This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: QxP5E8wD9yb+44VOv6wpVtA/7FtdfoT7eA/dI2Sa8i4= Subject key identifier: 20:F2:D4:28:8C:E5:28:AF:08:B4:51:14:8E:A3:48:41:BD:36:37:82 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584C3BE10CC61616050D68CC4D00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:0c:c6:16:16:05:0d:68:cc:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=9ed8346f-8917-4526-92c9-9eaf55de15db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:f5:f8:d6:8e:c7:19:50:6e:80:42:08:21: 4c:94:a4:9a:60:74:57:41:2a:04:9e:31:02:86:3f: 75:d5:44:d6:dd:86:32:c7:a3:a1:c6:da:7e:5d:64: 33:9b:c1:12:d9:55:06:6f:43:0e:9f:f1:cd:bb:47: 59:29:05:b0:4e:29:10:29:3f:f8:17:74:d6:5d:18: bf:e8:3f:58:fd:af:90:4b:e7:19:10:96:61:41:a7: 05:f4:d1:f0:21:66:d2:0b:53:74:b6:e2:85:ce:62: 4a:35:6a:67:f5:69:f4:64:e2:a3:ab:d7:09:3f:86: 0e:52:34:4e:f1:7a:76:eb:45:d7:da:d8:aa:12:6a: 47:9c:3f:9e:6f:14:7e:93:d8:3a:0d:17:cc:1d:b2: 86:0b:89:30:6a:f6:b3:d7:03:ec:d9:82:ee:a7:60: ef:39:11:ab:e8:53:61:ca:49:a7:ca:b0:c1:e0:d6: b9:ec:bd:88:70:28:20:95:30:c4:a5:e1:72:95:26: 3a:1b:5f:c5:47:2e:57:34:59:7c:2d:67:d6:b8:6a: ca:fe:b9:48:e5:7c:4f:5b:12:87:c4:a5:49:36:ae: 69:1d:00:2a:9d:58:c8:c8:78:67:4c:78:61:e2:ff: ad:6b:24:6a:1d:37:92:82:af:2e:5c:0b:83:c1:d9: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F2:D4:28:8C:E5:28:AF:08:B4:51:14:8E:A3:48:41:BD:36:37:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1d:b5:16:06:55:ef:28:17:67:58:20:fd:b5:66:5f:c2:d5: 47:6d:9d:e5:4f:71:eb:59:c6:b8:5c:4e:8e:07:f6:38:d3:16: 6f:f9:7c:16:c7:3e:88:98:76:d8:4b:22:16:dd:f0:57:d0:29: 5e:10:bf:ba:0d:99:57:f8:77:61:86:c0:7b:cd:bf:ce:03:e0: 9f:f0:97:f5:a0:c0:c0:92:a4:15:aa:8f:82:82:ae:77:ad:99: 1c:0a:69:74:c2:cb:00:63:7d:bf:49:89:d2:e7:cb:c9:c9:f4: b4:8b:3d:11:92:02:23:08:6e:2c:62:90:db:55:88:b6:9a:94: 69:60:92:0a:07:20:5e:f4:d8:95:7b:e1:6f:cb:1b:cd:26:58: c7:10:bd:eb:73:d1:dc:9e:ee:1a:18:89:14:11:a8:46:86:04: 6a:d3:ba:b6:38:4c:3e:93:43:b5:c5:fc:72:a8:95:ec:2f:c6: d2:6a:e5:2f:47:67:b1:29:ad:be:9b:fd:5e:13:52:d1:be:16: 91:8a:36:b9:4b:e4:e6:78:8d:ee:ca:a0:c2:19:f0:f7:2e:b9: b9:01:7f:dd:64:a9:fe:53:e3:80:10:1b:c7:86:61:95:d2:4a: 17:e5:09:0c:c7:25:d7:f4:bc:83:76:5a:84:93:8b:62:01:06: 48:ce:32:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QzGFhYFDWjMTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk OWVkODM0NmYtODkxNy00NTI2LTkyYzktOWVhZjU1ZGUxNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgv1+NaOxxlQboBCCCFMlKSaYHRXQSoEnjEC hj911UTW3YYyx6Ohxtp+XWQzm8ES2VUGb0MOn/HNu0dZKQWwTikQKT/4F3TWXRi/ 6D9Y/a+QS+cZEJZhQacF9NHwIWbSC1N0tuKFzmJKNWpn9Wn0ZOKjq9cJP4YOUjRO 8Xp260XX2tiqEmpHnD+ebxR+k9g6DRfMHbKGC4kwavaz1wPs2YLup2DvORGr6FNh ykmnyrDB4Na57L2IcCgglTDEpeFylSY6G1/FRy5XNFl8LWfWuGrK/rlI5XxPWxKH xKVJNq5pHQAqnVjIyHhnTHhh4v+tayRqHTeSgq8uXAuDwdnPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDy1CiM5SivCLRRFI6jSEG9NjeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgdtRYGVe8oF2dYIP21Zl/C1UdtneVPcetZxrhcTo4H9jjTFm/5fBbH PoiYdthLIhbd8FfQKV4Qv7oNmVf4d2GGwHvNv84D4J/wl/WgwMCSpBWqj4KCrnet mRwKaXTCywBjfb9JidLny8nJ9LSLPRGSAiMIbixikNtViLaalGlgkgoHIF702JV7 4W/LG80mWMcQvetz0dye7hoYiRQRqEaGBGrTurY4TD6TQ7XF/HKolewvxtJq5S9H Z7Eprb6b/V4TUtG+FpGKNrlL5OZ4je7KoMIZ8PcuubkBf91kqf5T44AQG8eGYZXS ShflCQzHJdf0vIN2WoSTi2IBBkjOMjo= -----END CERTIFICATE-----Generated at Sun Dec 21 20:32:50 2025 by rpki-client