This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3baade23-aead-3816-ae33-71c2a39ec990.roa File: 3baade23-aead-3816-ae33-71c2a39ec990.roa (raw, json) Hash identifier: NiXi04Tcb08mlDFbkc43NgyZFTfDSYQXoafstxKYmco= Subject key identifier: D5:6E:B8:CC:52:33:B5:CA:FE:6D:1D:D6:AB:A0:8E:38:4B:CE:E5:08 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C4219CABECC885008BFBE8880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3baade23-aead-3816-ae33-71c2a39ec990.roa Signing time: Sun 21 Dec 2025 07:29:57 +0000 ROA not before: Sun 21 Dec 2025 07:29:57 +0000 ROA not after: Sat 21 Mar 2026 06:29:57 +0000 asID: 834 IP address blocks: 72.244.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:19:ca:be:cc:88:50:08:bf:be:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 21 07:29:57 2025 GMT Not After : Mar 21 06:29:57 2026 GMT Subject: CN=0bb9f54f-bda9-41dd-bc6d-847ed7fc81a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:29:b3:c4:ce:c3:da:fc:b3:89:fb:2b:0a: 88:19:87:a5:ca:9c:35:cc:20:fb:61:e8:9a:2c:66: 88:36:50:43:de:c5:3e:a2:8b:79:ac:aa:82:93:ae: a5:6d:55:55:76:d9:c7:27:d0:e7:61:2c:90:04:3a: 78:ff:2e:2a:5d:09:9e:9b:f3:de:fb:47:b2:fb:5c: 36:2c:34:ae:97:f8:cc:86:03:06:11:5e:b1:15:11: 58:16:e9:1b:b8:0f:c2:83:bf:c9:c3:fb:45:cb:ef: 2d:4a:66:2c:95:96:89:79:91:8c:f9:38:13:0d:d4: 27:50:95:30:be:d6:c5:ef:6e:00:c0:ed:2c:b5:cc: 5e:86:e1:99:00:0d:b1:bd:6a:4b:e7:a8:35:4f:02: 00:ed:86:cb:5e:ad:2c:07:d5:2f:f0:ec:57:99:18: 06:2c:ab:17:7d:a1:df:ed:68:81:75:7b:b7:60:be: 9a:ec:48:fc:b5:4a:03:96:53:34:b1:61:77:c3:96: 5b:e7:41:db:f5:76:a7:58:42:05:0c:5c:29:e4:12: 1d:f2:ef:f7:66:b8:16:04:a6:d7:80:bf:4a:1f:d7: 07:6d:a4:d3:eb:d7:9f:06:fc:11:12:b2:20:c9:6a: 86:7a:e6:ad:73:72:e2:b1:90:c6:43:69:61:9e:e8: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:B8:CC:52:33:B5:CA:FE:6D:1D:D6:AB:A0:8E:38:4B:CE:E5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3baade23-aead-3816-ae33-71c2a39ec990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d4:c8:01:c2:85:4b:8f:16:25:42:9c:6b:8b:6c:bf:1e:6f: e7:a9:b9:d4:bc:76:d9:4a:ee:df:fc:f3:44:ce:a5:db:db:59: 88:68:cf:d3:2f:b2:d1:46:05:31:cc:00:3c:f4:0d:f5:ca:45: 68:d7:d4:b5:be:66:2e:ed:35:b2:61:eb:f5:78:d2:d8:dc:f0: 9a:cb:73:99:f2:88:ee:bc:cd:5a:77:2c:58:e2:fb:ec:65:41: 51:34:3e:d2:b4:36:86:1e:2f:18:70:2e:54:f2:8e:86:64:b1: 35:13:1b:e4:0b:f2:d9:56:50:bb:6a:06:8f:fc:70:4b:1b:0f: 0c:3d:c0:29:e5:60:b2:1f:ab:83:6d:69:54:2a:bb:8a:c0:81: c9:fa:09:b5:e5:b3:fa:7a:f2:50:4b:d4:18:6a:2e:71:6a:ae: e6:73:41:d8:eb:07:8d:18:9e:bd:fd:9e:6e:1f:40:55:ed:8b: 5f:60:20:be:61:06:ae:12:52:ba:95:dc:43:66:4e:8f:6c:66: 9e:82:a7:d3:30:de:1a:75:d1:cc:26:c4:41:db:1b:d8:1a:fd: 4e:35:fd:ee:5a:50:59:d4:0a:53:fa:7e:bc:27:c3:77:5d:40: ad:29:f3:70:70:ca:75:a7:53:85:84:3c:db:c8:fd:38:9d:b8: 2c:1f:b8:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExCGcq+zIhQCL++iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyMTA3Mjk1N1oXDTI2MDMyMTA2Mjk1N1owLzEtMCsGA1UEAxMk MGJiOWY1NGYtYmRhOS00MWRkLWJjNmQtODQ3ZWQ3ZmM4MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTops8TOw9r8s4n7KwqIGYelypw1zCD7Yeia LGaINlBD3sU+oot5rKqCk66lbVVVdtnHJ9DnYSyQBDp4/y4qXQmem/Pe+0ey+1w2 LDSul/jMhgMGEV6xFRFYFukbuA/Cg7/Jw/tFy+8tSmYslZaJeZGM+TgTDdQnUJUw vtbF724AwO0stcxehuGZAA2xvWpL56g1TwIA7YbLXq0sB9Uv8OxXmRgGLKsXfaHf 7WiBdXu3YL6a7Ej8tUoDllM0sWF3w5Zb50Hb9XanWEIFDFwp5BId8u/3ZrgWBKbX gL9KH9cHbaTT69efBvwRErIgyWqGeuatc3LisZDGQ2lhnuhngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVuuMxSM7XK/m0d1qugjjhLzuUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JhYWRlMjMtYWVhZC0z ODE2LWFlMzMtNzFjMmEzOWVjOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnUyAHChUuPFiVCnGuLbL8eb+epudS8dtlK7t/880TOpdvbWYhoz9Mv stFGBTHMADz0DfXKRWjX1LW+Zi7tNbJh6/V40tjc8JrLc5nyiO68zVp3LFji++xl QVE0PtK0NoYeLxhwLlTyjoZksTUTG+QL8tlWULtqBo/8cEsbDww9wCnlYLIfq4Nt aVQqu4rAgcn6CbXls/p68lBL1BhqLnFqruZzQdjrB40Ynr39nm4fQFXti19gIL5h Bq4SUrqV3ENmTo9sZp6Cp9Mw3hp10cwmxEHbG9ga/U41/e5aUFnUClP6frwnw3dd QK0p83BwynWnU4WEPNvI/TiduCwfuC8= -----END CERTIFICATE-----Generated at Sun Dec 21 11:25:40 2025 by rpki-client