This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json) Hash identifier: DZ9nOgJmrQ5+nTtHj3wr0Noz5k5dGIwl4LbfScwNKWE= Subject key identifier: 89:4A:F0:49:F0:AD:CC:39:69:1E:19:DD:71:62:ED:AD:0B:D7:25:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C487174D0462B483AF7CC5F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 70.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:74:d0:46:2b:48:3a:f7:cc:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=2725d9db-1fb8-4acf-8c7a-23bac3c9f8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:98:51:3a:c0:d1:9e:ea:4f:30:ab:1b:6b: 0b:8f:c7:6c:f5:a2:7f:f0:44:94:ca:1a:24:54:d4: 7d:04:2f:53:d2:d4:08:5d:13:35:20:80:da:6f:3f: 36:af:22:54:3d:e5:be:f3:70:e1:0f:f3:72:97:53: 29:55:d5:7a:79:8f:d1:36:9b:5f:e4:fb:50:bc:f5: 56:ce:53:5c:03:df:21:0d:31:18:2f:35:30:53:0f: 8c:5e:d7:e0:7d:9a:0d:0e:46:00:1e:be:d7:5c:c8: 09:a2:40:e1:3d:07:95:09:33:74:00:a7:a4:bc:eb: 88:77:75:f7:c3:a6:e4:20:aa:0f:45:82:80:94:43: d6:ca:94:cf:21:29:af:ae:fa:e1:b0:80:28:a9:1f: f5:86:56:eb:09:ed:f2:26:f0:11:aa:ae:bb:e3:1e: 7d:98:a1:2a:7e:18:19:fb:14:af:d9:4e:8d:57:57: b3:51:5c:c8:f2:19:33:0d:37:22:00:31:81:78:94: 5b:a8:1d:57:0f:a7:cf:f6:cc:aa:c4:7b:6b:33:46: a6:b7:50:b4:53:08:5d:41:58:a4:46:9a:6f:bc:67: 82:1c:99:e4:fd:75:cf:32:16:6a:ca:5f:32:f9:f0: a5:71:3e:30:47:20:be:c8:fc:9e:ea:f1:73:a7:89: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4A:F0:49:F0:AD:CC:39:69:1E:19:DD:71:62:ED:AD:0B:D7:25:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c0:5b:3d:3d:a2:98:eb:25:2b:67:fe:62:1c:55:b8:c6:9a: 1b:f5:c5:55:83:30:3a:10:a8:fe:0d:b7:3f:ce:8f:71:43:1e: 5d:ed:32:9e:15:ae:1e:8d:10:78:51:75:a2:b5:51:8e:e5:7d: 17:54:07:d3:ea:21:50:9d:ed:4b:06:fd:cc:53:9d:99:f0:91: 21:a7:01:95:11:cf:7c:7d:f0:1f:e1:3f:00:47:e4:a5:1a:d9: f7:fe:54:30:42:6d:3e:13:51:1f:b2:fc:d3:01:ec:81:77:d0: 71:49:2d:87:8d:9a:f8:2c:19:d9:12:62:25:e4:3c:ce:a7:93: ce:a9:93:2c:b8:1e:19:9d:a2:fb:48:26:68:5f:9b:de:24:41: 43:50:9b:4c:c2:f2:8e:cd:cf:a5:c7:b2:26:bf:d7:ce:80:f6: 82:ce:72:b5:0a:a7:30:5b:d4:c1:33:da:ac:31:78:9e:2d:a9: 32:20:c2:42:b1:10:f7:ad:93:1a:19:07:81:ac:32:d4:13:b3: f0:ff:5c:65:0d:87:8f:48:98:b4:5e:10:49:7c:cc:73:13:5e: 2e:a4:9d:69:60:ca:fd:12:56:6f:02:10:13:19:19:7a:55:a0: f1:6f:b2:01:24:83:ee:77:c6:05:bb:84:86:81:39:ab:7c:62: 68:0e:f8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcXTQRitIOvfMX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MjcyNWQ5ZGItMWZiOC00YWNmLThjN2EtMjNiYWMzYzlmOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu+YUTrA0Z7qTzCrG2sLj8ds9aJ/8ESUyhok VNR9BC9T0tQIXRM1IIDabz82ryJUPeW+83DhD/Nyl1MpVdV6eY/RNptf5PtQvPVW zlNcA98hDTEYLzUwUw+MXtfgfZoNDkYAHr7XXMgJokDhPQeVCTN0AKekvOuId3X3 w6bkIKoPRYKAlEPWypTPISmvrvrhsIAoqR/1hlbrCe3yJvARqq674x59mKEqfhgZ +xSv2U6NV1ezUVzI8hkzDTciADGBeJRbqB1XD6fP9syqxHtrM0amt1C0UwhdQVik RppvvGeCHJnk/XXPMhZqyl8y+fClcT4wRyC+yPye6vFzp4kxPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlK8Enwrcw5aR4Z3XFi7a0L1yVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPAWz09opjrJStn/mIcVbjGmhv1xVWDMDoQqP4Ntz/Oj3FDHl3tMp4V rh6NEHhRdaK1UY7lfRdUB9PqIVCd7UsG/cxTnZnwkSGnAZURz3x98B/hPwBH5KUa 2ff+VDBCbT4TUR+y/NMB7IF30HFJLYeNmvgsGdkSYiXkPM6nk86pkyy4HhmdovtI Jmhfm94kQUNQm0zC8o7Nz6XHsia/186A9oLOcrUKpzBb1MEz2qwxeJ4tqTIgwkKx EPetkxoZB4GsMtQTs/D/XGUNh49ImLReEEl8zHMTXi6knWlgyv0SVm8CEBMZGXpV oPFvsgEkg+53xgW7hIaBOat8YmgO+Lk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:27 2026 by rpki-client