This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa File: 33a7e675-8cbb-3daa-b083-db5305d2ba97.roa (raw, json) Hash identifier: MTvXSKH4BzQtyoWk6XnaUATqFZVxF+N4CjA1jDR/ANU= Subject key identifier: F5:27:8A:73:40:28:A5:1F:9C:3E:5F:BE:21:A6:A4:7E:14:A1:FE:4A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584BC53B21ECD1EE87309A6737C4 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 15169 IP address blocks: 172.217.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:21:ec:d1:ee:87:30:9a:67:37:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=50ac8010-11e7-4065-b40b-20c53083fac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:5d:89:90:eb:09:fa:f3:e5:ee:08:61:43: fa:65:a1:1d:70:31:a1:e5:99:a0:63:d3:59:84:72: 34:bb:78:36:54:b1:cf:58:e1:91:b2:5e:79:8a:b5: e0:ba:74:bf:87:ca:f2:9b:6b:54:72:d3:34:7b:ab: 58:87:ac:37:b0:04:65:4e:e6:f4:5f:d8:04:0b:8d: e6:65:f2:57:97:0a:c6:f0:b3:76:3e:d6:57:58:8d: f3:79:8e:ad:28:b7:00:ea:f9:8d:ff:a9:1d:64:38: 70:da:b7:58:fb:21:8e:bf:6c:ba:7f:dc:3f:ee:7c: c7:c8:17:6d:f2:42:76:9f:4b:a8:4f:39:31:50:93: 11:21:42:c2:80:82:88:7f:c6:af:94:6e:1a:fb:05: ef:58:3d:3e:f6:81:31:bf:42:e9:64:58:cc:eb:58: bf:6e:97:fb:e8:c7:8c:a0:11:78:87:2a:85:9a:4c: a9:81:36:86:e7:da:b1:44:09:e5:e7:ca:22:51:ac: eb:cf:a5:28:68:15:67:11:17:4b:2f:d0:ad:be:c1: 51:21:3a:8b:d0:c5:6e:12:eb:39:74:2a:75:ae:14: ad:32:66:51:ec:49:3a:08:69:a1:0c:04:a5:de:5d: f0:7a:f5:f0:9f:25:4c:02:71:aa:f9:2c:8e:5e:54: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:27:8A:73:40:28:A5:1F:9C:3E:5F:BE:21:A6:A4:7E:14:A1:FE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33a7e675-8cbb-3daa-b083-db5305d2ba97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8f:ef:54:91:63:1c:31:da:dc:94:45:f6:aa:3e:e4:5b:00: 7e:ea:03:c8:08:56:fa:15:05:af:8f:da:15:f1:cf:51:fb:37: 13:67:5d:7b:dc:40:6c:27:e4:2d:a8:c3:e0:a5:b8:b8:ef:65: 0b:24:40:d9:fe:91:9b:de:84:e9:9d:78:fa:c5:64:d8:8a:45: c4:fe:e3:60:3e:a1:70:cc:e9:fe:3c:fd:29:67:d0:00:fb:ed: af:4f:13:2f:30:a4:57:2f:e0:fd:3b:b0:7c:7c:4a:c7:d8:6d: a2:57:03:a8:3f:a5:09:7b:dc:87:ee:f5:8c:63:9d:0d:7f:f5: 83:df:27:53:8e:8e:46:06:7d:76:32:0c:ed:70:e1:78:49:bc: 2d:e4:21:19:be:7a:b6:ed:0a:e7:a4:3e:70:48:51:c3:9e:ce: 13:e7:ef:35:78:0c:fb:56:61:53:f2:5c:75:65:3c:2c:5d:43: 3e:2a:95:96:e8:8b:8c:53:c0:9b:99:4e:5c:b3:1c:3f:91:11: ff:51:d1:04:3a:92:bc:92:fd:fb:52:75:3f:f0:ba:cd:90:55: a4:5b:2b:65:bf:6a:1e:86:35:4b:8e:e8:ee:ba:9a:18:77:8c: 84:2d:ca:71:4d:24:c3:19:59:53:5e:22:a5:ad:47:eb:5d:8c: 3e:09:0e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOyHs0e6HMJpnN8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTBhYzgwMTAtMTFlNy00MDY1LWI0MGItMjBjNTMwODNmYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPRdiZDrCfrz5e4IYUP6ZaEdcDGh5ZmgY9NZ hHI0u3g2VLHPWOGRsl55irXgunS/h8rym2tUctM0e6tYh6w3sARlTub0X9gEC43m ZfJXlwrG8LN2PtZXWI3zeY6tKLcA6vmN/6kdZDhw2rdY+yGOv2y6f9w/7nzHyBdt 8kJ2n0uoTzkxUJMRIULCgIKIf8avlG4a+wXvWD0+9oExv0LpZFjM61i/bpf76MeM oBF4hyqFmkypgTaG59qxRAnl58oiUazrz6UoaBVnERdLL9CtvsFRITqL0MVuEus5 dCp1rhStMmZR7Ek6CGmhDASl3l3wevXwnyVMAnGq+SyOXlQ3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUninNAKKUfnD5fviGmpH4Uof5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzNhN2U2NzUtOGNiYi0z ZGFhLWIwODMtZGI1MzA1ZDJiYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSP71SRYxwx2tyURfaqPuRbAH7qA8gIVvoVBa+P2hXxz1H7NxNnXXvc QGwn5C2ow+CluLjvZQskQNn+kZvehOmdePrFZNiKRcT+42A+oXDM6f48/Sln0AD7 7a9PEy8wpFcv4P07sHx8SsfYbaJXA6g/pQl73Ifu9YxjnQ1/9YPfJ1OOjkYGfXYy DO1w4XhJvC3kIRm+erbtCuekPnBIUcOezhPn7zV4DPtWYVPyXHVlPCxdQz4qlZbo i4xTwJuZTlyzHD+REf9R0QQ6kryS/ftSdT/wus2QVaRbK2W/ah6GNUuO6O66mhh3 jIQtynFNJMMZWVNeIqWtR+tdjD4JDuw= -----END CERTIFICATE-----Generated at Sat Dec 6 21:15:41 2025 by rpki-client