This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa File: 35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa (raw, json) Hash identifier: Vmjbc65O8W31Zv3xH1CfUISL4OyffnzUcJlRB+trvEM= Subject key identifier: C3:BA:99:6C:DC:FC:90:1E:C5:15:60:5C:5A:64:D0:03:61:49:F7:A9 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE108E692E2A5FB5506B280 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:08:e6:92:e2:a5:fb:55:06:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=ae3dcf1c-3988-449f-bbff-aeef616c87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:65:ed:68:d1:55:ba:69:df:bf:0a:61:e2: 51:26:f1:97:d2:cf:69:ab:01:4e:da:ac:16:d8:0a: 28:49:fe:29:01:e1:57:59:b8:ac:07:40:5f:97:56: f2:f3:36:4e:01:af:80:5b:36:56:4f:4e:bf:0e:d6: 5b:56:82:b1:d6:70:39:9f:df:42:bc:a7:f3:e8:2d: 80:d0:b6:0f:97:1e:2e:d0:8e:64:f5:91:74:c6:4e: ee:b4:2d:17:81:10:a1:d1:d0:b5:58:56:8f:99:c5: 00:3a:2d:d1:9f:5e:e3:9a:03:f0:a2:40:f9:19:eb: da:f1:85:da:5d:ed:65:95:bb:4e:8c:18:d6:d6:66: 66:de:2a:a8:87:c8:77:54:e1:22:e0:3b:b5:a2:50: b3:08:05:92:21:46:12:73:1b:b4:ff:86:1c:b1:1b: 2e:08:a1:6e:7c:6e:29:65:a6:72:1d:a8:49:dd:77: 6c:4c:ad:68:55:64:56:15:2a:14:19:3b:f3:0e:53: e1:fe:9a:39:5a:fe:6d:cf:c8:2c:34:97:6c:11:db: d9:79:6c:c6:76:c0:32:5c:b9:44:33:1a:39:2f:b1: 91:f5:42:77:64:33:b3:fc:d9:ad:91:43:53:6d:d1: 2d:cf:83:01:91:4d:6c:dc:f9:22:87:af:0e:37:ab: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BA:99:6C:DC:FC:90:1E:C5:15:60:5C:5A:64:D0:03:61:49:F7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:34:c9:66:83:94:95:15:c9:d2:65:ee:5e:8a:9c:88:e6:63: bb:ca:77:17:a7:ef:28:3d:0b:9e:62:ed:03:09:31:2c:86:35: c9:bc:dc:5a:d1:62:d9:0f:67:99:95:16:32:f5:1d:3d:ff:d6: 90:c5:dd:55:de:96:8c:a3:7a:87:06:83:65:04:bf:8e:f8:27: 09:f6:d2:4e:56:3a:b0:4e:d1:52:6f:ec:34:b2:0a:a8:d3:84: ce:14:92:11:a1:b8:7b:89:d2:96:50:ad:c5:1e:32:28:9d:97: 7b:b0:42:1e:5f:87:48:a1:a4:dc:89:81:fb:3c:61:e8:42:a7: 17:a7:3c:46:5b:b3:91:89:3c:a2:80:38:d3:d7:9a:28:80:28: d7:47:72:0c:06:f8:3c:ca:1f:9b:35:59:5a:7e:7d:b9:ce:e0: 50:00:b3:97:c8:03:52:82:fa:7f:31:a4:31:8f:f2:eb:3b:3c: cf:83:2f:77:6e:29:c9:f6:b2:56:71:56:95:33:6c:c4:e0:12: f5:db:a7:07:9f:96:3b:3e:ca:a9:3e:fb:11:1c:8f:e4:44:97: 34:02:56:a4:0f:d3:86:35:af:23:69:a7:c3:2b:b8:5f:6b:12: 00:30:76:06:65:ff:0e:57:b2:11:d5:80:72:95:73:12:3d:98: 0e:ee:06:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QjmkuKl+1UGsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk YWUzZGNmMWMtMzk4OC00NDlmLWJiZmYtYWVlZjYxNmM4N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorRl7WjRVbpp378KYeJRJvGX0s9pqwFO2qwW 2AooSf4pAeFXWbisB0Bfl1by8zZOAa+AWzZWT06/DtZbVoKx1nA5n99CvKfz6C2A 0LYPlx4u0I5k9ZF0xk7utC0XgRCh0dC1WFaPmcUAOi3Rn17jmgPwokD5Geva8YXa Xe1llbtOjBjW1mZm3iqoh8h3VOEi4Du1olCzCAWSIUYScxu0/4YcsRsuCKFufG4p ZaZyHahJ3XdsTK1oVWRWFSoUGTvzDlPh/po5Wv5tz8gsNJdsEdvZeWzGdsAyXLlE Mxo5L7GR9UJ3ZDOz/NmtkUNTbdEtz4MBkU1s3Pkih68ON6tTgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO6mWzc/JAexRVgXFpk0ANhSfepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzUzOTZiYzQtMGVkMC0z YjI2LThmZTUtYzI4ODNiYWYwOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC40yWaDlJUVydJl7l6KnIjmY7vKdxen7yg9C55i7QMJMSyGNcm83FrR YtkPZ5mVFjL1HT3/1pDF3VXeloyjeocGg2UEv474Jwn20k5WOrBO0VJv7DSyCqjT hM4UkhGhuHuJ0pZQrcUeMiidl3uwQh5fh0ihpNyJgfs8YehCpxenPEZbs5GJPKKA ONPXmiiAKNdHcgwG+DzKH5s1WVp+fbnO4FAAs5fIA1KC+n8xpDGP8us7PM+DL3du Kcn2slZxVpUzbMTgEvXbpwefljs+yqk++xEcj+RElzQCVqQP04Y1ryNpp8MruF9r EgAwdgZl/w5XshHVgHKVcxI9mA7uBqk= -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:05 2025 by rpki-client