This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c1618e5-c734-37ac-b493-09928619eec7.roa File: 9c1618e5-c734-37ac-b493-09928619eec7.roa (raw, json) Hash identifier: JD6wdbUuCCdbP7JE6K9bx/F2VgB2Qo2cuCQMo5xfydE= Subject key identifier: 7B:B6:58:55:67:B9:4D:79:62:AA:9B:F2:00:6E:42:CC:EB:99:AB:F7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C423A451315DBA801E08E6B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c1618e5-c734-37ac-b493-09928619eec7.roa Signing time: Sun 21 Dec 2025 08:35:24 +0000 ROA not before: Sun 21 Dec 2025 08:35:24 +0000 ROA not after: Sat 21 Mar 2026 07:35:24 +0000 asID: 834 IP address blocks: 72.244.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:3a:45:13:15:db:a8:01:e0:8e:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 21 08:35:24 2025 GMT Not After : Mar 21 07:35:24 2026 GMT Subject: CN=a5b88fbc-4881-479a-81b7-99f96f3bc429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:25:7d:30:7e:81:98:37:8a:fe:47:43:5b: df:7f:34:81:20:8e:c2:3a:c3:4d:98:a4:91:c1:0c: 59:99:43:0a:d3:f6:80:38:79:d9:6d:99:64:3e:1b: 84:e1:d1:80:fd:2b:a0:00:27:87:09:e9:ad:d1:00: 8b:c9:0b:9a:ca:6a:b2:21:a6:26:1c:8f:94:be:59: 87:82:79:7f:0c:78:c8:4c:b4:86:12:dd:d8:40:39: 17:e1:58:3e:d5:a9:9b:3a:74:89:10:65:b1:81:13: af:2f:0e:9c:2f:1f:4f:27:a8:94:cc:d4:31:29:2c: 10:46:a8:12:dc:8b:24:2a:92:59:5d:b1:38:3b:34: c7:e1:05:fa:2d:f2:93:56:74:ee:16:fe:3a:bf:32: cf:2c:79:1a:58:ac:bd:cc:de:34:e8:33:d4:ea:ed: 15:82:46:3a:85:b0:ca:b3:cb:41:f4:42:c1:fa:e4: b3:f5:13:6c:05:a6:d4:ad:2c:96:0c:d5:12:f2:ef: ea:cd:50:3e:d5:48:4c:d9:7c:02:9a:30:d1:71:65: e2:86:91:0a:b5:fd:03:f4:6f:6d:77:60:5e:53:6f: e8:61:1a:2a:1c:d6:13:a5:22:92:f1:a5:e0:15:ed: 85:1e:6e:7b:5f:80:c7:ee:05:6f:58:08:61:54:2f: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B6:58:55:67:B9:4D:79:62:AA:9B:F2:00:6E:42:CC:EB:99:AB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c1618e5-c734-37ac-b493-09928619eec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7e:02:92:e6:ad:c0:88:32:d8:4f:7d:33:d1:26:37:58:74: 11:04:fc:cc:21:d9:8a:7a:0a:8c:ab:1f:e8:1f:c1:66:5b:7d: 73:1b:14:0f:3b:58:45:f0:f1:67:79:5c:d8:4f:05:d7:b8:d5: cb:ab:30:e3:55:33:1f:ef:23:cb:47:69:05:5e:20:22:9e:8f: 49:5a:3d:0d:bb:16:c0:5f:09:c5:d7:3a:b7:c3:ad:37:57:b7: 70:89:5b:00:5a:a0:b6:5d:4d:d7:c3:c4:6e:5a:15:26:b9:8c: bf:6d:e4:83:a4:60:41:f8:e0:ef:21:ec:0b:48:98:c0:15:9a: 4a:4a:f7:66:3c:e6:a9:df:bc:a2:42:f7:61:fa:e1:93:a1:00: e5:4b:f8:a0:ed:12:77:cf:a4:49:7e:25:21:75:95:61:f4:ac: 23:0f:71:b5:68:c1:c0:3f:31:cc:a2:69:f1:6b:48:8a:09:fc: e3:82:b3:40:19:84:b0:e9:75:22:d7:7e:53:b4:39:e6:dd:f3: 2f:a3:2c:2c:8b:e1:88:83:a9:33:e8:4c:bd:8f:7c:ed:d2:85: cd:e6:e8:90:ec:bd:e1:0d:f7:bb:c1:ff:0c:0b:a6:fd:9d:a4: 7a:59:f8:dd:56:b0:ff:50:d2:fc:37:62:63:57:b2:dd:84:c6: 44:b6:52:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExCOkUTFduoAeCOawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyMTA4MzUyNFoXDTI2MDMyMTA3MzUyNFowLzEtMCsGA1UEAxMk YTViODhmYmMtNDg4MS00NzlhLTgxYjctOTlmOTZmM2JjNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk8lfTB+gZg3iv5HQ1vffzSBII7COsNNmKSR wQxZmUMK0/aAOHnZbZlkPhuE4dGA/SugACeHCemt0QCLyQuaymqyIaYmHI+UvlmH gnl/DHjITLSGEt3YQDkX4Vg+1ambOnSJEGWxgROvLw6cLx9PJ6iUzNQxKSwQRqgS 3IskKpJZXbE4OzTH4QX6LfKTVnTuFv46vzLPLHkaWKy9zN406DPU6u0VgkY6hbDK s8tB9ELB+uSz9RNsBabUrSyWDNUS8u/qzVA+1UhM2XwCmjDRcWXihpEKtf0D9G9t d2BeU2/oYRoqHNYTpSKS8aXgFe2FHm57X4DH7gVvWAhhVC9T6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu2WFVnuU15Yqqb8gBuQszrmav3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWMxNjE4ZTUtYzczNC0z N2FjLWI0OTMtMDk5Mjg2MTllZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN+ApLmrcCIMthPfTPRJjdYdBEE/Mwh2Yp6CoyrH+gfwWZbfXMbFA87 WEXw8Wd5XNhPBde41curMONVMx/vI8tHaQVeICKej0laPQ27FsBfCcXXOrfDrTdX t3CJWwBaoLZdTdfDxG5aFSa5jL9t5IOkYEH44O8h7AtImMAVmkpK92Y85qnfvKJC 92H64ZOhAOVL+KDtEnfPpEl+JSF1lWH0rCMPcbVowcA/McyiafFrSIoJ/OOCs0AZ hLDpdSLXflO0Oebd8y+jLCyL4YiDqTPoTL2PfO3Shc3m6JDsveEN97vB/wwLpv2d pHpZ+N1WsP9Q0vw3YmNXst2ExkS2Ujs= -----END CERTIFICATE-----Generated at Sun Dec 21 11:25:45 2025 by rpki-client