f:f4:d4:ea:fd:69:5d:e7:f5:1b:62:ce:b7:d4:7c: 36:7d:9f:8e:1f:6a:af:68:82:57:19:a5:27:b7:ab: 69:46:f0:6e:d7:38:24:6e:78:66:bb:fd:69:4d:44: a4:a5:cf:8c:ff:83:b5:ea:05:02:37:09:c3:d1:bb: 69:3a:63:ae:69:36:39:b1:e5:a6:d8:cc:73:ab:66: 8b:42:f2:de:7f:0f:e9:69:45:ba:38:09:6e:76:a3: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E7:59:E8:F7:BF:1B:A3:AA:BA:42:D9:CB:F1:93:5B:4D:7C:06:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa3f88f0-eccf-3972-a348-63c51ac35414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e0:b9:0b:2f:d7:26:85:b7:fc:b2:9a:e4:50:bf:4f:b7:44: c6:1f:b3:bd:0f:df:a1:cc:b8:bf:22:ab:eb:b5:19:73:5c:20: ea:f4:80:32:24:24:26:94:86:8d:b5:dd:77:1c:aa:d3:be:7c: 1e:4e:6b:60:a8:25:86:0a:cd:af:63:90:cb:59:2a:b6:3b:12: f0:e7:b0:da:c9:45:b8:50:2f:69:eb:69:38:17:49:b4:38:6b: d4:82:4c:32:df:e2:a7:79:30:80:57:a0:26:d0:e3:9b:f2:f2: 06:77:c3:cf:b3:ac:67:fb:64:14:c2:35:55:5b:85:d5:88:75: 26:88:7e:da:e1:09:2f:46:21:fa:9d:89:d9:08:91:ed:1e:c0: 83:07:25:25:cd:b1:a7:f7:ac:14:b8:52:7a:92:d6:71:58:f2: 84:ae:34:c3:63:c8:1e:02:48:23:78:8e:a4:d0:96:f5:95:5f: 27:8c:09:d9:1d:a8:85:f3:d3:34:38:91:9d:a7:0b:65:97:79: 54:82:64:e4:ef:b1:52:d0:7b:ff:c2:28:80:e1:68:fa:ce:79: 15:9a:70:25:44:c8:ae:5a:68:45:55:c3:20:c4:87:a5:1b:95: 9c:c6:3f:e3:46:fe:65:db:31:8d:4d:6f:7a:31:d4:43:78:ae: dc:84:f5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpz1Bdeq6Q9nwuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YTRkOGVkYTctYjFjNS00NWYzLWJkM2EtYmMzY2IyYjUwZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPluXNjBiN+tUzER92TEaTAHDTPXxTDJaxbp 9lGXy/JBqu3TzA/S6XYmA7XHjdYiMmCcROwhrClt/z4iEI4pK0BGYGz2s6MXDuv4 O9TciDJfuiVjomcR8/vd7QP6rBNq559tlrRgda8IW4DZKfvZdLvRPzH7GOpfexwF XakQ4Hm9pkcAMK/1zOqPpAD+pbU9jFcQ/5GqDCTUQL6DDonFBmlTNUAP9NTq/Wld 5/UbYs631Hw2fZ+OH2qvaIJXGaUnt6tpRvBu1zgkbnhmu/1pTUSkpc+M/4O16gUC NwnD0btpOmOuaTY5seWm2Mxzq2aLQvLefw/paUW6OAludqOBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfnWej3vxujqrpC2cvxk1tNfAbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzZjg4ZjAtZWNjZi0z OTcyLWEzNDgtNjNjNTFhYzM1NDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3guQsv1yaFt/yymuRQv0+3RMYfs70P36HMuL8iq+u1GXNcIOr0gDIk JCaUho213XccqtO+fB5Oa2CoJYYKza9jkMtZKrY7EvDnsNrJRbhQL2nraTgXSbQ4 a9SCTDLf4qd5MIBXoCbQ45vy8gZ3w8+zrGf7ZBTCNVVbhdWIdSaIftrhCS9GIfqd idkIke0ewIMHJSXNsaf3rBS4UnqS1nFY8oSuNMNjyB4CSCN4jqTQlvWVXyeMCdkd qIXz0zQ4kZ2nC2WXeVSCZOTvsVLQe//CKIDhaPrOeRWacCVEyK5aaEVVwyDEh6Ub lZzGP+NG/mXbMY1Nb3ox1EN4rtyE9V0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:01 2026 by rpki-client