This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa File: 089de854-3bd0-3daa-8427-ce457804664f.roa (raw, json) Hash identifier: GR1sXtG/jl5AvGed6WdOs/WJtRN670TaSxhzPb0S+BM= Subject key identifier: E1:B9:A5:AA:1F:D4:F8:2B:D5:1E:2E:AB:91:EA:6E:BE:9D:82:6D:DA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C48715EB90FFD11C1B2B95F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 70.32.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:5e:b9:0f:fd:11:c1:b2:b9:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=f49abd22-8a7d-4123-a4f3-64269d2c3882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:d5:41:ce:8d:a5:ba:e3:5c:c7:e6:ce:83: 8c:22:a8:73:c1:96:a1:48:8e:f7:28:74:0f:6b:93: 68:cd:fc:47:97:06:05:d0:c2:92:46:17:67:f7:60: 57:93:14:24:40:b0:b5:60:26:06:f9:11:f9:cc:40: 58:99:57:e4:71:ee:1e:44:73:c7:67:fa:5a:9d:4b: 10:00:99:47:ce:26:e2:6d:a4:61:bd:ec:36:0e:d7: 61:18:f0:d5:6c:46:77:74:ba:68:7f:d9:3e:40:5c: 0e:d9:10:34:30:5c:ce:e5:dd:8f:51:db:18:6a:c4: 88:3b:4e:65:3a:6a:7f:0a:32:ac:de:ff:74:e9:29: c7:dd:fd:34:92:bf:fc:7e:a5:3d:28:84:9c:97:de: d0:8f:71:c4:43:70:2b:5f:6e:9f:e1:ff:ba:04:37: e5:49:83:44:bd:32:7e:b1:4c:a0:dc:c4:a1:d3:7d: e3:51:3b:dc:ea:e2:c2:35:cb:dd:0b:be:17:15:ed: ab:ac:ac:3c:c7:ca:db:f2:41:d5:a3:38:73:f9:1a: cb:43:35:ce:f7:0e:28:a2:6b:38:56:8a:52:73:1f: c7:0e:16:e2:fa:51:8b:f2:34:ac:f4:00:45:e8:98: 7e:2c:b6:6a:48:3f:8a:c8:fb:3b:87:55:21:37:90: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:A5:AA:1F:D4:F8:2B:D5:1E:2E:AB:91:EA:6E:BE:9D:82:6D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:57:cc:d5:ef:9f:8a:5a:d2:cd:03:36:8e:5d:c3:17:0a:31: 70:ad:fd:d5:2b:b1:f1:f6:0d:b5:7c:30:be:88:ab:c1:3e:00: 96:c6:21:7e:53:59:79:8f:1b:ed:9b:fb:36:cd:6d:37:59:6a: ae:fd:11:5d:cf:e5:a3:14:db:ee:d6:7f:b4:86:19:20:f3:62: bf:56:06:3b:cd:3f:c8:d1:d0:5e:82:32:4c:7b:33:2e:c4:cc: fe:5f:29:40:f1:7b:aa:17:eb:27:c5:9c:7a:73:86:c4:2d:cd: 86:88:85:c3:db:36:46:9d:dd:34:cc:a7:0e:8b:52:69:b6:f2: 19:58:dd:b7:64:08:59:a6:0f:bd:83:fe:e7:23:aa:b6:e1:ea: d8:b8:d3:a9:81:27:42:fa:a5:5c:dc:88:5d:73:85:21:38:98: 4f:5f:df:f2:dc:cb:dd:05:d8:24:ae:9a:5f:8a:c5:7b:12:eb: ec:8c:b4:69:ca:6a:72:68:5a:67:08:ee:16:fc:62:9f:50:2c: 40:9d:b0:54:94:fa:1d:f0:e8:74:c5:7f:b0:3e:a4:4f:52:c5: 34:4c:cb:74:6b:e7:12:ce:b9:3b:b1:89:18:41:b2:2e:9d:2f: 6c:db:18:dc:e7:33:73:01:35:ba:94:be:1f:4d:c1:34:69:11: 6a:b3:f5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcV65D/0RwbK5X0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZjQ5YWJkMjItOGE3ZC00MTIzLWE0ZjMtNjQyNjlkMmMzODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZfVQc6NpbrjXMfmzoOMIqhzwZahSI73KHQP a5NozfxHlwYF0MKSRhdn92BXkxQkQLC1YCYG+RH5zEBYmVfkce4eRHPHZ/panUsQ AJlHzibibaRhvew2DtdhGPDVbEZ3dLpof9k+QFwO2RA0MFzO5d2PUdsYasSIO05l Omp/CjKs3v906SnH3f00kr/8fqU9KIScl97Qj3HEQ3ArX26f4f+6BDflSYNEvTJ+ sUyg3MSh033jUTvc6uLCNcvdC74XFe2rrKw8x8rb8kHVozhz+RrLQzXO9w4ooms4 VopScx/HDhbi+lGL8jSs9ABF6Jh+LLZqSD+KyPs7h1UhN5AG2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG5paof1Pgr1R4uq5Hqbr6dgm3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg5ZGU4NTQtM2JkMC0z ZGFhLTg0MjctY2U0NTc4MDQ2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRXzNXvn4pa0s0DNo5dwxcKMXCt/dUrsfH2DbV8ML6Iq8E+AJbGIX5T WXmPG+2b+zbNbTdZaq79EV3P5aMU2+7Wf7SGGSDzYr9WBjvNP8jR0F6CMkx7My7E zP5fKUDxe6oX6yfFnHpzhsQtzYaIhcPbNkad3TTMpw6LUmm28hlY3bdkCFmmD72D /ucjqrbh6ti406mBJ0L6pVzciF1zhSE4mE9f3/Lcy90F2CSuml+KxXsS6+yMtGnK anJoWmcI7hb8Yp9QLECdsFSU+h3w6HTFf7A+pE9SxTRMy3Rr5xLOuTuxiRhBsi6d L2zbGNznM3MBNbqUvh9NwTRpEWqz9Ss= -----END CERTIFICATE-----Generated at Thu Dec 25 22:19:30 2025 by rpki-client