This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: Y9Deji+3SwVC0ux8EL6eW0ZrretQSr3uj6yp7AL0ayU= Subject key identifier: E7:BA:04:5F:D8:5C:C6:11:8B:87:85:9C:CE:A1:73:FE:EF:E8:CE:02 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE1088726373CD7B382EC80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:08:87:26:37:3c:d7:b3:82:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=154431d4-e7b7-4edc-95f0-0d10613f61a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:78:ba:13:8a:c2:dd:b0:52:d7:ec:7a:74: c6:3f:af:07:fe:64:54:f9:23:ff:dc:4e:ff:e5:79: 66:a1:33:4e:8f:c2:b6:95:69:33:91:3d:b0:d2:33: 68:63:ca:92:45:bf:ad:a5:a5:7c:4f:35:c6:7b:1a: c1:9f:9b:02:af:b5:68:6e:87:d9:7f:1a:e1:63:5d: f2:d7:bf:c4:19:bc:f9:5c:e8:d7:92:14:ad:b6:99: 83:43:8f:51:37:62:16:ac:4c:0e:6e:98:41:9e:a2: c4:4f:38:94:8f:60:2e:f4:72:9e:7b:53:11:cf:34: 9b:cc:dd:6f:00:d3:93:d9:c5:92:f4:49:9f:c6:5e: 7b:f3:cc:7b:bb:03:58:9d:a7:e8:c3:26:0c:e3:c5: 3f:aa:81:61:bd:29:08:1b:5f:8a:fe:9e:7a:8c:65: c9:63:f2:e8:89:94:5c:18:a5:82:5b:d8:e3:5e:92: da:4f:3c:c2:e3:5b:cc:c9:83:d3:12:35:ac:8a:4c: 19:1c:54:21:1a:64:c2:9a:e0:8f:6f:7e:4e:30:94: 43:aa:f3:51:ed:59:a1:09:68:1d:e2:66:5e:a9:4d: 1a:db:8a:fd:9c:27:77:3c:ef:55:89:fe:86:2e:c6: b9:cf:7b:a9:13:d8:90:01:15:23:ac:54:32:73:f2: f2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BA:04:5F:D8:5C:C6:11:8B:87:85:9C:CE:A1:73:FE:EF:E8:CE:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:97:21:72:57:80:33:80:55:19:57:dd:23:90:01:85:ca:f1: 3f:36:9b:f7:94:94:37:26:e8:c7:e6:64:2d:b5:45:ba:45:27: 03:75:53:0b:e0:10:cf:6c:d7:cd:7a:89:21:46:40:fa:00:5f: 6a:72:b7:b4:af:b5:5e:4d:ab:cb:bb:93:cc:f5:f4:f0:80:b1: 0d:b0:8e:7b:d6:2c:f0:6f:80:dc:25:ee:09:43:9d:a1:f6:48: 47:7f:69:91:93:1d:9c:fb:33:3d:8b:f5:9d:48:b6:17:74:fa: 69:9b:24:75:57:73:d0:ea:39:cb:36:ce:d2:94:1c:6d:50:ad: 28:74:82:8b:08:5c:7c:d7:0f:c2:d9:06:73:33:4a:47:46:4f: 3b:ba:98:a2:b7:77:17:bd:d4:c0:9d:86:97:62:17:0c:77:38: 57:3c:3c:ad:ae:97:25:b1:15:86:c6:db:05:cb:2d:b5:ea:1b: d2:e6:8e:d2:6d:52:56:ad:15:bc:67:e8:01:45:9c:b2:0c:6b: 9f:cd:31:76:d3:bf:fa:b1:f5:ca:0a:18:74:bd:93:c2:cd:54: fe:05:81:ce:eb:95:f8:6f:04:35:1b:fe:3c:96:5a:f2:3a:e7: 62:53:56:2d:95:04:41:20:b3:0f:c7:1c:40:f0:0d:4c:7c:7a: 48:49:05:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QiHJjc817OC7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MTU0NDMxZDQtZTdiNy00ZWRjLTk1ZjAtMGQxMDYxM2Y2MWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjp4uhOKwt2wUtfsenTGP68H/mRU+SP/3E7/ 5XlmoTNOj8K2lWkzkT2w0jNoY8qSRb+tpaV8TzXGexrBn5sCr7VobofZfxrhY13y 17/EGbz5XOjXkhSttpmDQ49RN2IWrEwObphBnqLETziUj2Au9HKee1MRzzSbzN1v ANOT2cWS9Emfxl5788x7uwNYnafowyYM48U/qoFhvSkIG1+K/p56jGXJY/LoiZRc GKWCW9jjXpLaTzzC41vMyYPTEjWsikwZHFQhGmTCmuCPb35OMJRDqvNR7VmhCWgd 4mZeqU0a24r9nCd3PO9Vif6GLsa5z3upE9iQARUjrFQyc/LyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe6BF/YXMYRi4eFnM6hc/7v6M4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2XIXJXgDOAVRlX3SOQAYXK8T82m/eUlDcm6MfmZC21RbpFJwN1Uwvg EM9s1816iSFGQPoAX2pyt7SvtV5Nq8u7k8z19PCAsQ2wjnvWLPBvgNwl7glDnaH2 SEd/aZGTHZz7Mz2L9Z1Ithd0+mmbJHVXc9DqOcs2ztKUHG1QrSh0gosIXHzXD8LZ BnMzSkdGTzu6mKK3dxe91MCdhpdiFwx3OFc8PK2ulyWxFYbG2wXLLbXqG9LmjtJt UlatFbxn6AFFnLIMa5/NMXbTv/qx9coKGHS9k8LNVP4Fgc7rlfhvBDUb/jyWWvI6 52JTVi2VBEEgsw/HHEDwDUx8ekhJBXo= -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:08 2025 by rpki-client