This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa File: df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa (raw, json) Hash identifier: B8MN3Z/nQNjSpI8ofakQq68x9kBwJdkZPEA2ybJGYDI= Subject key identifier: ED:A2:A7:32:7D:C7:59:09:99:75:CF:0F:C5:C2:E5:B0:3A:73:95:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C48716DA058AA89AAF9E1F390 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 74.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:6d:a0:58:aa:89:aa:f9:e1:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=01e84803-87ca-4a0e-a4e7-c877f52e4d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:7b:aa:6b:38:e0:33:6f:9f:56:f0:8f:ab: ec:bb:49:38:4e:93:69:d9:0c:84:cd:3b:2f:27:b3: 0a:14:ee:3a:a6:55:9c:4a:07:a2:33:ff:fa:14:cf: 13:9e:98:37:d3:c7:fd:0e:aa:ba:2c:f9:5f:54:69: 55:9c:95:c6:84:5f:92:29:46:64:7b:f6:ee:e9:1e: 8b:84:71:c6:58:52:ec:77:a0:d8:a0:56:9b:23:9a: 50:a6:86:45:f9:15:ba:28:32:fa:0d:b1:14:b0:f3: 8d:f0:d5:21:f6:75:0c:fe:1d:c9:b7:f3:0f:75:76: a6:fd:9c:8f:5f:7b:89:53:7b:c5:8c:de:f7:17:fb: be:79:08:25:98:85:b6:a9:db:d7:70:88:d0:b1:89: ec:05:48:ef:74:36:fe:f6:b1:2c:ad:68:96:30:f6: f7:c4:f7:ec:b6:cb:84:2e:9e:7e:c2:2a:ae:a8:18: 9c:e2:42:b6:58:eb:99:c4:d6:ab:7d:1b:ad:37:4d: 67:65:a0:5e:aa:b0:a9:6e:e7:7c:a6:11:4c:ff:6f: 74:27:06:9f:9c:e8:b9:4f:5a:33:09:5a:87:07:97: b6:60:b6:c7:e0:52:4d:df:b7:59:a9:db:57:c2:a0: 89:03:38:b6:4b:40:4a:fe:6f:a9:30:b0:8f:64:52: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:A7:32:7D:C7:59:09:99:75:CF:0F:C5:C2:E5:B0:3A:73:95:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:72:bc:97:e7:42:3f:7a:84:30:a7:77:96:15:6d:89:58:7f: 57:62:6d:a8:fc:cf:15:40:da:d0:98:89:34:b2:bd:a6:9b:62: a8:f3:35:08:f2:20:7a:9c:51:10:1b:71:cf:e9:bb:c6:4a:08: 4e:23:b9:03:f1:55:24:f9:e1:8c:9e:0e:33:f6:79:2a:b7:7e: d7:f6:07:21:cb:3d:cb:03:18:cf:70:e1:c1:0d:86:af:00:1e: aa:a4:fb:e0:99:0a:0b:36:a9:40:ed:10:95:d2:65:8a:32:22: 43:2c:3d:38:0c:97:36:4d:6b:ca:d3:98:f7:2d:db:71:64:38: de:8c:22:f0:5c:55:95:da:c4:01:45:7a:a5:01:db:d1:0e:f6: 6e:1c:4c:c3:52:7d:73:97:f0:ca:c4:86:37:8b:11:ab:6a:0a: 96:e3:be:ce:f3:58:5b:e0:ee:11:e1:cd:54:fc:92:20:c6:72: e2:8c:21:58:5e:33:7e:0f:cc:5b:e6:90:21:11:4e:6a:e0:2d: 51:cb:ce:1d:18:a5:c9:54:ab:b6:c8:72:f6:88:a7:da:5b:ca: 00:d9:38:6f:06:0a:c5:73:70:d3:aa:fd:5f:14:25:0e:0a:a8: 52:7e:bd:a3:47:de:fe:72:67:85:7b:98:b6:05:ef:a2:45:0f: 12:49:3e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcW2gWKqJqvnh85AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MDFlODQ4MDMtODdjYS00YTBlLWE0ZTctYzg3N2Y1MmU0ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcl7qms44DNvn1bwj6vsu0k4TpNp2QyEzTsv J7MKFO46plWcSgeiM//6FM8Tnpg308f9Dqq6LPlfVGlVnJXGhF+SKUZke/bu6R6L hHHGWFLsd6DYoFabI5pQpoZF+RW6KDL6DbEUsPON8NUh9nUM/h3Jt/MPdXam/ZyP X3uJU3vFjN73F/u+eQglmIW2qdvXcIjQsYnsBUjvdDb+9rEsrWiWMPb3xPfstsuE Lp5+wiquqBic4kK2WOuZxNarfRutN01nZaBeqrCpbud8phFM/290JwafnOi5T1oz CVqHB5e2YLbH4FJN37dZqdtXwqCJAzi2S0BK/m+pMLCPZFJboQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2ipzJ9x1kJmXXPD8XC5bA6c5VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYyZTJmMGYtMGVmMS0z YjE1LTg0NzQtMTZlNzY4M2E4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZyvJfnQj96hDCnd5YVbYlYf1dibaj8zxVA2tCYiTSyvaabYqjzNQjy IHqcURAbcc/pu8ZKCE4juQPxVST54YyeDjP2eSq3ftf2ByHLPcsDGM9w4cENhq8A Hqqk++CZCgs2qUDtEJXSZYoyIkMsPTgMlzZNa8rTmPct23FkON6MIvBcVZXaxAFF eqUB29EO9m4cTMNSfXOX8MrEhjeLEatqCpbjvs7zWFvg7hHhzVT8kiDGcuKMIVhe M34PzFvmkCERTmrgLVHLzh0YpclUq7bIcvaIp9pbygDZOG8GCsVzcNOq/V8UJQ4K qFJ+vaNH3v5yZ4V7mLYF76JFDxJJPt0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:46 2026 by rpki-client