This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa
File: 1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa (raw, json)
Hash identifier: 5UPG1c1b9euGYEhVcl2Dji0F75GMGxUfFV8PnlPqAX4=
Subject key identifier: D4:0D:55:AF:65:62:3C:88:C0:2F:FA:4B:FC:A1:4D:92:0F:2C:7B:36
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C48714FBD21AE7C3CC4920280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 15169
IP address blocks: 70.32.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:4f:bd:21:ae:7c:3c:c4:92:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=d8aa238b-6a0f-4dd3-ab56-3b1271ab71da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:e8:31:6d:a1:42:7e:b6:f6:24:69:1b:cd:
22:07:ab:2e:a4:21:dd:cd:c0:72:30:77:6c:40:1e:
5a:dd:ba:d9:63:dc:98:5b:28:a6:88:02:c5:54:0a:
58:76:8d:09:a8:63:61:34:e6:80:d7:67:7a:83:ac:
b9:e3:96:ae:56:1a:23:87:92:16:38:04:c7:4c:1f:
a4:4f:6c:a6:7b:3f:87:a0:c2:79:09:22:07:70:96:
ad:03:cd:99:55:6d:55:6f:af:01:fd:dd:24:f6:c4:
0a:c6:88:c8:5b:00:be:5f:69:6d:e6:20:ef:64:78:
e5:8a:6d:36:19:d9:0a:2c:8b:6c:37:c1:24:86:96:
47:e3:e4:0a:77:a5:c6:40:f3:55:79:1e:ea:15:dd:
89:04:cf:9d:45:ea:f1:8f:17:93:a7:ba:81:a3:c2:
8f:d5:72:f2:56:47:5a:82:77:08:50:4d:26:bc:2d:
c1:4c:17:bd:f6:2f:c7:76:47:39:f9:eb:7b:a8:8e:
b9:58:28:f7:a8:ae:91:5d:f3:f0:6c:ec:c4:9e:c5:
23:d8:fa:12:54:d5:25:4e:fb:bd:99:50:49:8d:99:
d8:1d:a3:a3:68:1f:fe:62:f7:af:a5:4a:d3:b3:9b:
3f:40:56:21:74:3f:9f:85:f9:75:ce:2b:39:18:46:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:55:AF:65:62:3C:88:C0:2F:FA:4B:FC:A1:4D:92:0F:2C:7B:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:40:89:95:81:90:4a:b6:d1:9a:5f:83:96:40:ae:0f:01:4c:
ea:bf:3f:be:99:29:22:77:a5:0f:e6:86:34:41:58:0c:29:d7:
1c:6d:3d:ff:8a:1b:4b:36:ad:04:85:57:9a:6e:b6:29:0b:44:
53:99:a9:d7:4c:7d:2f:61:b2:8c:4b:5b:aa:ec:22:16:7c:f0:
b8:d8:9e:95:a0:05:c1:bc:8e:84:b3:54:4d:b6:c4:2e:80:93:
35:32:32:e6:d8:c6:36:d1:6c:f4:6d:4c:a3:e4:76:e0:d7:0a:
15:3b:43:c7:84:99:04:f4:29:46:af:99:38:1e:9b:cf:79:e9:
28:81:06:89:02:0b:3b:a5:f3:36:5a:cb:4b:ee:53:c5:33:b6:
c2:81:91:0c:6f:c6:cc:d7:63:e9:a5:0f:d0:33:52:da:3d:8a:
ba:4f:22:8b:fa:fb:2e:ad:bd:72:38:83:d2:2a:ea:af:41:f4:
50:e1:b4:1f:5d:68:fc:78:e6:a1:94:a2:b4:48:76:a6:5b:9a:
55:7c:93:93:d4:4c:33:70:38:c5:8e:58:47:56:0c:77:4a:72:
fe:d3:f8:6c:25:e8:b0:cb:c0:51:6a:3c:55:fa:e6:36:ec:70:
7a:48:cb:d3:32:f4:8c:2c:32:52:93:43:a2:cb:e0:f5:9e:42:
f0:06:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:38 2026 by rpki-client