This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa File: 60899ba4-2e02-3634-b503-2d70ad64f496.roa (raw, json) Hash identifier: twfKumz0b2YGDucpcRZJw1R3alZsJ3ohgnw9BCZ2bzs= Subject key identifier: 43:39:2F:49:62:34:0E:99:6C:2B:05:E3:87:FC:27:1F:89:C6:2E:6D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C4871593D0528DE8357288EC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 70.32.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:59:3d:05:28:de:83:57:28:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=488d7b58-6bb6-4c4f-9e06-e5330a759e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:0a:16:ab:7f:07:33:81:ae:27:08:fa:e7: f4:fc:d4:84:83:a5:54:0b:17:11:4c:dc:6f:20:40: 03:1a:76:76:40:ef:8a:09:08:8b:10:21:3b:36:21: 09:34:9e:01:4f:83:3f:41:18:ed:cd:40:e4:b5:41: 24:f7:4a:27:d8:2f:94:1f:33:d7:9f:03:43:e0:e2: 17:bc:61:4b:01:7d:b4:ea:ce:21:6b:40:ba:b9:46: 24:34:46:ee:66:0f:ca:61:d9:fd:bb:53:fa:5f:1e: 28:50:b3:cd:45:f8:bb:7f:5e:e2:f2:0c:86:e6:1d: 84:a6:b1:f0:6a:cc:f3:4b:46:49:aa:4e:57:9b:d0: 77:2d:7a:84:d7:db:ad:5a:42:a5:c7:f4:1b:52:11: 34:fa:0f:fc:82:ed:ce:b2:38:ec:51:4c:14:c3:d7: 9f:7d:02:6b:9d:2c:72:c0:6d:72:05:4f:1a:57:c5: de:9a:2b:8d:53:3a:84:3a:92:eb:3d:a2:f9:36:68: fe:e3:89:45:e0:23:a1:ea:24:10:d6:81:db:d4:9e: af:7d:e3:dd:b6:c7:e6:bf:6d:79:3b:0e:b7:95:7a: c4:91:9c:5b:d3:08:a2:8c:64:5a:63:38:99:5e:cf: 9b:91:19:e1:13:a3:0f:c1:fb:dd:15:97:4a:dc:08: 21:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:39:2F:49:62:34:0E:99:6C:2B:05:E3:87:FC:27:1F:89:C6:2E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:93:fd:72:eb:7d:9c:19:29:cb:e1:a3:cd:63:e5:77:94:1b: 5b:c6:ae:70:e1:6b:0b:d4:37:a6:7f:32:22:79:01:b5:dc:8f: 1b:5f:f0:d4:b7:17:b9:3f:a6:0b:bf:8b:ca:94:ba:d1:79:49: 46:da:92:f7:3b:38:e5:4f:cf:ea:81:65:98:58:67:03:e2:39: af:ec:21:35:72:24:81:cf:bd:8b:31:e1:89:6f:ab:3b:d3:b2: 54:fd:33:ba:eb:21:42:50:52:40:a9:ee:48:0f:b6:67:3e:7d: 36:d0:5b:33:ee:5c:3e:57:69:2c:ea:85:29:4d:33:cb:a4:cd: 29:47:a2:6a:d3:97:3a:59:23:ed:9c:2c:06:d1:c9:86:e1:42: 33:e7:a8:6e:22:d0:e0:d1:c7:49:d0:cd:06:d7:10:9e:16:cc: e1:c4:66:61:23:4e:a8:72:79:f6:10:6c:c0:66:ae:61:c2:2e: 23:6d:5b:83:97:1e:9a:09:c2:04:53:0b:4f:47:d3:54:c3:ef: 0e:f8:ee:70:81:a8:70:bb:9f:ed:a2:7d:9c:e0:c8:b4:72:09: aa:b3:dd:55:a2:8d:db:02:67:74:57:2c:83:38:bf:03:ad:55: 1c:a9:10:c5:44:81:34:f6:6f:3a:06:dc:02:29:e6:cd:31:27: 49:da:a7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcVk9BSjeg1cojsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NDg4ZDdiNTgtNmJiNi00YzRmLTllMDYtZTUzMzBhNzU5ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ0KFqt/BzOBricI+uf0/NSEg6VUCxcRTNxv IEADGnZ2QO+KCQiLECE7NiEJNJ4BT4M/QRjtzUDktUEk90on2C+UHzPXnwND4OIX vGFLAX206s4ha0C6uUYkNEbuZg/KYdn9u1P6Xx4oULPNRfi7f17i8gyG5h2EprHw aszzS0ZJqk5Xm9B3LXqE19utWkKlx/QbUhE0+g/8gu3OsjjsUUwUw9effQJrnSxy wG1yBU8aV8XemiuNUzqEOpLrPaL5Nmj+44lF4COh6iQQ1oHb1J6vfePdtsfmv215 Ow63lXrEkZxb0wiijGRaYziZXs+bkRnhE6MPwfvdFZdK3AghNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM5L0liNA6ZbCsF44f8Jx+Jxi5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjA4OTliYTQtMmUwMi0z NjM0LWI1MDMtMmQ3MGFkNjRmNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGT/XLrfZwZKcvho81j5XeUG1vGrnDhawvUN6Z/MiJ5AbXcjxtf8NS3 F7k/pgu/i8qUutF5SUbakvc7OOVPz+qBZZhYZwPiOa/sITVyJIHPvYsx4YlvqzvT slT9M7rrIUJQUkCp7kgPtmc+fTbQWzPuXD5XaSzqhSlNM8ukzSlHomrTlzpZI+2c LAbRyYbhQjPnqG4i0ODRx0nQzQbXEJ4WzOHEZmEjTqhyefYQbMBmrmHCLiNtW4OX HpoJwgRTC09H01TD7w747nCBqHC7n+2ifZzgyLRyCaqz3VWijdsCZ3RXLIM4vwOt VRypEMVEgTT2bzoG3AIp5s0xJ0nap+M= -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:36 2026 by rpki-client