This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa File: 1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa (raw, json) Hash identifier: Qi29o/20uo8HEc2yP0HhyRE1xdh/v4z5aiGFbxMiWG0= Subject key identifier: CD:62:64:E4:24:07:C0:0B:CD:FF:70:8C:F8:62:AB:27:EC:EB:48:51 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE1124217279C804E777DE0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:12:42:17:27:9c:80:4e:77:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=3de51e2a-f815-43c7-a442-024e7476caba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2d:12:86:ca:dc:07:be:70:96:fd:3e:15:0c: 46:17:5a:cf:e2:c1:e7:6a:ba:2c:d8:a2:17:53:e3: 50:61:cd:e6:12:15:ce:de:b4:14:4b:83:15:45:d8: f6:e2:0e:ea:8f:74:02:33:e9:33:d0:e2:df:90:33: e3:f8:c6:00:df:b4:55:04:fb:68:bf:22:2b:32:83: f2:a2:ad:53:19:14:27:45:78:ad:2f:5c:82:13:ce: a2:f1:85:23:e6:98:31:45:2a:7b:2f:17:e1:bf:ec: a7:d7:96:db:33:57:f0:d7:cf:99:3a:21:28:67:71: 49:00:bd:c1:e7:10:c7:0b:5d:84:e2:10:93:88:8c: 38:0b:66:d5:77:70:3c:42:9e:2b:79:4f:e0:b4:f0: 74:dc:6c:01:c4:4c:59:bb:59:2d:3c:19:81:23:22: e5:0d:73:3e:cf:87:a7:f5:b3:7d:76:fb:7e:e6:94: 6c:80:a9:51:a7:20:17:2e:79:06:fd:5d:a6:d7:11: 73:74:b1:7a:2b:a1:ae:1f:5f:2d:74:06:d9:36:b2: fa:c3:d5:1b:1c:b4:b1:9c:3a:b9:cb:c6:fe:bc:6b: 5e:5e:59:3c:a1:39:70:ff:bc:83:56:d0:ce:8f:e9: bc:d9:ee:e1:64:f2:a8:16:af:f3:02:23:fc:c2:d0: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:64:E4:24:07:C0:0B:CD:FF:70:8C:F8:62:AB:27:EC:EB:48:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:8d:59:64:98:8b:4a:5f:de:9f:b5:4c:7e:8d:5c:5a:02:ac: 48:4d:03:2d:12:de:2c:b0:61:80:0c:98:dd:49:9c:3b:02:60: 8e:d7:ab:d5:07:41:9f:a9:97:8c:0e:ef:4c:dd:07:b9:8a:ee: 91:3e:60:ae:75:84:7e:a0:23:be:56:cd:dd:16:ae:de:bc:99: fc:fb:6b:1c:84:5d:ac:b4:65:9d:26:b5:9c:d5:e9:75:a8:72: 1b:81:e2:a9:ee:1c:88:01:37:86:20:29:d9:f0:1d:99:e6:e7: a2:b5:bb:5b:1d:7e:78:31:cb:da:12:5f:39:72:2f:cc:11:98: 30:2f:2f:7a:dd:57:e0:57:56:c0:31:26:9c:09:1c:b0:4c:46: 3f:29:56:6a:0b:20:60:d7:d9:7c:89:45:25:ee:33:bc:df:22: 9e:3f:32:16:e1:98:1b:2e:74:5b:3c:0f:36:85:78:7a:05:56: 4f:55:c6:c5:0b:57:af:4a:f6:5f:b6:e8:4e:ce:0a:1c:7d:1c: e3:7f:35:9b:d0:10:89:4e:15:30:72:0f:f1:05:7d:2b:6a:28: 45:57:e1:67:56:27:50:44:75:21:73:6c:ae:60:aa:8d:2f:4e: 30:3a:f8:9d:0d:b7:c3:e7:57:25:45:a3:87:ea:8f:82:08:74: c4:02:71:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74RJCFyecgE53feAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk M2RlNTFlMmEtZjgxNS00M2M3LWE0NDItMDI0ZTc0NzZjYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy0ShsrcB75wlv0+FQxGF1rP4sHnaros2KIX U+NQYc3mEhXO3rQUS4MVRdj24g7qj3QCM+kz0OLfkDPj+MYA37RVBPtovyIrMoPy oq1TGRQnRXitL1yCE86i8YUj5pgxRSp7Lxfhv+yn15bbM1fw18+ZOiEoZ3FJAL3B 5xDHC12E4hCTiIw4C2bVd3A8Qp4reU/gtPB03GwBxExZu1ktPBmBIyLlDXM+z4en 9bN9dvt+5pRsgKlRpyAXLnkG/V2m1xFzdLF6K6GuH18tdAbZNrL6w9UbHLSxnDq5 y8b+vGteXlk8oTlw/7yDVtDOj+m82e7hZPKoFq/zAiP8wtCB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1iZOQkB8ALzf9wjPhiqyfs60hRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMTcyODM4MWUtZGJiMS0z Nzk2LTg3MGQtOGEzY2RjOTNkOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6NWWSYi0pf3p+1TH6NXFoCrEhNAy0S3iywYYAMmN1JnDsCYI7Xq9UH QZ+pl4wO70zdB7mK7pE+YK51hH6gI75Wzd0Wrt68mfz7axyEXay0ZZ0mtZzV6XWo chuB4qnuHIgBN4YgKdnwHZnm56K1u1sdfngxy9oSXzlyL8wRmDAvL3rdV+BXVsAx JpwJHLBMRj8pVmoLIGDX2XyJRSXuM7zfIp4/MhbhmBsudFs8DzaFeHoFVk9VxsUL V69K9l+26E7OChx9HON/NZvQEIlOFTByD/EFfStqKEVX4WdWJ1BEdSFzbK5gqo0v TjA6+J0Nt8PnVyVFo4fqj4IIdMQCccA= -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:10 2025 by rpki-client