This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa File: 5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa (raw, json) Hash identifier: ONZGVGEGq/siluadLPyH8AwObjX1lxnR9TsrWLbeRB0= Subject key identifier: 43:BF:E0:99:9D:90:4D:DE:49:DB:1E:72:1F:54:F4:27:03:27:A0:D0 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE108C125153DEC1E295A60 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:08:c1:25:15:3d:ec:1e:29:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=3e71431a-6433-4e9b-a4ef-a8d8f2ac3c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:77:c5:83:5c:7b:cc:4b:27:c8:86:22:96: 80:7e:1f:ae:3b:fc:a0:f8:99:b2:61:48:ba:bb:0e: 49:28:f2:e7:eb:db:ca:fd:ec:8b:70:3d:d3:68:0b: 23:b2:ec:7d:5d:d1:a8:aa:f9:50:04:36:39:21:b2: bc:19:89:a3:51:45:04:14:60:28:55:59:7f:7e:16: df:ad:28:57:ac:93:d0:0d:0e:2c:d0:9c:d2:1d:1e: 91:23:41:95:0b:a0:65:16:29:67:1f:21:f6:a1:48: 8e:41:cc:6d:e1:f1:51:f4:87:a7:5a:7a:f4:96:f1: 92:2e:73:8a:71:af:18:bf:b0:0e:70:67:2d:0d:e8: 84:3e:39:a4:cc:e3:bc:02:be:da:90:58:ee:fb:fb: da:05:a8:c7:66:b0:c2:c3:92:6f:a6:93:c7:15:6d: 0f:ee:75:24:b3:81:c2:f9:1e:5a:29:cf:24:20:13: b0:3d:dc:72:74:da:c7:6e:72:04:df:ba:52:bd:a2: 3f:dc:e1:83:c9:ed:f2:b9:3f:f9:68:4d:09:82:35: 16:37:da:f7:0b:6b:65:8c:9f:92:5b:7b:de:1d:7c: c7:b5:2d:f4:aa:1e:60:db:f5:16:c4:37:2b:f0:a2: 99:66:95:0a:8d:a5:65:95:0a:ae:3d:20:29:72:32: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:E0:99:9D:90:4D:DE:49:DB:1E:72:1F:54:F4:27:03:27:A0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ea:53:b7:46:5c:dd:fb:4a:5f:a8:df:e3:58:23:b9:fb:4b: 37:dc:40:1c:20:24:f4:e1:31:e2:9e:ae:fd:d8:95:c2:cd:f0: ca:f2:23:ca:8f:7b:a1:39:2b:79:47:b6:2c:ab:2e:c4:e8:ff: 56:94:47:7b:f3:c8:42:80:54:50:7b:63:e6:86:27:2d:e6:d4: 09:7c:df:46:21:db:06:ac:fe:0c:38:b8:f2:50:d4:fa:b2:3f: 44:c2:4b:ae:9e:82:e6:50:fc:84:fd:f2:16:c0:32:aa:de:6b: 69:4f:ec:6b:37:ec:11:96:46:e0:0f:59:b2:8c:17:da:ad:10: d7:19:24:e5:25:30:8b:32:e9:c9:42:54:47:9c:4f:41:48:98: 6c:4c:80:b8:87:b4:50:10:41:9d:96:ae:25:c2:04:c3:30:16: 6d:86:c6:e6:10:14:e1:15:d3:6f:35:32:72:ba:f8:30:0c:d0: 7b:44:79:4c:22:b0:37:86:b2:9f:c2:48:88:97:46:dc:f4:0e: b9:3b:21:d8:a9:18:fa:ae:9e:f6:d7:f4:8a:22:9a:94:fd:89: 34:59:2d:3c:09:24:27:a5:a0:e9:9b:9a:7c:01:1b:d7:22:a6: cb:f6:12:97:bd:b8:45:93:3c:b5:d5:4d:79:f9:ab:5b:29:ce: 59:b9:03:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QjBJRU97B4pWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk M2U3MTQzMWEtNjQzMy00ZTliLWE0ZWYtYThkOGYyYWMzYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfh3xYNce8xLJ8iGIpaAfh+uO/yg+JmyYUi6 uw5JKPLn69vK/eyLcD3TaAsjsux9XdGoqvlQBDY5IbK8GYmjUUUEFGAoVVl/fhbf rShXrJPQDQ4s0JzSHR6RI0GVC6BlFilnHyH2oUiOQcxt4fFR9IenWnr0lvGSLnOK ca8Yv7AOcGctDeiEPjmkzOO8Ar7akFju+/vaBajHZrDCw5JvppPHFW0P7nUks4HC +R5aKc8kIBOwPdxydNrHbnIE37pSvaI/3OGDye3yuT/5aE0JgjUWN9r3C2tljJ+S W3veHXzHtS30qh5g2/UWxDcr8KKZZpUKjaVllQquPSApcjKy2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO/4JmdkE3eSdsech9U9CcDJ6DQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNWZjY2Y1ZWEtZjVlZi0z MDRjLTg4MDgtZGFkZTkwZDdiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7qU7dGXN37Sl+o3+NYI7n7SzfcQBwgJPThMeKerv3YlcLN8MryI8qP e6E5K3lHtiyrLsTo/1aUR3vzyEKAVFB7Y+aGJy3m1Al830Yh2was/gw4uPJQ1Pqy P0TCS66eguZQ/IT98hbAMqrea2lP7Gs37BGWRuAPWbKMF9qtENcZJOUlMIsy6clC VEecT0FImGxMgLiHtFAQQZ2WriXCBMMwFm2GxuYQFOEV0281MnK6+DAM0HtEeUwi sDeGsp/CSIiXRtz0Drk7IdipGPqunvbX9IoimpT9iTRZLTwJJCeloOmbmnwBG9ci psv2Epe9uEWTPLXVTXn5q1spzlm5A0c= -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:03 2025 by rpki-client