This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa File: 00f8bc34-2fd6-3328-924d-129cb50d9319.roa (raw, json) Hash identifier: OHIZNyYGv2xCQdY4nOQQd8Ei0HMMOaMFpkKK11122Dc= Subject key identifier: E1:A9:AC:0E:73:96:AD:25:06:16:CB:7B:80:E1:66:26:71:AE:72:B3 Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F4328584C22C0E103193A2390659EE1C0 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396982 IP address blocks: 52.129.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:e1:03:19:3a:23:90:65:9e:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=f8f0e0a7-f784-456b-8d5b-1e18d5a4ec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:30:88:e5:5a:76:c2:03:19:18:37:e5:05:65: 30:ac:e6:dd:ab:ee:9a:82:e7:0a:4c:70:aa:4f:93: 6a:fb:7b:6a:95:8b:89:c7:83:58:df:e1:5c:93:8f: 92:b0:77:7b:72:5f:22:a1:13:16:40:f9:46:bc:80: 1e:f1:49:f0:5d:9c:44:9b:76:08:a2:b9:4d:63:08: c9:fd:72:52:fb:13:3b:b0:c0:a9:c3:7b:c0:10:d6: 5a:1d:cb:70:82:8c:82:ef:ea:cd:4d:2c:7d:c5:72: 05:30:4a:af:25:c4:02:59:a5:ca:be:91:6f:24:9f: 48:12:22:ae:20:e3:fa:27:cd:ff:b7:90:ca:a2:5c: d5:79:c0:9a:b8:e4:c4:25:04:c7:ec:49:40:87:5e: ed:c3:05:1a:0d:e4:1e:11:21:0a:86:8b:5c:5d:15: 23:8d:fb:a5:ec:66:bd:d5:d0:3a:1f:d5:3e:57:94: d3:ca:d1:5b:2f:0a:b9:c1:47:2f:9a:79:2a:f3:2c: b1:77:1c:d2:46:2d:7a:28:cd:3d:5a:88:ba:2f:a6: 2d:2d:e0:b0:fe:d8:67:ae:68:6a:7d:15:44:94:54: 5a:ad:39:61:db:26:bd:f4:0c:33:fb:fd:cb:82:74: d1:28:aa:7a:8d:a2:b9:35:5a:12:a6:c8:22:99:86: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:AC:0E:73:96:AD:25:06:16:CB:7B:80:E1:66:26:71:AE:72:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:55:6b:57:52:2e:ab:a9:10:5b:c2:c4:33:ec:48:40:1c:6c: 31:0b:93:ad:da:3c:73:e8:89:9e:8b:8c:5c:d4:35:c1:8b:97: 39:0f:0f:d2:3b:ac:98:ae:7d:13:d3:9a:97:d0:5c:cd:9e:61: 2c:45:76:2b:24:30:64:c7:e8:35:75:8d:48:d4:22:b2:1c:7b: b3:6c:9c:0e:7a:d8:ee:71:c0:f3:1a:84:c3:c0:2a:1a:d4:4b: ea:72:44:9d:38:7d:f9:21:81:93:30:b3:e2:3c:1e:3c:64:80: ea:4c:5a:b6:3d:48:97:07:6b:48:eb:6c:72:d7:5a:1f:f3:a1: 9b:13:74:ec:c8:6c:3b:7e:8b:e7:1f:9b:7c:19:d5:51:7b:9b: 62:b8:ef:75:42:60:08:9c:cf:17:c4:8b:ff:6c:79:39:03:d5: 89:bc:c7:df:e2:11:be:7b:1f:b3:6b:50:47:ad:67:69:36:f0: b6:db:89:39:51:44:40:d4:c3:98:b4:e3:07:ef:a7:a4:81:19: 66:50:40:76:b7:5c:a0:84:fd:20:30:7f:99:b7:31:7a:46:49: 23:73:54:cd:aa:28:05:0e:64:ec:dd:bb:56:1e:3b:67:f7:1b: 43:e0:c3:2c:6d:68:af:fe:e5:90:98:f1:f1:4d:a5:35:7e:a7: 8a:20:12:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOEDGTojkGWe4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjhmMGUwYTctZjc4NC00NTZiLThkNWItMWUxOGQ1YTRlYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzCI5Vp2wgMZGDflBWUwrObdq+6agucKTHCq T5Nq+3tqlYuJx4NY3+Fck4+SsHd7cl8ioRMWQPlGvIAe8UnwXZxEm3YIorlNYwjJ /XJS+xM7sMCpw3vAENZaHctwgoyC7+rNTSx9xXIFMEqvJcQCWaXKvpFvJJ9IEiKu IOP6J83/t5DKolzVecCauOTEJQTH7ElAh17twwUaDeQeESEKhotcXRUjjful7Ga9 1dA6H9U+V5TTytFbLwq5wUcvmnkq8yyxdxzSRi16KM09Woi6L6YtLeCw/thnrmhq fRVElFRarTlh2ya99Awz+/3LgnTRKKp6jaK5NVoSpsgimYZMYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGprA5zlq0lBhbLe4DhZiZxrnKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvMDBmOGJjMzQtMmZkNi0z MzI4LTkyNGQtMTI5Y2I1MGQ5MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRVa1dSLqupEFvCxDPsSEAcbDELk63aPHPoiZ6LjFzUNcGLlzkPD9I7 rJiufRPTmpfQXM2eYSxFdiskMGTH6DV1jUjUIrIce7NsnA562O5xwPMahMPAKhrU S+pyRJ04ffkhgZMws+I8HjxkgOpMWrY9SJcHa0jrbHLXWh/zoZsTdOzIbDt+i+cf m3wZ1VF7m2K473VCYAiczxfEi/9seTkD1Ym8x9/iEb57H7NrUEetZ2k28LbbiTlR REDUw5i04wfvp6SBGWZQQHa3XKCE/SAwf5m3MXpGSSNzVM2qKAUOZOzdu1YeO2f3 G0PgwyxtaK/+5ZCY8fFNpTV+p4ogEo8= -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:48 2025 by rpki-client