This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa File: 935bd29f-5047-300b-b66d-40395de7b976.roa (raw, json) Hash identifier: EtwpkykODBcG3TP8q57jv9szwS+B/JuecLtaEakhDtw= Subject key identifier: 1D:8D:B8:35:FB:20:9D:E1:12:1C:22:AA:85:72:4A:D4:33:57:BD:55 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A758C8C6746626F3A18880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 172.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:58:c8:c6:74:66:26:f3:a1:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=53744742-c8bf-4f69-866e-e91e87f75e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:25:dc:14:0e:be:50:4b:71:2e:00:a6:b6: 6e:66:32:93:72:f8:b3:c4:d6:1b:b3:38:b3:f2:80: 77:0e:b2:18:e6:ed:73:7d:d5:cc:43:16:3d:63:85: 94:69:f7:23:76:64:1f:48:20:22:86:9a:00:f5:c0: 25:01:5f:d9:e0:4d:f8:11:f5:bf:ba:84:ce:92:a3: fc:48:14:de:da:95:5c:be:ef:34:3f:18:d1:7f:a5: ba:d4:08:53:57:63:f6:d7:f8:78:74:2d:e9:81:96: dd:1a:11:57:35:a3:d4:cf:56:5e:16:15:c2:8d:8b: ed:30:19:e1:e3:d5:c9:9b:ac:eb:49:8d:69:dc:cb: fc:11:38:4a:0d:2f:c5:f8:e7:d3:d3:e8:7f:7d:39: da:e5:1a:44:5e:c1:86:eb:dd:9a:48:9e:09:67:d4: 03:e6:fd:be:12:1a:4b:8e:4a:0f:45:8c:f0:c0:3c: f5:87:62:02:87:b8:19:8e:80:10:67:f4:01:b8:d5: 3e:13:b4:8e:80:62:8f:05:61:8a:6e:7e:aa:51:28: e4:d5:11:7d:fc:b8:68:bf:0c:8b:c2:59:46:73:97: 76:d7:e0:e5:b2:fe:79:65:ce:ce:f7:2b:2c:c6:78: 26:33:5e:ab:bf:0c:68:2c:87:16:83:d8:4f:81:de: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8D:B8:35:FB:20:9D:E1:12:1C:22:AA:85:72:4A:D4:33:57:BD:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d0:f7:36:01:e7:90:ed:6d:b4:4b:70:dd:28:eb:46:5a:e8: 3d:9c:0e:e6:23:39:29:43:24:d1:45:eb:54:e9:8d:c2:05:60: da:c4:53:0d:e5:5e:76:0f:5e:bf:19:a2:82:50:a3:54:35:ac: b3:16:0b:07:97:57:dd:0d:f8:79:55:75:cf:0b:06:a7:51:c8: ca:50:f2:e8:a7:b0:8c:60:cc:53:42:9b:ff:3a:74:e5:6f:cd: 5c:5f:b6:5f:fa:ad:f1:4e:f1:03:46:09:7d:9f:b2:12:9f:9a: 90:18:c2:51:b9:ec:97:15:13:d2:15:7a:f8:66:10:2c:3b:4f: 7f:06:4d:e6:ad:55:1f:d5:93:67:bf:9d:43:83:23:0e:c8:23: e0:f3:9e:08:62:df:f2:2d:9c:09:d0:a2:af:02:2f:67:e0:4d: ee:42:53:75:bb:84:9d:07:8b:06:f6:6d:4c:d1:4e:af:d9:f4: 72:73:90:72:7f:95:2d:1d:cd:0d:16:01:e5:91:ce:13:0e:cc: 86:6f:d6:fa:78:1f:fc:22:24:2f:60:75:c6:31:72:66:eb:7b: 68:dd:e7:86:ce:b5:90:12:64:33:2b:40:48:f6:1d:21:06:4b: e5:fe:e4:82:24:46:04:9a:a0:85:05:8e:19:d0:d4:78:6d:6a: f4:ef:6e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1jIxnRmJvOhiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NTM3NDQ3NDItYzhiZi00ZjY5LTg2NmUtZTkxZTg3Zjc1ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohgl3BQOvlBLcS4AprZuZjKTcvizxNYbsziz 8oB3DrIY5u1zfdXMQxY9Y4WUafcjdmQfSCAihpoA9cAlAV/Z4E34EfW/uoTOkqP8 SBTe2pVcvu80PxjRf6W61AhTV2P21/h4dC3pgZbdGhFXNaPUz1ZeFhXCjYvtMBnh 49XJm6zrSY1p3Mv8EThKDS/F+OfT0+h/fTna5RpEXsGG692aSJ4JZ9QD5v2+EhpL jkoPRYzwwDz1h2ICh7gZjoAQZ/QBuNU+E7SOgGKPBWGKbn6qUSjk1RF9/LhovwyL wllGc5d21+Dlsv55Zc7O9yssxngmM16rvwxoLIcWg9hPgd6/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2NuDX7IJ3hEhwiqoVyStQzV71VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTM1YmQyOWYtNTA0Ny0z MDBiLWI2NmQtNDAzOTVkZTdiOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHQ9zYB55DtbbRLcN0o60Za6D2cDuYjOSlDJNFF61TpjcIFYNrEUw3l XnYPXr8ZooJQo1Q1rLMWCweXV90N+HlVdc8LBqdRyMpQ8uinsIxgzFNCm/86dOVv zVxftl/6rfFO8QNGCX2fshKfmpAYwlG57JcVE9IVevhmECw7T38GTeatVR/Vk2e/ nUODIw7II+Dznghi3/ItnAnQoq8CL2fgTe5CU3W7hJ0Hiwb2bUzRTq/Z9HJzkHJ/ lS0dzQ0WAeWRzhMOzIZv1vp4H/wiJC9gdcYxcmbre2jd54bOtZASZDMrQEj2HSEG S+X+5IIkRgSaoIUFjhnQ1HhtavTvbio= -----END CERTIFICATE-----Generated at Fri Jan 30 14:53:39 2026 by rpki-client