This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38856c74-1d72-3666-8789-806fb6332e41.roa File: 38856c74-1d72-3666-8789-806fb6332e41.roa (raw, json) Hash identifier: r48TkufEz+9I1zlG5h94tlvqSyS905Us9pGfjO9O9xU= Subject key identifier: 4D:86:8F:95:97:BF:61:05:14:E4:0D:C9:72:AF:96:0C:CB:CF:1E:D6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C3D4656B03CEF453843833DC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38856c74-1d72-3666-8789-806fb6332e41.roa Signing time: Fri 19 Dec 2025 14:00:39 +0000 ROA not before: Fri 19 Dec 2025 14:00:39 +0000 ROA not after: Thu 19 Mar 2026 13:00:39 +0000 asID: 152672 IP address blocks: 72.244.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:46:56:b0:3c:ef:45:38:43:83:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 19 14:00:39 2025 GMT Not After : Mar 19 13:00:39 2026 GMT Subject: CN=70e3f867-27dc-48da-994c-f2ef5d944f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c5:6b:ce:42:08:6c:a7:f5:30:0e:70:a8:97: c2:57:46:21:81:eb:dd:8a:12:5c:28:a9:fe:92:fb: c2:d3:8b:99:7f:96:6a:47:7a:7c:43:78:c1:b0:e8: c3:4b:e4:c3:1e:1f:8f:06:76:68:d8:ac:5d:cb:a5: 51:e0:4c:88:9e:d5:dd:fa:d9:bf:aa:b1:88:79:77: d5:b6:4a:03:13:6d:bb:ca:92:a5:38:4d:b7:6e:86: 4b:b4:4e:c9:68:fc:d3:0b:78:f2:e2:74:22:74:49: 5d:33:f5:fe:47:e2:b4:2e:91:c6:14:92:f5:64:02: e5:03:60:c9:4e:f3:0a:b5:c5:34:bc:4f:93:5f:d5: e1:9f:90:f9:bb:0e:d9:7c:98:8e:50:a7:03:15:53: e3:3b:d5:64:d1:68:01:7e:af:63:64:e0:f6:b2:a9: 99:a9:50:b4:d8:41:88:97:09:4f:89:07:73:dd:f1: 95:d0:a8:37:af:01:ca:b3:28:a2:67:b5:bd:81:49: c1:70:4b:95:53:2b:3b:9c:69:26:78:e6:5b:8f:7e: bf:f1:8c:0f:5f:a4:2c:12:4c:93:3a:38:6a:13:1e: c4:40:0e:46:7b:81:9f:8a:43:64:ca:8b:4d:93:84: 78:45:bd:6c:83:05:5b:94:ee:16:a9:a8:4b:78:73: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:86:8F:95:97:BF:61:05:14:E4:0D:C9:72:AF:96:0C:CB:CF:1E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38856c74-1d72-3666-8789-806fb6332e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0d:85:53:a5:62:62:b2:48:3e:09:6f:89:e0:e0:74:9e:9d: a5:2a:a7:48:a8:a7:a1:14:01:47:b5:c2:12:a3:70:82:d5:18: a0:e4:ed:95:a3:a1:14:a6:18:d2:2c:5a:77:29:ae:80:25:9d: 43:e8:5c:d9:3e:c3:ac:67:f1:e4:13:d3:ea:11:ba:86:67:db: 44:eb:db:78:f2:24:53:75:11:30:53:e6:b1:a0:29:ed:60:f0: 08:ce:c2:6b:59:37:c4:90:a6:5e:c1:4b:f3:a3:f4:66:4d:73: ef:53:9c:26:5a:9e:81:d5:7d:53:32:23:28:f1:41:1a:11:c6: 4d:54:52:90:bb:7e:dd:13:38:e9:bb:99:9c:b7:ba:d1:f5:d2: 10:1f:e6:85:11:e2:cb:3a:32:ec:8e:d3:07:4d:1a:b7:87:c3: 7e:47:6b:35:be:6f:37:08:5a:86:d7:4d:43:22:db:ec:9d:e5: 3f:18:2e:c2:a3:ed:fd:76:91:a7:6f:92:08:a7:69:11:5c:65: 8c:1e:61:06:f0:83:d4:ce:7a:04:03:91:1f:93:da:97:3e:c3: 84:25:59:84:b4:3f:fe:e9:14:1b:11:b4:25:f1:19:96:5c:9e: 11:1d:fa:1e:22:c1:a2:36:3f:e0:39:9b:87:31:8f:0e:ee:24: 32:79:90:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw9RlawPO9FOEODPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxOTE0MDAzOVoXDTI2MDMxOTEzMDAzOVowLzEtMCsGA1UEAxMk NzBlM2Y4NjctMjdkYy00OGRhLTk5NGMtZjJlZjVkOTQ0ZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cVrzkIIbKf1MA5wqJfCV0YhgevdihJcKKn+ kvvC04uZf5ZqR3p8Q3jBsOjDS+TDHh+PBnZo2Kxdy6VR4EyIntXd+tm/qrGIeXfV tkoDE227ypKlOE23boZLtE7JaPzTC3jy4nQidEldM/X+R+K0LpHGFJL1ZALlA2DJ TvMKtcU0vE+TX9Xhn5D5uw7ZfJiOUKcDFVPjO9Vk0WgBfq9jZOD2sqmZqVC02EGI lwlPiQdz3fGV0Kg3rwHKsyiiZ7W9gUnBcEuVUys7nGkmeOZbj36/8YwPX6QsEkyT OjhqEx7EQA5Ge4GfikNkyotNk4R4Rb1sgwVblO4WqahLeHNZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2Gj5WXv2EFFOQNyXKvlgzLzx7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzg4NTZjNzQtMWQ3Mi0z NjY2LTg3ODktODA2ZmI2MzMyZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoNhVOlYmKySD4Jb4ng4HSenaUqp0iop6EUAUe1whKjcILVGKDk7ZWj oRSmGNIsWncproAlnUPoXNk+w6xn8eQT0+oRuoZn20Tr23jyJFN1ETBT5rGgKe1g 8AjOwmtZN8SQpl7BS/Oj9GZNc+9TnCZanoHVfVMyIyjxQRoRxk1UUpC7ft0TOOm7 mZy3utH10hAf5oUR4ss6MuyO0wdNGreHw35HazW+bzcIWobXTUMi2+yd5T8YLsKj 7f12kadvkginaRFcZYweYQbwg9TOegQDkR+T2pc+w4QlWYS0P/7pFBsRtCXxGZZc nhEd+h4iwaI2P+A5m4cxjw7uJDJ5kDg= -----END CERTIFICATE-----Generated at Sun Dec 21 11:29:52 2025 by rpki-client