This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa File: 4d97cbb7-101c-3256-b1df-d5eae6da338b.roa (raw, json) Hash identifier: BAe8e2xSgsUXD5Vcd38KNy0SfHmQsYCdI5fgU99Ahs8= Subject key identifier: 2A:DA:32:15:24:C4:0B:5E:8E:79:95:E1:D7:DB:CF:BA:57:D1:28:9E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C2F5127CC2587AB14A5354500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa Signing time: Sun 14 Dec 2025 14:00:39 +0000 ROA not before: Sun 14 Dec 2025 14:00:39 +0000 ROA not after: Sat 14 Mar 2026 13:00:39 +0000 asID: 9304 IP address blocks: 72.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:51:27:cc:25:87:ab:14:a5:35:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 14 14:00:39 2025 GMT Not After : Mar 14 13:00:39 2026 GMT Subject: CN=a3a90ed8-8909-4f1d-b08b-9c06689aa87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:62:8f:4d:5c:26:20:ac:15:cd:d9:c1:c6: 7c:55:b3:32:29:59:2c:7c:a0:8f:17:bf:8d:e0:d3: 01:13:d3:03:a6:8b:6e:53:bb:21:d8:12:ef:25:22: 90:22:4c:3f:a5:07:fd:1d:a1:4c:a8:16:6f:c9:e9: e6:9d:bb:e1:35:af:f0:19:46:61:03:fe:7d:16:ec: d3:ef:ab:52:b7:65:98:4a:c9:d6:02:86:a6:0c:51: ed:ba:93:10:fd:22:d1:d2:e0:16:f3:ec:fc:42:92: f7:9b:3c:bb:87:e9:b2:e8:a0:ce:3e:5e:8f:be:fa: d1:02:da:79:60:3c:46:a9:9a:21:2d:18:dd:36:88: 16:d9:96:78:49:6f:ec:c8:0c:d3:37:32:f0:d2:64: 13:64:cc:0c:ca:4c:00:e2:72:c5:35:5d:4c:8d:22: 3e:c8:d8:7b:bd:0e:55:8b:a6:41:34:be:bf:36:75: a5:c8:9a:26:53:1e:1d:17:04:8d:60:93:36:c7:5a: 44:d4:30:95:2c:81:c7:ea:c1:e8:5b:13:d4:d9:04: 4c:90:c3:13:cb:1e:30:c4:5d:67:4a:3f:8e:71:87: e5:0a:5e:57:c0:77:ca:77:9c:6a:fc:ea:0d:0f:69: b7:c0:74:c6:13:f6:33:2a:ef:67:1a:8b:9b:a9:5e: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:32:15:24:C4:0B:5E:8E:79:95:E1:D7:DB:CF:BA:57:D1:28:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:6d:a6:04:4b:8a:11:f9:34:1d:2d:70:b3:c4:d9:ce:32:b8: 36:84:f5:72:5a:5c:6d:54:a2:2c:03:c2:83:e0:b4:3b:26:70: e8:00:46:83:2a:7a:25:f5:31:9f:08:b3:67:67:73:ff:79:cd: bd:5e:96:5c:0e:55:55:cc:27:ac:b2:0e:c2:2f:3a:dd:72:3f: 06:ee:53:1f:7f:19:50:87:a0:49:49:7a:89:db:d0:7a:7c:c9: 92:e9:8c:ce:b4:37:f2:5b:a9:09:44:75:74:57:95:07:77:08: bd:58:b8:c2:9b:01:00:20:d5:97:9b:cb:96:21:79:55:6d:e6: 29:b7:fc:97:ac:bf:50:ec:10:83:0d:48:37:05:b2:1d:1b:3a: e4:2e:72:5a:d8:c3:43:28:c1:e8:de:0a:5b:8b:b9:57:94:5d: d6:44:4a:33:d5:e6:09:81:b2:8c:31:eb:7f:1f:1a:1b:05:ec: 6a:fc:65:80:bb:35:ca:3b:8e:81:41:35:74:61:0f:54:f5:ae: 7d:7d:92:3b:fa:32:0a:2d:91:a9:54:04:d1:ae:a9:6f:47:14: 27:2e:7c:c4:07:e7:46:02:06:3d:4d:a1:3a:8d:85:e3:50:a5: 16:1e:49:d2:9e:a8:70:1b:1b:d4:74:5a:0b:ac:d1:76:15:71: 22:3d:2e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwvUSfMJYerFKU1RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxNDE0MDAzOVoXDTI2MDMxNDEzMDAzOVowLzEtMCsGA1UEAxMk YTNhOTBlZDgtODkwOS00ZjFkLWIwOGItOWMwNjY4OWFhODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Vij01cJiCsFc3ZwcZ8VbMyKVksfKCPF7+N 4NMBE9MDpotuU7sh2BLvJSKQIkw/pQf9HaFMqBZvyenmnbvhNa/wGUZhA/59FuzT 76tSt2WYSsnWAoamDFHtupMQ/SLR0uAW8+z8QpL3mzy7h+my6KDOPl6PvvrRAtp5 YDxGqZohLRjdNogW2ZZ4SW/syAzTNzLw0mQTZMwMykwA4nLFNV1MjSI+yNh7vQ5V i6ZBNL6/NnWlyJomUx4dFwSNYJM2x1pE1DCVLIHH6sHoWxPU2QRMkMMTyx4wxF1n Sj+OcYflCl5XwHfKd5xq/OoND2m3wHTGE/YzKu9nGoubqV4YYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCraMhUkxAtejnmV4dfbz7pX0SieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGQ5N2NiYjctMTAxYy0z MjU2LWIxZGYtZDVlYWU2ZGEzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZtpgRLihH5NB0tcLPE2c4yuDaE9XJaXG1UoiwDwoPgtDsmcOgARoMq eiX1MZ8Is2dnc/95zb1ellwOVVXMJ6yyDsIvOt1yPwbuUx9/GVCHoElJeonb0Hp8 yZLpjM60N/JbqQlEdXRXlQd3CL1YuMKbAQAg1Zeby5YheVVt5im3/Jesv1DsEIMN SDcFsh0bOuQuclrYw0MowejeCluLuVeUXdZESjPV5gmBsowx638fGhsF7Gr8ZYC7 Nco7joFBNXRhD1T1rn19kjv6MgotkalUBNGuqW9HFCcufMQH50YCBj1NoTqNheNQ pRYeSdKeqHAbG9R0Wgus0XYVcSI9LpI= -----END CERTIFICATE-----Generated at Sat Dec 20 22:14:42 2025 by rpki-client