This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa
File: e33fcabc-b77b-3869-b070-63c53fd0f768.roa (raw, json)
Hash identifier: Kda7wilxL5FkYMLfUM5TLyL8zfjnJqH8ZsbXZuHrPE0=
Subject key identifier: 22:62:61:68:8B:7A:98:F5:87:CA:F2:88:05:0E:34:41:30:7E:CA:4C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C487144C743663A902B2D6B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 15169
IP address blocks: 74.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:44:c7:43:66:3a:90:2b:2d:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=d6c6a4e5-57cd-4b88-a5e2-ee2ef5576a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:13:81:e5:71:98:d4:ab:45:29:b5:32:72:
de:ed:d7:b4:d1:fe:84:3c:38:84:9b:35:0b:97:62:
db:4a:5b:fa:6f:14:a8:9d:f3:4d:af:0c:5d:07:ff:
a5:70:44:6e:e1:39:88:89:eb:ad:35:56:22:b7:1a:
61:78:68:64:6f:a7:99:db:ea:a8:21:55:9b:e9:a8:
bd:83:e1:05:f4:dc:81:aa:6f:f0:8b:c0:b2:5b:95:
94:20:dd:b5:37:70:25:74:6b:82:ee:ee:9b:c9:08:
bf:65:8e:73:b8:4b:16:21:97:d9:f3:93:b2:a7:b7:
72:89:d1:a6:61:10:ee:31:1c:1c:d9:ab:f5:b3:01:
15:07:72:bd:ac:32:97:24:67:53:65:22:ef:1a:ba:
d2:a9:7a:26:7d:4f:37:6e:06:54:2e:fb:2f:29:0e:
b8:ec:7a:ad:1b:98:b6:d0:d5:ab:d8:09:a0:27:2d:
e1:50:da:0f:4d:3f:6e:51:64:08:a1:bf:3b:2e:cf:
80:8e:a8:28:5e:38:2a:93:ae:24:3d:8d:0f:1c:d7:
82:74:97:3e:94:be:16:cb:de:25:04:e3:2b:67:c0:
04:34:42:d2:12:11:8c:8d:e0:2b:66:ae:19:25:d8:
4b:ba:f2:3d:c7:a0:0e:c4:f4:1c:17:16:66:26:b6:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:62:61:68:8B:7A:98:F5:87:CA:F2:88:05:0E:34:41:30:7E:CA:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:ed:1d:60:c1:54:83:1c:60:05:bc:74:c4:a2:ae:07:b8:b9:
3e:b8:c0:0b:17:17:6a:20:ab:66:b0:35:ed:d3:37:85:fb:64:
c7:3e:e8:21:28:0c:29:cc:e2:40:16:87:fb:a0:78:a3:7e:e9:
99:6f:17:37:6c:d0:48:d2:29:70:37:62:8f:7c:e4:92:aa:36:
b2:ec:12:5f:88:cd:bf:31:d5:cf:f8:db:c2:3a:a3:cb:eb:33:
1c:93:e2:c3:1f:66:85:0a:a0:5a:61:28:a2:c8:5b:31:53:f4:
70:bb:82:31:8b:55:61:71:db:80:eb:89:28:90:9f:e6:66:e3:
91:47:b9:e4:0a:c6:a5:90:09:ca:57:b8:82:59:ad:df:b4:32:
26:45:5f:55:fc:ea:2b:41:53:6d:32:2a:6e:00:d6:26:04:31:
b4:55:79:d1:d8:50:33:92:30:52:05:0f:e3:ad:9a:90:5b:78:
cc:6d:63:96:f5:b3:17:e0:3a:6f:9d:fe:4c:cb:6d:2a:c8:5c:
84:97:4c:98:96:d1:92:40:1d:64:e8:02:db:ac:5c:b3:a1:1c:
ea:4a:bb:05:5a:b3:cd:fc:44:b8:23:7f:8e:10:96:dd:76:7a:
76:09:69:46:fb:87:e7:e5:ed:e2:c8:ec:cf:35:8f:20:8d:e8:
09:2d:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:16 2026 by rpki-client