This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa File: 67ed9f3f-8163-30ed-adda-fa473db6d09a.roa (raw, json) Hash identifier: xI4sv0MjikJ/oiC9FrGyuKwjSnsI5tIzqo6kJC0gLz4= Subject key identifier: 2D:3F:0C:73:3A:32:7F:FB:44:FF:A6:4E:07:07:2A:3A:D2:DD:5E:71 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE10921AAE01E5944F63380 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:09:21:aa:e0:1e:59:44:f6:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=104e0e53-4aed-4a35-8757-ade81f7e4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:0c:3f:b7:ef:a9:6c:04:c5:a1:81:27:87: 53:38:71:c9:02:29:00:74:53:7f:2a:43:5c:a2:b6: ca:f0:fd:75:1f:89:d6:2f:c0:3a:3d:62:fb:6d:91: cb:74:82:99:77:3f:1d:ca:d2:7b:b6:c0:96:7d:2d: e4:4d:4e:10:53:93:be:f8:b6:05:04:f4:cb:b1:72: a1:b7:4d:8d:fa:a9:52:6f:f1:d9:70:38:85:6d:ae: cd:53:ce:31:55:4d:75:2f:93:ec:2c:e0:c4:46:c4: f2:c8:29:99:e8:15:8d:dd:85:f4:ab:9e:0b:b2:e9: 96:7e:c3:b7:49:6f:8b:f5:c5:63:37:3c:99:74:92: 5f:22:46:ab:54:f1:c1:95:1b:84:49:d4:28:ba:ec: 33:31:a3:26:25:81:b7:aa:25:28:dd:77:0c:2e:35: 9c:62:4e:c4:20:cf:28:5f:63:ad:10:82:6b:40:14: 37:a8:58:87:2d:9c:d6:39:f7:54:4a:79:e2:12:dc: 01:77:87:cb:6e:b0:45:03:1e:b2:2b:9f:04:2d:88: 3a:e0:2c:56:fb:87:e0:1f:c6:1b:36:b9:b0:fb:03: 1e:a2:86:1e:4e:1c:49:ed:a3:52:0f:91:bf:e6:ec: 33:fc:85:09:2e:db:02:c4:28:51:b4:f0:d1:de:28: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3F:0C:73:3A:32:7F:FB:44:FF:A6:4E:07:07:2A:3A:D2:DD:5E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:69:fa:8c:d4:a8:a3:92:62:2c:94:02:f7:a0:76:fe:43:c6: 9b:d5:8f:fc:dd:1d:41:59:b8:76:0f:5f:77:68:ec:8e:9f:f9: 7c:f6:50:dc:10:8e:58:ef:e4:80:fe:c3:8c:15:f5:2e:bd:70: 85:a3:69:f9:ef:f2:b5:98:0d:cc:e2:85:6c:02:09:de:09:7e: 9e:87:cf:2a:c3:2b:48:ae:98:7e:c9:a6:c3:44:e1:f4:3b:8c: 70:05:17:64:99:7d:63:5e:96:60:db:a9:9b:fa:f6:77:e8:76: f8:a2:6c:2d:79:b1:01:ca:d8:98:fe:53:40:51:6b:75:2a:55: 6c:d7:e4:0e:a3:a1:ce:8b:1b:d9:60:de:85:16:bf:b6:d8:fb: 32:2a:2b:61:8f:14:d5:32:43:bb:a8:6f:b9:73:a9:18:d8:ab: 1f:f8:39:67:15:de:01:3a:06:bf:a6:af:5e:d4:82:5b:2f:60: 18:95:c5:91:29:54:c8:55:7e:63:5c:e0:e2:59:e1:d4:b3:d9: 6d:4b:65:3d:cc:8e:1d:0b:12:8b:3d:1d:f0:4a:8c:3e:06:ff: 20:5a:56:e6:e3:d0:91:38:58:a7:c3:b4:b5:e6:e0:85:a5:1b: 49:13:49:a0:a7:8c:c8:cb:c5:d8:82:d1:ab:17:fa:ca:31:ac: dc:d0:d8:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QkhquAeWUT2M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MTA0ZTBlNTMtNGFlZC00YTM1LTg3NTctYWRlODFmN2U0NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurkMP7fvqWwExaGBJ4dTOHHJAikAdFN/KkNc orbK8P11H4nWL8A6PWL7bZHLdIKZdz8dytJ7tsCWfS3kTU4QU5O++LYFBPTLsXKh t02N+qlSb/HZcDiFba7NU84xVU11L5PsLODERsTyyCmZ6BWN3YX0q54LsumWfsO3 SW+L9cVjNzyZdJJfIkarVPHBlRuESdQouuwzMaMmJYG3qiUo3XcMLjWcYk7EIM8o X2OtEIJrQBQ3qFiHLZzWOfdUSnniEtwBd4fLbrBFAx6yK58ELYg64CxW+4fgH8Yb Nrmw+wMeooYeThxJ7aNSD5G/5uwz/IUJLtsCxChRtPDR3ijVzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0/DHM6Mn/7RP+mTgcHKjrS3V5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjdlZDlmM2YtODE2My0z MGVkLWFkZGEtZmE0NzNkYjZkMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtp+ozUqKOSYiyUAvegdv5DxpvVj/zdHUFZuHYPX3do7I6f+Xz2UNwQ jljv5ID+w4wV9S69cIWjafnv8rWYDczihWwCCd4Jfp6HzyrDK0iumH7JpsNE4fQ7 jHAFF2SZfWNelmDbqZv69nfodviibC15sQHK2Jj+U0BRa3UqVWzX5A6joc6LG9lg 3oUWv7bY+zIqK2GPFNUyQ7uob7lzqRjYqx/4OWcV3gE6Br+mr17UglsvYBiVxZEp VMhVfmNc4OJZ4dSz2W1LZT3Mjh0LEos9HfBKjD4G/yBaVubj0JE4WKfDtLXm4IWl G0kTSaCnjMjLxdiC0asX+soxrNzQ2JM= -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:12 2025 by rpki-client