This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa File: daf989db-caa5-35ae-bda5-779962f46d3b.roa (raw, json) Hash identifier: NxQc5b3Qt2yp+NgkkSInoYeTLIgxtb1hnSU7i86kWWo= Subject key identifier: DF:86:55:85:A2:7B:24:2D:F4:21:80:05:9E:06:81:01:66:A2:CF:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C48713BD677EAEC54E8E8D2D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 74.125.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:3b:d6:77:ea:ec:54:e8:e8:d2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=76482bf6-0128-4f83-8c56-bc7190db66d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:de:85:ca:45:68:3f:75:95:9d:75:c7:5d: 52:84:e6:dd:ab:04:99:0a:61:12:33:56:dc:ec:14: 40:86:d2:d9:09:da:04:3e:7f:60:8b:7d:96:41:4d: aa:9f:ab:60:5d:27:e8:51:fe:72:fd:73:9c:6b:49: b3:0f:e1:b1:f7:30:f7:fa:56:63:ac:b2:03:a7:2a: d6:04:41:0b:66:80:9a:ca:1a:98:a3:bc:ba:af:59: ba:9a:cc:87:5f:0a:04:22:0b:8c:42:50:fc:92:79: 97:a4:8e:2a:44:56:b1:b5:5b:69:56:58:42:80:43: d1:fc:18:cf:cf:12:90:13:eb:d2:d7:e2:83:9f:4e: 89:33:d2:d4:18:b2:15:be:c9:92:ce:b4:30:a4:11: cb:b9:4b:0b:4c:06:73:1d:1f:90:80:9e:59:34:5b: 16:ed:59:d4:06:21:bf:31:ea:80:f0:7e:31:17:c1: ac:50:93:48:fa:14:6e:ce:7e:6f:e1:9e:dd:50:d4: 5a:bb:02:1d:a5:9a:ff:32:fa:2e:80:d4:72:6d:5e: 1a:c2:0c:5b:21:b8:21:ec:54:07:d8:f3:1a:09:de: c6:e5:bf:bb:c1:8d:d7:c5:b1:27:08:a9:a1:28:8a: 62:88:b7:97:89:dc:f6:d9:32:68:36:1b:3b:e9:6b: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:55:85:A2:7B:24:2D:F4:21:80:05:9E:06:81:01:66:A2:CF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:99:a7:ff:ae:49:6d:05:09:1d:1b:88:cc:38:c6:7d:16:c8: 8f:46:00:34:fe:b1:79:d1:6b:3f:7e:9f:65:7e:90:1d:28:a4: 8f:22:ff:49:20:01:52:e4:86:56:84:62:d5:9a:2b:4b:1a:21: 28:93:1a:7e:05:50:c7:c2:fe:64:e5:0b:a1:92:47:4d:79:79: 2f:d1:cb:de:70:a5:6b:6e:c1:d3:58:97:78:a7:0e:2c:23:f8: 20:65:19:f5:b0:19:e4:d5:bc:96:29:10:fa:eb:93:db:b1:82: 39:45:05:5d:f9:b4:77:8e:a1:89:8a:3d:3e:34:45:f4:24:74: 04:2c:cb:e2:f1:09:ef:31:38:2b:a4:1a:cc:25:40:68:6d:f4: 83:a9:9c:c7:00:bb:33:93:2c:10:4a:59:18:de:f7:15:98:ee: f1:7f:3c:63:e4:09:f2:99:4c:06:f9:4d:f0:28:f8:b3:c6:d1: c9:53:5b:1a:9b:76:ef:4a:7b:60:b0:27:ef:e4:f0:4e:7c:34: 32:f4:30:6f:02:67:36:1e:29:57:db:b3:3e:43:a5:a0:a7:91: 4c:5b:d6:34:5c:13:c8:b5:eb:54:3b:c4:63:a6:08:34:70:02: 70:87:7a:7e:6d:bf:bd:0f:3b:c1:9d:42:fb:fa:4e:fb:29:4a: be:36:bc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcTvWd+rsVOjo0tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NzY0ODJiZjYtMDEyOC00ZjgzLThjNTYtYmM3MTkwZGI2NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDHehcpFaD91lZ11x11ShObdqwSZCmESM1bc 7BRAhtLZCdoEPn9gi32WQU2qn6tgXSfoUf5y/XOca0mzD+Gx9zD3+lZjrLIDpyrW BEELZoCayhqYo7y6r1m6msyHXwoEIguMQlD8knmXpI4qRFaxtVtpVlhCgEPR/BjP zxKQE+vS1+KDn06JM9LUGLIVvsmSzrQwpBHLuUsLTAZzHR+QgJ5ZNFsW7VnUBiG/ MeqA8H4xF8GsUJNI+hRuzn5v4Z7dUNRauwIdpZr/MvougNRybV4awgxbIbgh7FQH 2PMaCd7G5b+7wY3XxbEnCKmhKIpiiLeXidz22TJoNhs76Ws/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+GVYWieyQt9CGABZ4GgQFmos9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGFmOTg5ZGItY2FhNS0z NWFlLWJkYTUtNzc5OTYyZjQ2ZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6Zp/+uSW0FCR0biMw4xn0WyI9GADT+sXnRaz9+n2V+kB0opI8i/0kg AVLkhlaEYtWaK0saISiTGn4FUMfC/mTlC6GSR015eS/Ry95wpWtuwdNYl3inDiwj +CBlGfWwGeTVvJYpEPrrk9uxgjlFBV35tHeOoYmKPT40RfQkdAQsy+LxCe8xOCuk GswlQGht9IOpnMcAuzOTLBBKWRje9xWY7vF/PGPkCfKZTAb5TfAo+LPG0clTWxqb du9Ke2CwJ+/k8E58NDL0MG8CZzYeKVfbsz5DpaCnkUxb1jRcE8i161Q7xGOmCDRw AnCHen5tv70PO8GdQvv6TvspSr42vGM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:57 2026 by rpki-client