This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa File: 43659337-d3a9-39a2-9081-bbcafeb0d57d.roa (raw, json) Hash identifier: 1ZhHqnW61YkwCcovD51rzrYpjZrcXHCleTcIMbUbhD0= Subject key identifier: 16:C9:AC:26:F5:20:F3:15:DF:97:74:4A:B6:E9:2B:D5:1F:8F:27:FB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C4871A4ED517CE9FD4C3EF540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 70.32.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:a4:ed:51:7c:e9:fd:4c:3e:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=c70596f6-1ebf-4e06-939b-b9f7ce27016e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:44:d2:17:4c:70:c9:70:6c:de:cd:ce:1e: 89:64:5b:18:5f:74:ab:6f:70:89:4a:14:74:ba:70: f6:d0:60:45:1e:3c:3b:83:9a:20:e7:0b:c6:ad:0c: 67:73:e4:a2:f4:ec:69:bf:bf:5c:35:b3:81:c2:b3: 95:f6:b9:fe:d4:c8:70:50:91:81:37:38:2d:c3:f1: 5d:d2:3d:d9:e4:16:b4:67:4c:a2:66:6f:27:ef:38: 28:4e:86:50:ae:c7:f6:a4:8c:21:03:82:49:7b:fb: 12:3a:0f:28:db:c8:73:aa:0f:d4:73:56:ba:ee:60: 1c:d7:06:98:e1:53:08:4f:f7:dd:1f:f1:7c:45:4a: cc:45:3c:1a:65:d2:72:58:e5:91:30:de:c7:2e:3d: 3a:85:4d:04:68:93:8f:24:4b:fb:e2:88:60:76:06: f2:3d:f5:9a:fd:6d:e6:0c:bd:55:b1:91:fd:96:de: 93:32:57:67:96:13:f8:01:69:67:85:5f:8c:3c:88: e1:6c:58:71:51:44:f7:73:a6:4d:ce:5d:e5:84:62: 03:67:97:d6:d3:a6:fe:4c:de:a9:5a:60:92:dc:9e: 50:2e:14:e8:8a:0f:83:19:d4:db:67:62:c7:36:d5: a9:f6:6f:d0:94:21:4a:a8:6c:70:68:17:fb:95:7c: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C9:AC:26:F5:20:F3:15:DF:97:74:4A:B6:E9:2B:D5:1F:8F:27:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:53:21:7a:c8:78:7f:62:7e:75:7e:e0:fe:eb:54:41:b3:07: 3e:7d:b5:ff:68:41:12:81:c3:70:aa:b0:cb:e4:6c:2a:ef:fb: 2f:d6:44:e3:74:bd:a5:df:22:00:50:aa:32:50:4e:0e:83:94: 4a:66:75:f6:0b:2f:a9:82:c8:24:52:7b:2a:fa:bd:4d:d8:10: 81:a4:de:5f:9f:f5:fe:52:5d:36:e5:c0:ea:63:a0:bc:10:6c: 21:20:1f:47:9f:0e:21:54:9b:6c:41:36:6e:61:2e:dc:47:1d: 05:a3:d4:87:0f:2b:52:98:ca:4c:64:69:a7:c8:fc:62:5c:16: db:fd:a8:72:a7:8c:0a:ad:2a:67:eb:3c:56:ff:95:fc:c4:70: 57:90:e6:c3:a4:0b:2d:00:8e:a5:99:fd:00:64:fe:84:e7:53: 02:1e:c3:14:a3:70:2a:a9:12:6d:f8:bd:0e:83:64:e7:44:3c: 0a:e2:bc:e5:b9:22:86:fa:ca:ed:95:30:f6:ac:58:72:ac:88: 62:7d:0b:b8:ff:a7:92:70:aa:5e:06:2c:ac:cb:72:d0:f6:8b: b5:7d:2e:45:e4:89:25:ba:bf:38:72:9d:db:bb:a0:d0:22:0e: b1:f9:1b:11:06:ae:d6:fe:a3:81:60:4b:50:00:c0:cf:4f:ad: 2c:d1:2b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcaTtUXzp/Uw+9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YzcwNTk2ZjYtMWViZi00ZTA2LTkzOWItYjlmN2NlMjcwMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBVE0hdMcMlwbN7Nzh6JZFsYX3Srb3CJShR0 unD20GBFHjw7g5og5wvGrQxnc+Si9Oxpv79cNbOBwrOV9rn+1MhwUJGBNzgtw/Fd 0j3Z5Ba0Z0yiZm8n7zgoToZQrsf2pIwhA4JJe/sSOg8o28hzqg/Uc1a67mAc1waY 4VMIT/fdH/F8RUrMRTwaZdJyWOWRMN7HLj06hU0EaJOPJEv74ohgdgbyPfWa/W3m DL1VsZH9lt6TMldnlhP4AWlnhV+MPIjhbFhxUUT3c6ZNzl3lhGIDZ5fW06b+TN6p WmCS3J5QLhToig+DGdTbZ2LHNtWp9m/QlCFKqGxwaBf7lXzLzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbJrCb1IPMV35d0SrbpK9Ufjyf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDM2NTkzMzctZDNhOS0z OWEyLTkwODEtYmJjYWZlYjBkNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlTIXrIeH9ifnV+4P7rVEGzBz59tf9oQRKBw3CqsMvkbCrv+y/WRON0 vaXfIgBQqjJQTg6DlEpmdfYLL6mCyCRSeyr6vU3YEIGk3l+f9f5SXTblwOpjoLwQ bCEgH0efDiFUm2xBNm5hLtxHHQWj1IcPK1KYykxkaafI/GJcFtv9qHKnjAqtKmfr PFb/lfzEcFeQ5sOkCy0AjqWZ/QBk/oTnUwIewxSjcCqpEm34vQ6DZOdEPArivOW5 Iob6yu2VMPasWHKsiGJ9C7j/p5Jwql4GLKzLctD2i7V9LkXkiSW6vzhyndu7oNAi DrH5GxEGrtb+o4FgS1AAwM9PrSzRK10= -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:25 2025 by rpki-client