This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa File: 9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa (raw, json) Hash identifier: Dq20DXGqkkutot/gdGUaZOAKKiCYfJJ90iT9P25m5Uk= Subject key identifier: F1:62:87:E3:6E:17:FD:91:DD:88:37:D7:59:0C:B0:E0:F8:E7:42:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C0C6B4C89B4633A0DECE03510 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:4c:89:b4:63:3a:0d:ec:e0:35:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=843e6586-fb41-42ff-a9da-c0461cd293c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:7f:f9:1e:dc:6d:3d:e6:aa:c9:d2:80:33: 7e:b8:f1:b3:e6:4a:87:c5:82:fb:2e:22:eb:24:2a: b8:d4:fa:d2:37:cf:a5:b9:1f:4a:6a:b9:a2:37:a9: 4a:6a:1c:0e:7a:76:5b:b3:54:8c:ab:da:37:4e:39: 8d:96:a4:20:7e:29:31:0a:15:77:be:a8:58:dd:68: de:3f:f1:e5:c5:c3:d2:c1:dd:04:66:0c:27:19:95: 8f:61:4e:9c:b6:39:5d:9f:b7:94:20:54:af:de:fb: 90:39:28:f9:da:a9:20:74:63:a9:56:e1:0d:5d:bb: 37:41:11:72:ac:27:91:c2:22:2f:54:1e:50:46:7f: 15:f7:82:2a:cb:30:61:a9:76:eb:8f:89:46:15:27: 59:19:15:d2:e2:ae:80:58:6e:86:ec:88:8a:85:c8: 61:c1:5c:e4:14:88:a7:82:bb:0a:fc:17:24:28:7b: e8:67:fd:4b:5b:c1:2c:55:f5:1b:15:54:f9:66:f0: f4:ec:f0:c6:43:54:5f:3d:57:e9:6a:9d:73:28:63: 20:2a:20:8a:e7:31:39:59:31:42:8c:43:e2:9c:ee: 52:7a:12:60:f7:6e:72:e1:63:7c:a8:0f:15:5d:69: 11:ec:06:ab:26:01:22:ab:9a:ed:41:c4:7c:41:fc: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:87:E3:6E:17:FD:91:DD:88:37:D7:59:0C:B0:E0:F8:E7:42:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:0b:b1:50:c7:45:95:73:c3:2b:a8:d2:c9:25:8c:31:eb:54: 77:67:dd:e4:5f:45:9c:24:9e:b4:79:e8:2f:4f:10:9e:72:d7: a1:aa:13:79:cd:63:a5:bb:20:04:a5:4f:8f:dd:93:c6:bd:75: 33:99:82:a7:4e:6b:7d:7c:39:b1:6e:1b:ac:28:76:9e:c1:f6: 54:c2:64:a7:65:21:12:26:35:f2:48:2c:da:a9:e2:ce:bc:ef: 69:8f:f9:3d:e5:76:f9:ce:99:dd:5f:7a:65:da:e6:89:d2:bb: c4:d5:a9:ee:ba:b1:bc:d6:20:6f:c7:fa:c4:d4:57:4b:49:0c: 70:c9:1c:c6:3c:df:c2:97:14:02:1a:90:65:49:61:25:f6:c8: bd:9a:5b:95:6a:45:88:dd:21:49:df:83:11:d7:0a:b9:47:e3: 7a:15:01:05:28:c4:1f:3a:87:5c:29:b9:8b:a7:fa:d1:60:7c: f6:3d:57:68:79:d7:76:30:65:3b:d4:36:db:ed:a5:9d:99:09: a3:20:05:2c:ed:3a:db:66:02:10:0b:a7:53:10:ec:03:f5:5a: fb:fa:a7:e7:17:1f:84:71:af:ad:fe:7a:c5:b2:8f:19:a6:3b: 11:8d:fc:a7:f4:ca:71:48:1e:db:3e:6c:60:fe:01:84:63:39: 76:1f:c0:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa0yJtGM6DezgNRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk ODQzZTY1ODYtZmI0MS00MmZmLWE5ZGEtYzA0NjFjZDI5M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVt/+R7cbT3mqsnSgDN+uPGz5kqHxYL7LiLr JCq41PrSN8+luR9KarmiN6lKahwOenZbs1SMq9o3TjmNlqQgfikxChV3vqhY3Wje P/HlxcPSwd0EZgwnGZWPYU6ctjldn7eUIFSv3vuQOSj52qkgdGOpVuENXbs3QRFy rCeRwiIvVB5QRn8V94IqyzBhqXbrj4lGFSdZGRXS4q6AWG6G7IiKhchhwVzkFIin grsK/BckKHvoZ/1LW8EsVfUbFVT5ZvD07PDGQ1RfPVfpap1zKGMgKiCK5zE5WTFC jEPinO5SehJg925y4WN8qA8VXWkR7AarJgEiq5rtQcR8QfwUpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFih+NuF/2R3Yg311kMsOD450LhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWJmMDU2NGItOGFkMC0z MjJkLWIzODMtZTAyMWVmMzZjMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQLsVDHRZVzwyuo0skljDHrVHdn3eRfRZwknrR56C9PEJ5y16GqE3nN Y6W7IASlT4/dk8a9dTOZgqdOa318ObFuG6wodp7B9lTCZKdlIRImNfJILNqp4s68 72mP+T3ldvnOmd1femXa5onSu8TVqe66sbzWIG/H+sTUV0tJDHDJHMY838KXFAIa kGVJYSX2yL2aW5VqRYjdIUnfgxHXCrlH43oVAQUoxB86h1wpuYun+tFgfPY9V2h5 13YwZTvUNtvtpZ2ZCaMgBSztOttmAhALp1MQ7AP1Wvv6p+cXH4Rxr63+esWyjxmm OxGN/Kf0ynFIHts+bGD+AYRjOXYfwCI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:15:04 2025 by rpki-client