This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa
File: 293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa (raw, json)
Hash identifier: KYokAxwklYpYZv/h62yXSGgmOSwOk4SX7+43ClaEqCE=
Subject key identifier: B9:65:A7:80:D3:F1:34:5F:17:61:88:D8:2E:53:89:50:7A:DF:1E:D2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C487155A73FC6BC45D1C1C480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 15169
IP address blocks: 64.233.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:55:a7:3f:c6:bc:45:d1:c1:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=8a32fa53-9c59-44af-80ab-e29c91429594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:a7:c1:12:44:f7:05:28:b7:1a:7c:d8:49:
f2:20:4f:75:e3:b0:d6:df:7a:84:74:1b:4c:ea:62:
1a:cd:46:c0:2a:b6:6f:2f:bd:de:87:85:5a:cf:f1:
8d:56:65:d2:b8:0e:cd:25:82:55:3b:07:04:15:6a:
fd:87:76:95:fa:85:25:39:1b:a3:cf:c9:92:ec:17:
be:76:1d:bc:ad:39:21:f6:6f:10:0d:4d:a4:94:62:
b3:9a:80:ca:e6:fa:ac:90:b5:51:31:a9:4d:ca:02:
32:a0:e5:59:d7:a3:e4:7c:7f:f7:44:b8:6c:c7:d3:
4c:9e:2d:7c:5b:bc:38:a7:4b:c8:c2:f0:ee:45:e3:
d3:d7:fa:dc:f1:3f:a9:d4:9d:5c:f5:2a:30:36:b5:
d0:e5:ef:b3:e6:0c:c8:3c:8a:37:a7:26:dd:ec:6e:
37:39:99:9e:4e:5b:f9:bf:57:e2:85:f0:43:69:27:
b1:b9:82:13:a3:6a:73:00:e0:27:5d:24:65:2d:75:
1e:17:b3:41:3d:fa:b6:e1:05:63:88:16:5a:95:89:
51:6b:42:f2:fe:08:87:08:e1:3a:0b:24:56:d2:99:
ce:71:ba:48:68:36:59:b4:08:ce:ca:85:b1:38:c0:
2d:3b:86:de:1b:1c:ae:f9:aa:ae:35:e4:3d:52:dc:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:A7:80:D3:F1:34:5F:17:61:88:D8:2E:53:89:50:7A:DF:1E:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:9b:c4:9a:7f:37:72:c6:6d:f3:1f:61:20:fc:ac:19:b1:b4:
40:d8:df:5d:2a:8b:51:6f:bc:f5:e3:b0:20:4a:1a:63:ed:88:
52:09:5e:5a:48:e8:46:7d:a8:a4:b7:e0:1a:aa:95:e5:62:f7:
f7:9a:8c:51:96:76:8f:03:0e:c2:fc:fe:ad:11:3f:ad:9d:43:
09:42:0e:7e:65:95:94:8a:a5:18:a1:08:4a:00:2e:73:55:63:
58:ac:af:de:c2:28:f4:5b:52:94:0e:7a:f5:ae:70:e2:87:7e:
28:8d:b2:59:0e:bd:58:71:cf:34:c4:3b:95:ab:54:63:c9:0c:
87:65:01:f8:e7:f6:f1:26:09:77:f1:bc:34:a0:f7:4c:92:57:
9b:b1:e5:d6:60:95:70:4a:70:3e:9d:ea:33:7b:a6:ba:40:c2:
d8:6b:ca:f6:20:c0:1c:25:21:5a:66:cc:be:93:77:62:9a:38:
43:1f:d9:55:92:38:a3:9f:06:8d:5a:a7:7c:7e:f4:d2:a7:60:
98:8a:11:ec:7f:46:10:a7:79:26:10:e3:b7:c4:08:6f:06:9e:
e6:31:a7:98:48:78:a7:4f:49:ab:76:81:58:9a:bf:ea:e9:6e:
8b:e5:26:58:e5:8c:35:4d:41:7b:03:66:ba:64:a7:fc:35:1a:
df:88:a7:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcVWnP8a8RdHBxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk
OGEzMmZhNTMtOWM1OS00NGFmLTgwYWItZTI5YzkxNDI5NTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1inwRJE9wUotxp82EnyIE9147DW33qEdBtM
6mIazUbAKrZvL73eh4Vaz/GNVmXSuA7NJYJVOwcEFWr9h3aV+oUlORujz8mS7Be+
dh28rTkh9m8QDU2klGKzmoDK5vqskLVRMalNygIyoOVZ16PkfH/3RLhsx9NMni18
W7w4p0vIwvDuRePT1/rc8T+p1J1c9SowNrXQ5e+z5gzIPIo3pybd7G43OZmeTlv5
v1fihfBDaSexuYITo2pzAOAnXSRlLXUeF7NBPfq24QVjiBZalYlRa0Ly/giHCOE6
CyRW0pnOcbpIaDZZtAjOyoWxOMAtO4beGxyu+aquNeQ9UtxTcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLllp4DT8TRfF2GI2C5TiVB63x7SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkzYjllODYtZjRmNi0z
MzNiLTgyNTItMGUyOGJiYjNhOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2bxJp/N3LGbfMfYSD8rBmxtEDY310qi1FvvPXjsCBKGmPtiFIJXlpI
6EZ9qKS34BqqleVi9/eajFGWdo8DDsL8/q0RP62dQwlCDn5llZSKpRihCEoALnNV
Y1isr97CKPRbUpQOevWucOKHfiiNslkOvVhxzzTEO5WrVGPJDIdlAfjn9vEmCXfx
vDSg90ySV5ux5dZglXBKcD6d6jN7prpAwthryvYgwBwlIVpmzL6Td2KaOEMf2VWS
OKOfBo1ap3x+9NKnYJiKEex/RhCneSYQ47fECG8GnuYxp5hIeKdPSat2gViav+rp
bovlJljljDVNQXsDZrpkp/w1Gt+Ip4U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:38 2026 by rpki-client