This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c72c850-8149-3da4-a4a7-a367eed3e058.roa File: 8c72c850-8149-3da4-a4a7-a367eed3e058.roa (raw, json) Hash identifier: 9W+c5KQzskQW4dbLPzS0BlzIFWVb/dBP/gRX6eYhtB0= Subject key identifier: 4A:8D:19:CA:AE:70:E7:2E:A8:0F:03:C2:ED:45:5E:54:AF:DF:D2:18 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C3A129D2B1AD1BCAA10E67700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c72c850-8149-3da4-a4a7-a367eed3e058.roa Signing time: Thu 18 Dec 2025 10:29:02 +0000 ROA not before: Thu 18 Dec 2025 10:29:02 +0000 ROA not after: Wed 18 Mar 2026 09:29:02 +0000 asID: 149978 IP address blocks: 72.244.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:12:9d:2b:1a:d1:bc:aa:10:e6:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 18 10:29:02 2025 GMT Not After : Mar 18 09:29:02 2026 GMT Subject: CN=b40f51f2-8cfd-405e-80d1-059d59e755a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:04:f2:16:92:fe:70:26:8e:a9:d1:b6:0c: 63:8f:f9:27:1c:eb:29:4d:eb:c3:96:23:6b:1c:60: 83:b2:bc:9c:ca:83:2b:5a:95:50:18:a6:b4:da:54: 85:6b:73:35:26:e5:be:76:ec:c5:e0:9e:ea:d4:0d: 0d:e8:10:9d:23:88:9d:59:8b:f9:8b:e7:9f:24:55: 52:f6:3e:a0:4f:44:bb:fb:2d:3b:2c:5e:37:ba:cf: c8:41:27:ef:e3:e6:fb:d4:f2:23:95:2f:51:52:f9: ae:40:51:59:bf:19:61:5b:1a:61:c7:58:40:72:a4: 8e:a3:c1:c5:16:3c:66:af:2c:07:eb:9c:b5:7c:e2: 11:8b:e7:26:3e:5f:18:5e:b1:6b:b5:65:76:32:93: ad:1a:03:64:79:a0:22:b4:c0:f5:80:fc:63:3f:4c: a7:f7:a5:4f:23:4b:d2:f0:3d:cc:fa:49:04:37:2b: ea:2b:45:d2:cb:6a:74:77:40:21:8b:62:58:18:6c: f9:2a:4c:08:df:0b:6f:b7:77:82:4b:79:75:0f:2f: cc:9c:c9:2a:73:5c:4c:91:82:41:e6:39:8a:67:58: 9c:aa:dc:71:67:bb:00:72:a4:68:df:f4:3f:6f:cd: 41:45:15:5b:6e:7b:69:e9:00:8f:42:30:ca:59:0d: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8D:19:CA:AE:70:E7:2E:A8:0F:03:C2:ED:45:5E:54:AF:DF:D2:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c72c850-8149-3da4-a4a7-a367eed3e058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:be:e4:cf:26:17:18:62:8d:b4:24:98:e9:8a:4a:27:47:c1: c5:47:09:1f:b6:5a:92:03:33:a9:47:33:9f:e9:9a:ad:b7:48: 42:54:7f:93:e5:22:98:f9:d5:d0:d7:65:88:bf:86:84:2d:ae: fc:bb:a3:2e:25:87:5d:df:e5:ac:f1:9f:db:cd:19:ad:ac:59: b8:31:d6:53:3c:4d:7d:6a:0c:04:85:e0:e7:ea:28:4c:64:c7: 25:d5:5a:50:1c:25:bc:25:03:19:89:f2:6f:2b:fd:64:36:b0: f7:91:c5:ac:6e:a4:c2:cd:9a:ef:86:a5:8e:ad:c6:3c:b6:6a: f0:46:63:0b:4d:93:58:88:16:c2:22:20:fa:64:23:13:5e:60: 74:83:f9:b5:75:fb:31:32:a2:1b:ac:5c:9f:89:63:59:12:4d: c2:a1:da:b0:a0:b3:e9:4b:54:82:04:50:6a:6a:03:9e:b1:ab: b4:2e:f6:3a:93:46:37:f8:46:1d:5c:ab:17:ef:dc:ad:5d:6a: da:b1:9b:f9:30:ce:ef:95:9c:98:c2:2e:cb:8a:4a:11:6a:4d: 4f:be:b8:6d:28:2a:d4:00:bb:b3:3e:e7:9b:fe:67:27:04:c2: 2e:74:77:d5:29:d9:9b:9a:21:b6:5d:88:be:b1:af:f1:46:79: 6f:2e:ae:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw6Ep0rGtG8qhDmdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxODEwMjkwMloXDTI2MDMxODA5MjkwMlowLzEtMCsGA1UEAxMk YjQwZjUxZjItOGNmZC00MDVlLTgwZDEtMDU5ZDU5ZTc1NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuoE8haS/nAmjqnRtgxjj/knHOspTevDliNr HGCDsrycyoMrWpVQGKa02lSFa3M1JuW+duzF4J7q1A0N6BCdI4idWYv5i+efJFVS 9j6gT0S7+y07LF43us/IQSfv4+b71PIjlS9RUvmuQFFZvxlhWxphx1hAcqSOo8HF FjxmrywH65y1fOIRi+cmPl8YXrFrtWV2MpOtGgNkeaAitMD1gPxjP0yn96VPI0vS 8D3M+kkENyvqK0XSy2p0d0Ahi2JYGGz5KkwI3wtvt3eCS3l1Dy/MnMkqc1xMkYJB 5jmKZ1icqtxxZ7sAcqRo3/Q/b81BRRVbbntp6QCPQjDKWQ29iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqNGcqucOcuqA8Dwu1FXlSv39IYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGM3MmM4NTAtODE0OS0z ZGE0LWE0YTctYTM2N2VlZDNlMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO+5M8mFxhijbQkmOmKSidHwcVHCR+2WpIDM6lHM5/pmq23SEJUf5Pl Ipj51dDXZYi/hoQtrvy7oy4lh13f5azxn9vNGa2sWbgx1lM8TX1qDASF4OfqKExk xyXVWlAcJbwlAxmJ8m8r/WQ2sPeRxaxupMLNmu+GpY6txjy2avBGYwtNk1iIFsIi IPpkIxNeYHSD+bV1+zEyohusXJ+JY1kSTcKh2rCgs+lLVIIEUGpqA56xq7Qu9jqT Rjf4Rh1cqxfv3K1datqxm/kwzu+VnJjCLsuKShFqTU++uG0oKtQAu7M+55v+ZycE wi50d9Up2ZuaIbZdiL6xr/FGeW8urrg= -----END CERTIFICATE-----Generated at Sun Dec 21 11:25:53 2025 by rpki-client