This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0b14067-ff13-3769-bfd7-3dbc59b58e0c.roa
File: c0b14067-ff13-3769-bfd7-3dbc59b58e0c.roa (raw, json)
Hash identifier: 2xA8bcVjiQpfyfNI7eiy1Q0my4mJ/LEhnbHX7TRi4z8=
Subject key identifier: 60:4E:D9:41:71:3F:7C:BB:FA:BB:38:77:92:B5:B2:10:58:A6:A6:04
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C48716CED7C3033CA2F304F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0b14067-ff13-3769-bfd7-3dbc59b58e0c.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 15169
IP address blocks: 74.125.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:6c:ed:7c:30:33:ca:2f:30:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=03712bcf-4e9a-45ba-8744-5c417175eb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:57:71:4a:33:09:fe:b0:b8:77:c6:6f:e2:
69:cb:43:03:d5:8e:4d:c1:8c:2f:f3:aa:48:25:fb:
9e:eb:db:e0:99:61:91:3e:0e:12:40:b9:ae:8e:51:
90:b6:88:ae:a5:d2:c9:21:22:2c:f1:a8:93:fb:f5:
a7:06:1a:5c:98:7e:ad:50:c7:28:e7:f5:9f:c6:55:
db:69:59:fe:78:34:0d:6e:63:2c:d0:29:d2:ca:c6:
fe:7f:d9:03:4c:0f:ea:6b:b9:b9:a6:dc:37:fc:71:
1d:c1:d7:32:a0:55:b8:22:a7:e8:61:d0:36:24:b7:
24:ab:78:24:ff:f1:31:4c:62:71:f9:0b:f1:79:9f:
64:20:a7:90:5d:78:28:bd:e9:59:5e:5d:11:24:a1:
00:07:d2:51:a4:2e:4f:e7:6a:9f:29:a3:a0:5e:c5:
05:be:91:f9:78:0b:b2:91:e7:50:09:cd:6f:11:23:
d9:15:9b:9b:69:37:7a:2a:9f:2d:76:15:e2:7a:eb:
da:a9:3f:bc:aa:1e:43:6f:33:23:cc:b4:ad:e6:7e:
d7:97:e6:b5:09:a4:f0:7c:b2:68:58:2e:92:c7:06:
2d:db:76:57:86:38:42:cc:fc:c4:e1:0c:49:02:cb:
b1:3d:83:7c:85:de:08:30:64:8e:7e:80:bf:18:d1:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:D9:41:71:3F:7C:BB:FA:BB:38:77:92:B5:B2:10:58:A6:A6:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0b14067-ff13-3769-bfd7-3dbc59b58e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:12:77:b3:35:6c:46:88:6a:7a:65:49:0d:d3:b8:94:84:85:
59:15:7d:dc:3b:79:06:c4:45:32:12:5e:d3:53:8d:73:70:a1:
0d:f8:0e:68:f3:71:96:fd:e6:96:75:0f:24:10:bf:76:25:eb:
b4:51:ab:8b:1f:ea:42:a7:31:c8:3d:2b:84:33:b6:ec:cd:c1:
90:88:d2:ce:1a:b1:f7:80:0f:61:b7:88:18:30:88:72:73:84:
79:68:ed:9d:d0:91:c6:f7:8f:76:fb:a2:64:d5:1c:d4:4e:3c:
22:d5:47:31:a6:ed:07:4b:37:7a:00:df:af:5e:4c:0c:d8:ec:
07:0e:4b:94:3a:ca:49:37:08:ae:2e:35:9e:ac:ae:f0:f5:c4:
d4:a5:41:f7:5c:60:9a:91:73:ef:53:e6:cd:d9:5c:3a:ab:61:
c1:6a:47:dc:46:bd:0b:ae:ed:d4:29:a1:64:cd:93:2b:86:97:
86:cd:00:e9:d5:13:f8:4a:ec:0f:2f:7b:aa:98:8f:1c:6d:15:
22:6d:99:f7:be:f2:70:32:46:59:66:e4:1f:fc:2b:4d:c2:97:
75:b2:d9:02:24:15:c9:35:44:96:86:fb:f3:83:47:6b:7c:e6:
5c:1b:48:96:6a:be:67:cf:00:8b:68:6e:71:d0:66:4a:32:05:
c2:a8:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:16 2026 by rpki-client