This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa File: 7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json) Hash identifier: 0FmfQ3O8aXEa+FBNhw4gpto5yCc45Z2Vle7fbJasSMk= Subject key identifier: 64:F4:7B:9E:80:D5:C6:1F:20:29:54:49:37:A0:82:EE:BF:D5:CA:99 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE109704687B6FDAABAB100 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:09:70:46:87:b6:fd:aa:ba:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=cb0b4c69-4a29-41f1-a4bf-fffc7a9497a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:a8:aa:be:f8:d9:84:ad:75:2b:4d:ff:20: af:b3:e7:35:1d:ce:c8:be:8b:1c:9f:92:58:18:02: 96:58:04:ab:1e:8c:78:85:b2:b5:97:79:d9:6a:1e: 76:0c:01:32:c4:51:2b:75:fb:f4:53:ca:6b:7f:79: 67:0c:de:78:e0:a9:8a:5f:1e:71:e7:72:7f:02:98: f0:57:ce:9f:cc:46:6c:27:1c:22:e4:35:76:9e:4e: ab:9f:75:87:67:df:8b:ba:ba:0b:4b:0a:c6:c3:6b: 2d:02:11:f4:60:29:0d:e9:43:12:87:f2:35:f6:e6: 53:4b:62:1b:02:d3:88:f2:4d:64:3d:83:6a:6d:ea: 46:ca:51:ff:8a:00:2e:38:aa:04:91:0f:26:36:ec: db:85:13:d0:f3:c2:d2:b6:82:ed:fe:2b:3f:e3:ed: a4:cc:62:95:81:e9:2a:84:62:44:51:15:b8:91:91: bf:2f:b1:cc:6b:18:ea:bc:a4:66:31:a9:32:78:b3: 4a:d9:77:3d:29:b0:b3:04:e7:0d:75:6a:02:30:47: 24:30:34:fa:bf:28:f8:20:65:43:d1:74:96:12:a8: 3a:67:a9:57:ef:e0:38:0e:70:60:c5:fa:15:76:b3: 82:4d:5f:3f:88:b0:31:51:1e:1d:b0:63:ae:a8:27: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F4:7B:9E:80:D5:C6:1F:20:29:54:49:37:A0:82:EE:BF:D5:CA:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ec:84:9e:0b:80:f3:a7:dd:95:05:42:9b:79:f9:1e:64:79: 74:c1:e5:e8:1d:50:2c:35:f3:87:1e:e7:96:5f:87:55:9d:d5: 53:d6:fe:1c:5c:ab:33:08:1a:be:20:f4:aa:c3:e5:b1:01:e2: d5:2c:5a:9d:e4:b2:11:33:fd:3a:9a:c2:2f:b8:1f:e1:54:a0: e4:69:7e:5a:c4:1c:a7:f6:45:94:bd:2e:10:f3:ec:00:a4:ea: 55:b8:aa:22:b2:e3:0b:76:3f:e1:fe:50:8e:d3:b3:3e:d3:08: 36:f6:dc:39:0b:e4:f1:da:2b:de:d0:28:6c:89:a7:c1:be:48: 18:39:30:57:ff:39:cc:05:6f:a9:64:49:e9:11:86:82:28:6f: 93:26:7e:01:70:6f:a5:95:2d:f2:48:15:13:4e:37:e5:ab:f9: b7:9c:df:92:95:25:e8:9d:be:b0:4c:1e:51:a1:38:d6:aa:00: 67:33:54:88:62:fd:41:9d:cb:9e:37:ae:23:0f:e7:b7:5b:15: 4a:c9:00:b5:99:c4:c8:fc:81:ff:f1:eb:54:29:0f:c9:9b:db: 23:0e:d4:14:3f:47:b3:e7:5a:97:d8:91:f1:bd:5c:36:39:8b: 56:f9:3a:17:59:f8:cc:04:33:66:3c:2d:82:2e:12:5a:bc:9a: 4f:46:b5:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QlwRoe2/aq6sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk Y2IwYjRjNjktNGEyOS00MWYxLWE0YmYtZmZmYzdhOTQ5N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhyoqr742YStdStN/yCvs+c1Hc7Ivoscn5JY GAKWWASrHox4hbK1l3nZah52DAEyxFErdfv0U8prf3lnDN544KmKXx5x53J/Apjw V86fzEZsJxwi5DV2nk6rn3WHZ9+LuroLSwrGw2stAhH0YCkN6UMSh/I19uZTS2Ib AtOI8k1kPYNqbepGylH/igAuOKoEkQ8mNuzbhRPQ88LStoLt/is/4+2kzGKVgekq hGJEURW4kZG/L7HMaxjqvKRmMakyeLNK2Xc9KbCzBOcNdWoCMEckMDT6vyj4IGVD 0XSWEqg6Z6lX7+A4DnBgxfoVdrOCTV8/iLAxUR4dsGOuqCdv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT0e56A1cYfIClUSTeggu6/1cqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXshJ4LgPOn3ZUFQpt5+R5keXTB5egdUCw184ce55Zfh1Wd1VPW/hxc qzMIGr4g9KrD5bEB4tUsWp3kshEz/Tqawi+4H+FUoORpflrEHKf2RZS9LhDz7ACk 6lW4qiKy4wt2P+H+UI7Tsz7TCDb23DkL5PHaK97QKGyJp8G+SBg5MFf/OcwFb6lk SekRhoIob5MmfgFwb6WVLfJIFRNON+Wr+bec35KVJeidvrBMHlGhONaqAGczVIhi /UGdy543riMP57dbFUrJALWZxMj8gf/x61QpD8mb2yMO1BQ/R7PnWpfYkfG9XDY5 i1b5OhdZ+MwEM2Y8LYIuElq8mk9GtSc= -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:09 2025 by rpki-client