This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa File: 25d1bf45-3890-342f-9d44-7731a5a90a08.roa (raw, json) Hash identifier: dkJtIe9+xyCJxb+yeS5EIEOip0qGqnDob4d6+ydjQsM= Subject key identifier: 55:7A:FC:6A:FE:7E:A4:18:64:CF:57:03:3A:90:26:4A:DF:E5:74:7C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C487138C4F7C0B69A43D6C540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 74.125.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:38:c4:f7:c0:b6:9a:43:d6:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=30a5ba9a-a411-4b12-9d22-2f7dbc8bafd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dd:15:59:ca:b5:47:34:2d:8f:17:4a:9e:27: b9:2f:71:c1:11:f1:5b:34:98:4b:5f:27:0f:74:b1: 28:35:45:6e:30:9e:1d:81:4d:d0:63:45:18:ee:75: bf:a4:c2:c1:85:31:63:85:a7:b7:4a:7e:52:60:00: f2:bd:62:ed:82:b3:fc:bb:5b:09:33:f0:91:bc:13: 4e:c5:b9:38:9a:58:83:82:6c:6c:ba:e9:a0:5d:14: 97:bb:19:12:e0:e1:b7:f3:25:03:eb:6f:cb:cc:1a: 1f:75:c3:7f:88:23:4e:e1:14:e7:26:b5:44:c0:27: 16:37:5d:ad:94:08:24:76:94:29:40:27:2a:cf:8e: b3:ea:5f:c8:7d:57:db:41:0a:3f:93:26:5e:5d:cc: 80:57:5c:f5:dc:86:85:57:d7:84:38:c3:c5:25:e7: 5e:2d:1d:67:b4:b0:64:d9:0f:2c:05:a3:f8:50:a8: 76:7a:27:77:6e:38:43:18:92:4d:ef:f7:84:65:71: 72:e2:0b:ef:63:f5:96:0e:18:ce:be:a0:a6:d2:90: cd:8f:3a:c1:29:00:4a:30:2a:81:79:62:8c:b7:19: bd:ea:d2:2b:10:f8:fa:ba:80:f4:ba:f3:e0:75:05: 97:ce:82:f0:a2:0a:ea:74:7e:05:dd:b3:05:93:38: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:FC:6A:FE:7E:A4:18:64:CF:57:03:3A:90:26:4A:DF:E5:74:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ba:43:23:57:82:59:d2:7b:2a:58:c5:66:82:e3:0b:aa:83: 04:87:fa:82:9e:cc:74:34:4e:31:74:d8:f7:eb:9f:c0:16:0c: 0c:1c:23:00:74:2d:a0:f8:16:ac:aa:4e:a6:e8:88:94:c4:23: 00:29:c3:ec:31:fd:f7:8c:7c:0a:df:cf:67:e8:35:04:35:33: 02:12:e1:ce:da:0e:76:ed:53:88:86:09:ad:d1:27:72:79:03: 7f:80:e3:d1:ae:6c:1c:11:56:24:7b:bb:1e:f4:88:16:fd:e7: 82:aa:4f:8b:db:62:64:73:d9:ef:07:49:9b:b5:96:ef:7f:16: 60:fc:e7:99:93:2d:1c:44:a9:f0:63:74:7c:97:76:8c:2c:5b: b7:4a:62:31:e0:5d:3f:46:be:f7:7c:94:a8:53:7e:79:0b:d4: 20:b0:f0:8c:e0:69:64:0d:43:eb:bd:fd:bb:54:7c:d2:89:af: 20:cc:e4:5b:5b:8d:f5:d7:04:bc:8c:3a:37:25:41:23:a0:ac: f0:d7:3b:39:ab:8c:2e:02:e8:75:59:f9:5d:d2:fe:8a:ca:e3: 6c:e5:bc:07:6f:30:b3:a7:9a:6a:81:4f:6e:11:32:8e:80:b3: e3:d5:24:ed:42:91:20:75:bd:d4:9e:d2:61:28:94:e6:a7:1b: 5e:56:5d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcTjE98C2mkPWxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MzBhNWJhOWEtYTQxMS00YjEyLTlkMjItMmY3ZGJjOGJhZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd0VWcq1RzQtjxdKnie5L3HBEfFbNJhLXycP dLEoNUVuMJ4dgU3QY0UY7nW/pMLBhTFjhae3Sn5SYADyvWLtgrP8u1sJM/CRvBNO xbk4mliDgmxsuumgXRSXuxkS4OG38yUD62/LzBofdcN/iCNO4RTnJrVEwCcWN12t lAgkdpQpQCcqz46z6l/IfVfbQQo/kyZeXcyAV1z13IaFV9eEOMPFJedeLR1ntLBk 2Q8sBaP4UKh2eid3bjhDGJJN7/eEZXFy4gvvY/WWDhjOvqCm0pDNjzrBKQBKMCqB eWKMtxm96tIrEPj6uoD0uvPgdQWXzoLwogrqdH4F3bMFkzi9qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV6/Gr+fqQYZM9XAzqQJkrf5XR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjVkMWJmNDUtMzg5MC0z NDJmLTlkNDQtNzczMWE1YTkwYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi6QyNXglnSeypYxWaC4wuqgwSH+oKezHQ0TjF02Pfrn8AWDAwcIwB0 LaD4FqyqTqboiJTEIwApw+wx/feMfArfz2foNQQ1MwIS4c7aDnbtU4iGCa3RJ3J5 A3+A49GubBwRViR7ux70iBb954KqT4vbYmRz2e8HSZu1lu9/FmD855mTLRxEqfBj dHyXdowsW7dKYjHgXT9Gvvd8lKhTfnkL1CCw8IzgaWQNQ+u9/btUfNKJryDM5Ftb jfXXBLyMOjclQSOgrPDXOzmrjC4C6HVZ+V3S/orK42zlvAdvMLOnmmqBT24RMo6A s+PVJO1CkSB1vdSe0mEolOanG15WXRQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:30 2026 by rpki-client