This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b672b5da-8400-3d21-a541-56d3699001e8.roa File: b672b5da-8400-3d21-a541-56d3699001e8.roa (raw, json) Hash identifier: K+pnfKGgih8chNTAunHItwpNBBSRQyzHOi7waWUA44c= Subject key identifier: EA:78:C7:E5:A9:81:3A:38:A2:33:FC:0A:8D:DB:02:DA:A7:CC:D3:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C2F51272A08B1DEDF5573F080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b672b5da-8400-3d21-a541-56d3699001e8.roa Signing time: Sun 14 Dec 2025 14:00:39 +0000 ROA not before: Sun 14 Dec 2025 14:00:39 +0000 ROA not after: Sat 14 Mar 2026 13:00:39 +0000 asID: 9304 IP address blocks: 72.244.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:51:27:2a:08:b1:de:df:55:73:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 14 14:00:39 2025 GMT Not After : Mar 14 13:00:39 2026 GMT Subject: CN=98dc42db-c147-4aa6-ba02-001eab1116a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:8a:60:98:60:4b:8c:44:67:87:a2:0a:75: 3c:4f:78:58:30:9c:50:df:fa:9d:91:3a:83:ff:24: dc:9e:63:ea:70:69:63:6b:dd:37:68:22:17:18:2d: 45:a7:68:63:d4:a7:1a:0b:e8:44:39:87:17:71:69: ac:e6:3c:d2:39:5b:13:f4:97:7f:fe:21:c3:b1:2c: 51:09:2d:0f:5f:43:16:05:63:2f:0d:68:f1:63:dd: aa:ba:d2:eb:55:0e:ac:d7:27:dc:b6:01:08:1c:06: c1:d0:52:0d:10:32:79:f2:19:b3:1b:65:bd:5b:d5: 86:5b:b2:75:99:e0:4a:c9:34:c1:74:42:ec:d8:97: c7:f3:c2:14:41:e7:a5:ec:29:28:58:dd:16:72:c1: b5:53:bb:69:f4:13:c9:d6:b6:c9:3b:3f:ea:ee:3f: 56:81:48:bc:ae:2a:4a:83:c3:a5:02:61:c1:1d:86: ca:13:9c:48:7a:21:43:36:85:c2:e4:03:b0:2c:6e: 44:1d:90:d5:5b:6f:4c:c3:ad:56:3f:62:77:cd:9b: 20:30:91:04:52:ed:54:80:e3:3b:a3:be:08:7e:50: 89:5e:16:0d:db:47:0f:6c:75:50:d3:95:60:16:c9: d8:17:7e:64:82:e1:3a:4c:ed:3b:1e:fc:cf:8f:4e: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:78:C7:E5:A9:81:3A:38:A2:33:FC:0A:8D:DB:02:DA:A7:CC:D3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b672b5da-8400-3d21-a541-56d3699001e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a3:6a:a3:ef:83:48:db:e2:c8:7d:2c:c5:71:d2:42:d5:61: 27:34:9c:b8:b8:95:7a:9b:b3:1c:0b:28:f6:59:2a:b5:42:46: 43:28:b0:d4:70:9e:8c:2e:c7:f3:96:3d:01:39:8b:67:a9:1a: a3:19:65:a5:80:8c:3d:e2:c1:98:d9:3e:a7:05:51:1a:5b:cc: 65:5d:0c:44:5e:4c:37:f2:eb:27:6c:51:33:54:28:a0:99:8d: 89:4e:c5:80:93:5a:cb:ea:30:5f:d0:36:82:f6:70:51:96:9c: 40:5f:5a:14:89:a3:50:f3:c3:84:a6:e9:d3:a8:f3:b2:3c:ac: 91:f5:7f:92:31:8b:57:08:a4:89:bf:55:da:df:26:cb:0a:79: 9e:83:84:7d:a5:2b:5e:dd:13:b5:34:b8:34:55:54:19:7d:8a: 0b:b2:4c:23:7c:e5:80:cd:af:ec:25:df:fb:30:fa:7a:19:3d: 81:72:2e:fa:e4:0b:70:fe:d4:1d:e9:4c:83:78:b2:18:86:51: 12:df:a6:0f:61:9a:e5:d5:99:91:37:23:a0:08:66:1c:c7:2b: cd:c8:3d:e0:b7:ec:8c:34:a4:3f:c8:a4:04:9e:da:0e:d4:f0: ae:17:6b:49:49:dc:c6:b7:2d:66:5d:13:f8:14:2a:f5:4e:c3: b0:10:e7:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwvUScqCLHe31Vz8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxNDE0MDAzOVoXDTI2MDMxNDEzMDAzOVowLzEtMCsGA1UEAxMk OThkYzQyZGItYzE0Ny00YWE2LWJhMDItMDAxZWFiMTExNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifSKYJhgS4xEZ4eiCnU8T3hYMJxQ3/qdkTqD /yTcnmPqcGlja903aCIXGC1Fp2hj1KcaC+hEOYcXcWms5jzSOVsT9Jd//iHDsSxR CS0PX0MWBWMvDWjxY92qutLrVQ6s1yfctgEIHAbB0FINEDJ58hmzG2W9W9WGW7J1 meBKyTTBdELs2JfH88IUQeel7CkoWN0WcsG1U7tp9BPJ1rbJOz/q7j9WgUi8ripK g8OlAmHBHYbKE5xIeiFDNoXC5AOwLG5EHZDVW29Mw61WP2J3zZsgMJEEUu1UgOM7 o74IflCJXhYN20cPbHVQ05VgFsnYF35kguE6TO07HvzPj05h1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp4x+WpgTo4ojP8Co3bAtqnzNPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY3MmI1ZGEtODQwMC0z ZDIxLWE1NDEtNTZkMzY5OTAwMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqjaqPvg0jb4sh9LMVx0kLVYSc0nLi4lXqbsxwLKPZZKrVCRkMosNRw nowux/OWPQE5i2epGqMZZaWAjD3iwZjZPqcFURpbzGVdDEReTDfy6ydsUTNUKKCZ jYlOxYCTWsvqMF/QNoL2cFGWnEBfWhSJo1Dzw4Sm6dOo87I8rJH1f5Ixi1cIpIm/ VdrfJssKeZ6DhH2lK17dE7U0uDRVVBl9iguyTCN85YDNr+wl3/sw+noZPYFyLvrk C3D+1B3pTIN4shiGURLfpg9hmuXVmZE3I6AIZhzHK83IPeC37Iw0pD/IpASe2g7U 8K4Xa0lJ3Ma3LWZdE/gUKvVOw7AQ5yA= -----END CERTIFICATE-----Generated at Sat Dec 20 22:17:44 2025 by rpki-client