This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa File: d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa (raw, json) Hash identifier: +X2p/1TP+EqGAXA3Em4YZuQn5j/izis/3EiXX8oobOQ= Subject key identifier: 88:D6:E6:29:A2:2A:DB:5F:30:73:CF:85:07:C0:74:A6:D4:2A:7F:06 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584C3EABA7A3497761338B416700 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 8757 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:a7:a3:49:77:61:33:8b:41:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=7506fdfa-44f9-4faf-aecd-a0d9c7ec7548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:d6:97:3f:09:1e:95:7f:a3:24:81:30:a4: a3:ca:55:80:d6:5c:83:7b:57:a5:6c:4b:00:7c:20: c2:0a:4c:96:9c:af:31:89:68:97:98:15:f8:93:73: 78:1f:7f:54:bf:41:5b:f9:10:b6:b8:c4:5f:2d:97: 0b:f9:89:2a:99:df:1b:72:a8:98:f2:3e:a3:ea:6c: dc:d9:9b:82:e3:d0:d1:9e:4b:07:6e:88:84:b5:49: 45:5c:f5:0e:aa:eb:c1:2a:d5:d8:5c:7f:3f:42:6f: 1a:02:fc:34:76:98:5e:ca:9c:1c:60:bf:09:18:99: 13:78:be:9b:a9:29:9c:d3:11:3b:06:a1:80:40:f4: 4e:52:5e:18:d5:eb:8c:f5:a9:b4:8a:3b:bb:fd:a4: c7:da:ca:b0:13:1c:04:be:20:5e:96:f3:46:11:d5: fe:4b:32:69:fc:d4:22:1d:a3:e5:43:f0:22:2e:1e: 42:fe:0b:fa:6a:60:2a:4f:38:ad:72:9a:92:e1:72: 44:5e:4c:d0:01:25:f3:b1:bf:d1:69:e8:9d:dc:35: 19:c4:35:ec:5e:1c:84:bc:ab:71:fa:2b:02:ef:80: 3e:27:f7:72:e9:94:d2:fd:26:5a:4d:90:4e:67:f3: 42:63:56:37:04:4a:0f:15:ec:15:a4:8a:82:de:64: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:E6:29:A2:2A:DB:5F:30:73:CF:85:07:C0:74:A6:D4:2A:7F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6e:e0:ad:37:80:4a:83:c0:10:5b:b6:f2:3e:44:0e:9a:54: 14:1b:72:2c:1c:d5:c2:2d:d2:91:ab:2b:b5:15:93:ef:bb:36: 29:a9:d3:83:4d:30:3d:9d:86:56:d0:9b:cb:49:88:4e:47:e6: db:d6:69:1e:aa:6c:71:10:cd:88:78:9a:f3:07:91:e9:3d:5e: 79:3a:ad:9e:ce:4d:c2:dd:a9:91:d8:97:2d:4b:4e:20:15:dd: 76:ff:f3:2a:d3:98:31:f2:b6:33:0b:bd:fe:fc:55:35:9d:4b: d2:37:ef:62:2b:e2:18:bf:fd:58:04:ce:32:69:77:1e:20:f9: 7a:74:d4:4f:b6:9c:d6:39:1f:22:7e:fb:44:79:c8:b0:2b:c3: ab:60:ae:11:a2:22:a2:6e:94:56:ff:eb:a4:28:a0:06:d4:c9: 3e:c3:81:02:ba:0d:0e:67:05:8a:ed:d0:20:c3:40:57:cf:b4: d9:ab:71:58:e4:a7:4f:56:c3:73:cf:23:ae:bc:b1:85:1b:b9: 80:af:0a:d2:3f:3b:24:c4:7b:ea:ef:1e:d0:95:e2:ff:e9:01: 4a:d6:84:01:0a:8d:4e:c1:e5:b3:38:c3:bc:d1:e8:c9:d5:d3: b0:22:b1:88:70:4d:73:48:a1:9f:6c:eb:bf:07:ca:1e:a8:05: bf:1c:da:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q6ejSXdhM4tBZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk NzUwNmZkZmEtNDRmOS00ZmFmLWFlY2QtYTBkOWM3ZWM3NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEnWlz8JHpV/oySBMKSjylWA1lyDe1elbEsA fCDCCkyWnK8xiWiXmBX4k3N4H39Uv0Fb+RC2uMRfLZcL+Ykqmd8bcqiY8j6j6mzc 2ZuC49DRnksHboiEtUlFXPUOquvBKtXYXH8/Qm8aAvw0dpheypwcYL8JGJkTeL6b qSmc0xE7BqGAQPROUl4Y1euM9am0iju7/aTH2sqwExwEviBelvNGEdX+SzJp/NQi HaPlQ/AiLh5C/gv6amAqTzitcpqS4XJEXkzQASXzsb/Raeid3DUZxDXsXhyEvKtx +isC74A+J/dy6ZTS/SZaTZBOZ/NCY1Y3BEoPFewVpIqC3mQhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjW5imiKttfMHPPhQfAdKbUKn8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZDNkOWM0M2YtOTI1OC0z Y2I0LWIzY2EtODA4MzZiNzZmYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1u4K03gEqDwBBbtvI+RA6aVBQbciwc1cIt0pGrK7UVk++7Nimp04NN MD2dhlbQm8tJiE5H5tvWaR6qbHEQzYh4mvMHkek9Xnk6rZ7OTcLdqZHYly1LTiAV 3Xb/8yrTmDHytjMLvf78VTWdS9I372Ir4hi//VgEzjJpdx4g+Xp01E+2nNY5HyJ+ +0R5yLArw6tgrhGiIqJulFb/66QooAbUyT7DgQK6DQ5nBYrt0CDDQFfPtNmrcVjk p09Ww3PPI668sYUbuYCvCtI/OyTEe+rvHtCV4v/pAUrWhAEKjU7B5bM4w7zR6MnV 07AisYhwTXNIoZ9s678Hyh6oBb8c2r4= -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:55 2025 by rpki-client