This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json) Hash identifier: DtqB8NCBYoU86ZibykpXvinOds2xmxUzbnXokY+PcAQ= Subject key identifier: E9:C6:0F:43:D1:A4:8C:94:4F:DF:F0:5C:A9:36:39:E8:3A:BF:BB:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C4871432298D62E8FC747F500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 70.32.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:43:22:98:d6:2e:8f:c7:47:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=a1dbe0c3-4bf5-4f99-993c-f46f41db7425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:19:9c:69:6a:11:a4:d0:81:f4:6d:d1:df: 56:74:f6:94:16:2c:65:cd:3f:2e:a1:53:a7:d8:4b: 51:96:d8:38:a9:03:22:e4:42:5c:fa:ea:07:e1:06: 18:fb:23:fd:86:d9:b5:09:b1:9f:35:06:eb:1e:a6: 7e:1e:b8:06:38:a9:83:a4:c8:c3:b8:6f:4c:9e:2e: 15:11:df:06:fe:98:6c:fa:34:cc:68:e6:41:c4:37: 74:e1:87:16:60:90:b3:75:b7:af:73:07:7f:47:6b: 42:ad:e8:da:6d:06:be:2b:d8:94:66:cb:cd:0b:d4: d6:2c:f6:63:c0:79:26:03:46:ec:85:42:85:92:cf: 50:83:13:ae:5a:fb:39:28:be:32:82:91:20:85:ab: 43:a9:c9:c0:7b:b9:a4:4b:8a:c0:4b:c2:14:6c:4c: 31:9b:6d:ae:e3:70:09:5d:3a:e5:4d:a3:10:c2:42: 74:2f:1d:f1:1e:e5:9a:cb:ca:ea:aa:55:cd:09:a7: db:01:6d:02:44:76:72:53:78:ea:08:29:1a:ff:a6: 9d:f2:25:e9:81:74:b4:48:d0:4f:bc:4e:d0:1e:4b: f1:72:ec:3e:d5:40:90:00:b3:ae:a9:08:e7:96:23: 50:31:4b:4b:bb:2a:ce:89:30:c1:b6:a2:2a:ba:61: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C6:0F:43:D1:A4:8C:94:4F:DF:F0:5C:A9:36:39:E8:3A:BF:BB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7d:b8:e7:35:56:75:b0:62:e0:1a:22:b6:7e:59:2f:97:fb: b4:30:3c:1f:39:6b:0d:9d:25:b5:fe:84:9d:cb:57:e2:75:b0: c9:70:d3:21:03:69:e4:4a:bc:d8:73:8e:d6:36:89:bf:78:d6: 09:95:f2:24:d7:4e:ae:da:15:12:51:07:47:0a:81:b6:5d:47: 85:c0:ae:00:56:c7:31:62:c1:c0:ca:7e:67:31:de:d4:3e:8f: a8:ce:50:ae:3a:f0:3a:c2:a4:76:c3:4b:d0:c9:2b:4f:8b:65: 78:66:eb:f6:9e:dc:c3:70:16:67:41:cf:67:ad:83:4b:be:ba: cd:bc:2c:9d:53:30:73:c1:7c:85:c4:d3:2f:1e:35:9a:92:5d: f5:f5:2b:0d:64:e1:13:55:41:d4:c9:7a:f0:8c:65:00:56:5d: 61:80:17:ca:29:18:0e:ff:f3:d3:32:d4:98:a9:fe:f6:38:1f: 30:5b:08:d3:0a:59:9d:18:00:59:73:0c:37:1a:26:8d:8a:bb: fa:84:c0:10:e2:63:63:8b:b6:b9:81:5e:3e:5c:1e:45:51:6b: f0:96:47:71:01:75:0f:81:12:37:df:38:f3:34:9f:12:05:17: 0b:13:78:57:91:7b:78:51:5a:c8:31:dd:1a:59:1b:6c:35:cc: b2:c9:80:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcUMimNYuj8dH9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YTFkYmUwYzMtNGJmNS00Zjk5LTk5M2MtZjQ2ZjQxZGI3NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcQZnGlqEaTQgfRt0d9WdPaUFixlzT8uoVOn 2EtRltg4qQMi5EJc+uoH4QYY+yP9htm1CbGfNQbrHqZ+HrgGOKmDpMjDuG9Mni4V Ed8G/phs+jTMaOZBxDd04YcWYJCzdbevcwd/R2tCrejabQa+K9iUZsvNC9TWLPZj wHkmA0bshUKFks9QgxOuWvs5KL4ygpEghatDqcnAe7mkS4rAS8IUbEwxm22u43AJ XTrlTaMQwkJ0Lx3xHuWay8rqqlXNCafbAW0CRHZyU3jqCCka/6ad8iXpgXS0SNBP vE7QHkvxcuw+1UCQALOuqQjnliNQMUtLuyrOiTDBtqIqumExwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnGD0PRpIyUT9/wXKk2Oeg6v7uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FmMzI1NDItYzlmNS0z MTExLTkyYWYtODBlOTRhOTMxYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN9uOc1VnWwYuAaIrZ+WS+X+7QwPB85aw2dJbX+hJ3LV+J1sMlw0yED aeRKvNhzjtY2ib941gmV8iTXTq7aFRJRB0cKgbZdR4XArgBWxzFiwcDKfmcx3tQ+ j6jOUK468DrCpHbDS9DJK0+LZXhm6/ae3MNwFmdBz2etg0u+us28LJ1TMHPBfIXE 0y8eNZqSXfX1Kw1k4RNVQdTJevCMZQBWXWGAF8opGA7/89My1Jip/vY4HzBbCNMK WZ0YAFlzDDcaJo2Ku/qEwBDiY2OLtrmBXj5cHkVRa/CWR3EBdQ+BEjffOPM0nxIF FwsTeFeRe3hRWsgx3RpZG2w1zLLJgJs= -----END CERTIFICATE-----Generated at Wed Dec 24 13:10:20 2025 by rpki-client