This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa
File: 6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa (raw, json)
Hash identifier: 3aG6x5/REcP8m0YAbjvWCCqtoTcn93Xrea+1bCNYBn4=
Subject key identifier: A1:6F:D7:F6:B5:C8:E0:0F:49:CF:27:D8:EB:D8:9E:89:07:83:33:E9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584BDFC08E88B4C6C8E7ACEF18C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa
Signing time: Sun 16 Nov 2025 02:00:31 +0000
ROA not before: Sun 16 Nov 2025 02:00:31 +0000
ROA not after: Sat 14 Feb 2026 02:00:31 +0000
asID: 15169
IP address blocks: 172.253.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:df:c0:8e:88:b4:c6:c8:e7:ac:ef:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 02:00:31 2025 GMT
Not After : Feb 14 02:00:31 2026 GMT
Subject: CN=81cd7086-f4b2-4da4-80b3-e8969d8d7658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:3e:10:07:69:01:30:64:e9:7e:80:82:bd:
2e:79:3e:e6:e8:7e:bf:72:d1:72:d8:18:e2:82:31:
fe:db:49:72:ca:a1:cb:0c:9e:46:b9:cc:2a:d8:4c:
fd:6e:bd:8a:51:a4:6f:13:1f:1c:51:0d:19:d6:b7:
26:5b:59:77:55:3e:00:68:58:d6:86:5a:45:77:31:
41:80:2b:0b:9d:9a:54:08:12:09:0a:b2:33:28:5e:
0c:e0:bf:23:38:77:3e:ec:13:f3:84:15:4c:69:2a:
20:8f:24:89:13:44:5a:ac:25:e4:b8:90:bc:bc:a0:
79:0b:1d:7c:3e:bf:c6:d2:17:cb:48:59:97:c7:7e:
eb:d9:fd:88:04:68:22:58:9a:8e:8d:ab:e5:f2:a4:
5f:4b:e1:bd:dc:2c:d1:81:ce:fc:50:fe:09:40:04:
86:6b:12:2e:3e:f6:ad:4f:d0:69:1b:46:86:25:e2:
4d:73:16:41:ff:e7:05:20:0a:5d:3c:c0:fe:a2:36:
fe:31:21:2a:d4:e1:f5:84:72:e1:10:44:53:b6:8f:
9d:67:d9:b1:d6:52:be:7c:6c:20:30:02:be:67:8a:
e4:50:73:21:7c:2c:50:18:93:e0:1e:69:bd:e7:3a:
90:33:e9:7c:de:04:04:1a:63:5c:89:be:9f:5a:c4:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6F:D7:F6:B5:C8:E0:0F:49:CF:27:D8:EB:D8:9E:89:07:83:33:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6ecb9f58-ef9c-3c3c-853e-646db8e3ca14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d8:00:57:8c:68:24:f4:cd:db:55:2b:7c:ba:e0:bf:1f:25:
7c:1c:c3:29:1a:14:3f:93:10:14:aa:fc:90:41:bb:60:95:1e:
fb:b4:1a:33:78:ea:0d:f0:4e:53:08:5d:fb:9a:90:4b:f9:63:
0a:a0:f7:b1:78:1d:5b:9a:fa:48:11:d6:0c:a3:a4:5f:47:86:
41:d1:9c:39:36:44:98:75:33:00:e4:2a:a8:7d:9f:b6:24:dc:
ed:79:57:ca:fe:89:2b:0a:d1:0c:44:89:cb:97:4c:23:c7:99:
65:18:f8:03:58:07:4a:f0:bb:dc:6c:60:c2:a2:3a:34:30:08:
03:75:c8:e3:4d:28:fa:8e:e6:af:61:24:9a:19:e7:ce:c3:35:
0c:c9:eb:b8:ed:f0:e0:96:82:23:3a:0d:62:0e:31:5d:07:29:
d0:e8:6a:f3:dd:62:ad:6b:c2:27:8d:a8:7e:2c:73:9e:4a:18:
81:60:88:94:98:3f:02:80:39:1d:8d:4d:74:19:c5:65:98:0a:
31:25:91:74:93:e6:45:d3:8c:a5:d3:e7:a0:30:1a:70:66:05:
95:13:5d:de:b8:05:cc:4a:de:a8:6f:52:f9:b1:89:76:49:9c:
0b:e0:d4:72:07:49:10:01:68:5f:26:2f:d2:cb:38:69:76:c1:
49:e1:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:11:18 2025 by rpki-client