This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa File: 8602a905-b263-30a4-8140-3c7d39eccf04.roa (raw, json) Hash identifier: /f5zSkgrLchI33FM+vb15NO9B8ZkuR3w3lSihG+678Y= Subject key identifier: 16:4B:94:D8:B4:F0:5E:60:76:FA:2E:34:2B:E2:BD:24:6B:C5:ED:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7F7B82CB5FE18FC044A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 36040 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:f7:b8:2c:b5:fe:18:fc:04:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=213e1800-2dfe-4b19-bc20-5717004954da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:3d:2a:ea:97:c7:e2:97:0c:6a:94:c5:72: 83:9b:c7:8b:88:25:66:9f:60:72:3d:25:de:55:cd: 29:ea:93:73:ff:6a:ad:f3:7f:89:db:df:e0:ab:28: 3f:d5:4f:4c:07:2e:4c:ee:fa:77:4c:51:11:af:00: a1:5e:4b:cb:f7:c9:c2:1a:26:de:48:e4:b9:e3:57: 0e:07:80:d0:0e:47:10:14:6f:f9:9c:a7:d7:28:39: 7d:17:79:14:05:0d:40:35:6d:58:47:dd:27:2e:9c: 39:e0:47:be:fb:75:ce:3c:47:42:60:70:9d:93:48: 0e:d7:07:67:03:a3:dc:23:c0:ee:f2:37:e8:44:ed: 75:27:de:71:62:e9:d5:d7:97:6c:2a:5e:d1:e2:d8: b3:cf:29:be:a2:3f:f0:ce:99:08:7d:e5:53:a0:44: f9:d7:e0:6b:68:b6:59:a6:10:28:d4:16:25:2b:0b: c1:a8:d6:c4:00:d6:87:20:a0:6c:83:cd:2b:b4:59: 9d:a0:4b:4d:97:03:c8:68:11:9b:4b:fb:21:5d:3c: c0:c7:6c:e5:26:df:f8:24:50:7a:02:f5:60:5f:2c: ee:31:95:6d:93:81:4c:2e:30:1d:e7:c6:63:4a:fc: f0:39:53:d5:6a:33:d3:e6:2c:a1:f0:3f:7e:5e:0f: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4B:94:D8:B4:F0:5E:60:76:FA:2E:34:2B:E2:BD:24:6B:C5:ED:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d5:e0:c8:1d:58:93:cc:c1:73:24:d9:1a:b4:e0:04:bc:7b: d6:cd:f6:d7:3c:63:90:c4:ee:b8:c0:4b:ce:3d:6d:db:84:d0: 15:a2:7e:db:48:f3:26:3b:bd:ad:b8:e3:ee:c4:88:4d:c3:60: 2d:b5:68:8f:4d:f1:cc:39:58:c2:dd:c7:af:ac:e8:f8:56:2f: f1:50:9f:61:74:d7:70:5b:51:5a:8b:2a:2c:61:09:e1:7f:70: 1f:56:db:4a:61:03:3a:c7:42:5b:d3:c0:7d:40:cf:c7:2e:ff: e4:f5:22:38:b7:1f:db:48:03:9c:22:9f:46:00:ed:a2:65:c0: e6:5f:07:e5:ec:23:0c:cb:5e:b1:28:8c:01:7f:06:c9:f6:90: e6:fc:a1:f3:32:10:b0:23:89:64:3e:cc:67:67:39:f4:de:34: 4d:54:cf:4e:4d:a3:24:5b:93:e6:96:bc:02:40:ef:17:0d:be: 4b:9d:f5:b3:41:36:81:ae:6b:02:9f:49:3c:3c:65:c6:e4:0e: 9a:ba:e9:1e:1d:b5:84:86:35:51:1b:4b:11:c0:3e:1b:db:9c: 2b:e1:16:b4:cd:cc:c9:d6:15:71:40:66:53:13:e0:46:7a:ee: de:2e:af:d3:db:ea:fd:97:39:00:aa:2f:d4:51:43:4e:d7:0d: 7a:16:02:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/e4LLX+GPwESoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MjEzZTE4MDAtMmRmZS00YjE5LWJjMjAtNTcxNzAwNDk1NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTM9KuqXx+KXDGqUxXKDm8eLiCVmn2ByPSXe Vc0p6pNz/2qt83+J29/gqyg/1U9MBy5M7vp3TFERrwChXkvL98nCGibeSOS541cO B4DQDkcQFG/5nKfXKDl9F3kUBQ1ANW1YR90nLpw54Ee++3XOPEdCYHCdk0gO1wdn A6PcI8Du8jfoRO11J95xYunV15dsKl7R4tizzym+oj/wzpkIfeVToET51+BraLZZ phAo1BYlKwvBqNbEANaHIKBsg80rtFmdoEtNlwPIaBGbS/shXTzAx2zlJt/4JFB6 AvVgXyzuMZVtk4FMLjAd58ZjSvzwOVPVajPT5iyh8D9+Xg8aNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZLlNi08F5gdvouNCvivSRrxe1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYwMmE5MDUtYjI2My0z MGE0LTgxNDAtM2M3ZDM5ZWNjZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/V4MgdWJPMwXMk2Rq04AS8e9bN9tc8Y5DE7rjAS849bduE0BWifttI 8yY7va244+7EiE3DYC21aI9N8cw5WMLdx6+s6PhWL/FQn2F013BbUVqLKixhCeF/ cB9W20phAzrHQlvTwH1Az8cu/+T1Iji3H9tIA5win0YA7aJlwOZfB+XsIwzLXrEo jAF/Bsn2kOb8ofMyELAjiWQ+zGdnOfTeNE1Uz05NoyRbk+aWvAJA7xcNvkud9bNB NoGuawKfSTw8ZcbkDpq66R4dtYSGNVEbSxHAPhvbnCvhFrTNzMnWFXFAZlMT4EZ6 7t4ur9Pb6v2XOQCqL9RRQ07XDXoWAt4= -----END CERTIFICATE-----Generated at Tue Jan 20 14:15:51 2026 by rpki-client