This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa
File: 407f53f0-2a9c-3136-9379-57a68568a38a.roa (raw, json)
Hash identifier: JZ6wjsbuWOogqM5KEKrnXDeXSEHcwGNnxPZPcLpZi+w=
Subject key identifier: C6:DA:D0:9B:5A:EE:F4:1A:BE:3A:AA:60:4F:4C:48:0A:56:4C:C8:A3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C45A7EB69FACFC21D5BECB310
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 15169
IP address blocks: 142.250.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:eb:69:fa:cf:c2:1d:5b:ec:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=182d3cf8-8706-4de8-a322-9ba7af75f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:84:d9:b2:22:ef:52:ea:06:11:9b:af:e6:
20:0b:4d:a2:ba:1f:4f:d1:36:97:0b:d4:47:e1:6e:
d8:c7:8a:27:eb:5a:4d:41:a0:9f:ac:e3:49:9d:83:
ba:c9:25:fc:ef:c7:f4:8a:b5:f5:fd:6c:68:d2:c0:
1a:6c:ca:d7:69:ec:ed:ff:65:b0:d6:9b:0b:74:6b:
d5:66:3e:62:9a:ba:6f:a0:07:8e:be:8b:e9:b3:5d:
6e:31:48:a3:44:ba:ac:27:e2:60:2c:fa:88:3f:2e:
ec:7e:9b:a7:c7:8b:5f:31:fb:01:ab:dd:2e:29:1c:
c3:e6:5c:2a:d3:8d:41:1c:f7:84:0e:aa:fc:b1:ec:
a4:ef:a5:f8:60:14:aa:bf:60:83:20:a1:ae:b8:ab:
8b:7e:e5:ef:21:e6:f4:f1:91:d7:96:ed:1b:d3:17:
3d:1d:47:f0:16:c5:09:6e:60:29:81:75:84:e1:14:
22:9a:62:c9:cb:cc:78:3a:2f:bd:3b:bc:41:be:10:
6e:f1:57:6e:2a:16:b1:07:7f:77:0a:83:c1:cc:6b:
05:d0:9d:58:64:31:a4:eb:0a:8a:19:85:a8:df:7c:
1e:56:11:ea:e8:66:c4:d8:41:31:b0:92:ed:ec:64:
70:bd:45:97:dd:9d:15:1c:74:56:b5:c1:15:04:01:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DA:D0:9B:5A:EE:F4:1A:BE:3A:AA:60:4F:4C:48:0A:56:4C:C8:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b7:5e:d2:ff:22:36:67:f8:1a:bd:5f:37:b1:80:e4:6f:a3:
6d:61:21:c3:56:1a:bb:67:5f:c1:74:1b:7c:d6:9b:05:cb:82:
b3:18:17:55:0d:90:8b:30:50:8e:cb:40:ec:b1:46:8d:a5:50:
a3:e5:ea:54:a6:53:92:0e:c0:d4:69:ad:72:1a:3c:23:ee:bb:
27:db:f3:2e:84:b8:12:82:ab:92:cb:75:3d:6a:1b:5e:36:f8:
2b:7c:49:27:0c:33:08:e9:3d:5a:98:94:27:e6:f8:db:13:ed:
45:07:14:0b:4e:99:ed:6a:7d:37:85:3b:54:f3:52:e7:29:2b:
86:80:f0:c5:14:14:ee:57:be:7e:c4:73:09:35:61:af:54:5a:
79:5f:f0:5a:50:16:fd:d0:2a:d6:4d:90:28:08:6c:76:4e:4f:
43:c2:c9:15:8a:66:a9:2b:a2:1d:c5:46:7a:92:2f:de:e7:47:
f9:3a:fe:dc:dc:0b:e2:b9:ec:fc:33:46:46:97:db:58:09:84:
e6:48:00:54:9d:46:ac:44:9e:39:44:55:d3:c3:f1:af:64:bc:
34:0d:de:91:11:35:81:6c:af:e3:a9:3e:fb:df:30:a1:06:0b:
f5:87:c0:bf:1e:02:65:9f:cb:99:26:02:8d:77:39:6e:b1:3e:
fd:3c:c0:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp+tp+s/CHVvssxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
MTgyZDNjZjgtODcwNi00ZGU4LWEzMjItOWJhN2FmNzVmMjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzqE2bIi71LqBhGbr+YgC02iuh9P0TaXC9RH
4W7Yx4on61pNQaCfrONJnYO6ySX878f0irX1/Wxo0sAabMrXaezt/2Ww1psLdGvV
Zj5imrpvoAeOvovps11uMUijRLqsJ+JgLPqIPy7sfpunx4tfMfsBq90uKRzD5lwq
041BHPeEDqr8seyk76X4YBSqv2CDIKGuuKuLfuXvIeb08ZHXlu0b0xc9HUfwFsUJ
bmApgXWE4RQimmLJy8x4Oi+9O7xBvhBu8VduKhaxB393CoPBzGsF0J1YZDGk6wqK
GYWo33weVhHq6GbE2EExsJLt7GRwvUWX3Z0VHHRWtcEVBAFdfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMba0Jta7vQavjqqYE9MSApWTMijMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDA3ZjUzZjAtMmE5Yy0z
MTM2LTkzNzktNTdhNjg1NjhhMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACC3XtL/IjZn+Bq9XzexgORvo21hIcNWGrtnX8F0G3zWmwXLgrMYF1UN
kIswUI7LQOyxRo2lUKPl6lSmU5IOwNRprXIaPCPuuyfb8y6EuBKCq5LLdT1qG142
+Ct8SScMMwjpPVqYlCfm+NsT7UUHFAtOme1qfTeFO1TzUucpK4aA8MUUFO5Xvn7E
cwk1Ya9UWnlf8FpQFv3QKtZNkCgIbHZOT0PCyRWKZqkroh3FRnqSL97nR/k6/tzc
C+K57PwzRkaX21gJhOZIAFSdRqxEnjlEVdPD8a9kvDQN3pERNYFsr+OpPvvfMKEG
C/WHwL8eAmWfy5kmAo13OW6xPv08wHU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:11 2026 by rpki-client