This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa File: 9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa (raw, json) Hash identifier: cxmutL16Kbvqd8Tguxxcd5vVn5B0S7HIsILn6sJbY3w= Subject key identifier: 34:E9:C7:A2:71:ED:29:39:B7:57:3E:4E:01:95:00:CC:BB:8C:8D:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C470BC4B78D103BBA2AC72000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 63949 IP address blocks: 172.233.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:c4:b7:8d:10:3b:ba:2a:c7:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=253c4bf4-b9ae-464c-a83b-877cbdb1393d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:59:f5:ae:27:f4:b6:54:8a:45:80:db:88: 83:f1:c3:66:6b:74:08:7e:d0:ff:f8:6d:6c:dd:03: 12:4b:df:a3:eb:6f:83:48:ff:22:12:bf:3e:dc:c2: 8f:0e:8a:d6:08:98:bd:b6:20:df:15:6c:5f:4e:8e: 64:b3:f8:fe:9b:ac:a1:1a:b5:2d:56:32:75:08:6f: 4e:07:e1:8d:d5:4e:9e:90:9f:e0:63:a4:b7:b8:92: c0:7d:e2:34:ab:d8:97:24:2c:2f:bb:47:4b:6b:06: 2a:44:22:6f:59:91:45:8a:96:e6:6f:7e:1b:30:9d: c8:95:6a:54:42:18:60:db:e8:53:5f:b3:f4:b3:10: ec:a3:70:19:da:91:23:d0:71:76:e0:05:bc:2c:57: ae:3c:1f:7e:e7:4c:f0:61:8d:9e:39:77:32:57:f7: 01:0f:39:25:77:7f:9c:82:78:5c:43:9c:92:7a:b4: c2:85:01:a3:56:93:72:39:a6:77:af:a6:8f:ff:ce: 4f:f2:9e:fc:c7:20:a3:77:32:af:37:e8:55:08:1e: d9:18:ce:ab:b4:79:79:cc:39:9a:7f:62:7d:63:10: ae:07:d9:b3:af:2a:c2:ef:86:3b:e2:45:27:c4:1a: e3:31:ef:10:cd:f4:34:26:3e:25:11:10:23:10:32: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E9:C7:A2:71:ED:29:39:B7:57:3E:4E:01:95:00:CC:BB:8C:8D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e6:ad:57:28:e0:f9:11:91:c8:23:84:04:3a:94:67:a6:57: 17:70:2e:b9:8c:eb:b4:a2:63:7b:59:a2:67:a6:7b:18:15:fd: 53:09:f3:01:d9:08:1c:ee:b5:2a:9a:3e:3f:56:5d:e2:07:cb: ab:be:b5:6d:fd:d9:ab:9f:c8:76:6e:9f:ea:b0:d5:47:74:d5: 94:cb:79:91:21:07:9e:01:da:0b:79:39:e1:ed:79:5c:8f:48: b8:cb:6f:d4:67:43:51:a0:a8:b3:1d:30:46:a2:8e:15:33:be: 07:46:f7:0d:88:cd:3b:c3:d2:a4:0c:52:78:d0:fa:47:36:fd: c7:0d:bd:1e:69:b2:65:be:a0:56:20:f9:aa:a3:f5:ff:4c:51: 25:b4:e4:d2:eb:2a:92:04:aa:21:bb:a5:3d:96:c1:28:75:38: be:c3:16:14:2f:f5:14:99:c3:c4:7c:77:3d:df:3c:53:d6:15: 66:dc:c5:81:07:0e:36:16:10:07:3a:d8:24:1d:d8:13:16:47: 4b:7f:4e:2e:0b:a0:74:4d:82:2d:19:9a:4b:10:14:50:35:81: 32:68:98:bb:0f:17:5a:52:cb:47:91:54:f6:5a:5d:c3:d7:46: f0:d0:a6:aa:b0:fc:d9:7b:65:ad:85:5a:bf:ef:63:9b:4b:2e: ee:ce:69:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8S3jRA7uirHIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk MjUzYzRiZjQtYjlhZS00NjRjLWE4M2ItODc3Y2JkYjEzOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBxZ9a4n9LZUikWA24iD8cNma3QIftD/+G1s 3QMSS9+j62+DSP8iEr8+3MKPDorWCJi9tiDfFWxfTo5ks/j+m6yhGrUtVjJ1CG9O B+GN1U6ekJ/gY6S3uJLAfeI0q9iXJCwvu0dLawYqRCJvWZFFipbmb34bMJ3IlWpU Qhhg2+hTX7P0sxDso3AZ2pEj0HF24AW8LFeuPB9+50zwYY2eOXcyV/cBDzkld3+c gnhcQ5ySerTChQGjVpNyOaZ3r6aP/85P8p78xyCjdzKvN+hVCB7ZGM6rtHl5zDma f2J9YxCuB9mzryrC74Y74kUnxBrjMe8QzfQ0Jj4lERAjEDJ8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTpx6Jx7Sk5t1c+TgGVAMy7jI2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZjZGQwMGMtMDg5OC0z ZGQ3LTkzNGUtYTM5YzBhNzg3M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjmrVco4PkRkcgjhAQ6lGemVxdwLrmM67SiY3tZomemexgV/VMJ8wHZ CBzutSqaPj9WXeIHy6u+tW392aufyHZun+qw1Ud01ZTLeZEhB54B2gt5OeHteVyP SLjLb9RnQ1GgqLMdMEaijhUzvgdG9w2IzTvD0qQMUnjQ+kc2/ccNvR5psmW+oFYg +aqj9f9MUSW05NLrKpIEqiG7pT2WwSh1OL7DFhQv9RSZw8R8dz3fPFPWFWbcxYEH DjYWEAc62CQd2BMWR0t/Ti4LoHRNgi0ZmksQFFA1gTJomLsPF1pSy0eRVPZaXcPX RvDQpqqw/Nl7Za2FWr/vY5tLLu7Oads= -----END CERTIFICATE-----Generated at Wed Jan 21 13:22:10 2026 by rpki-client