This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa File: caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json) Hash identifier: R4o2RZpFOEANmZqPGNYE2//NyjMjOJjZ6bohGKpn9CM= Subject key identifier: 2E:BB:3E:09:F7:49:DD:5C:E3:37:E2:97:F4:54:19:6D:49:A6:7D:CB Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584BEF1B36B5BF7E47D77BE78E70 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 23470 IP address blocks: 104.128.72.0/24 maxlen: 24 104.128.73.0/24 maxlen: 24 104.128.74.0/24 maxlen: 24 104.128.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:36:b5:bf:7e:47:d7:7b:e7:8e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=201100ee-7bd5-4660-8c51-67f70c6f4fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:ca:93:7d:ce:f0:34:7e:22:51:23:b4:a0: 37:40:3c:c7:fc:7e:b1:93:b9:92:b5:c5:9d:00:dc: dc:9f:23:19:50:e3:52:c8:40:fd:33:c9:f6:16:63: 4e:46:54:67:a3:77:4b:e5:e3:43:82:a3:9d:f4:1c: 99:9b:0e:41:76:70:f0:53:0c:31:0c:a6:8c:e0:0e: 5a:bf:a2:9e:43:26:4d:41:8e:6c:d5:2b:2e:6b:57: 28:cc:a1:6b:5f:ca:de:bb:ef:93:48:85:cf:b2:d6: 9a:77:04:e3:49:27:8b:80:2c:80:60:ba:5f:b2:cb: 56:04:77:d6:ba:86:44:93:bd:4a:b2:df:59:dc:1b: b9:23:2d:2c:80:b1:89:72:1e:15:eb:83:3c:0d:12: 5b:e7:5a:1b:b8:fd:8c:2e:b9:3e:c5:94:cc:51:24: 45:fc:f7:7a:8b:37:73:e7:31:5d:08:d9:af:8c:4b: 90:ad:b2:c6:38:9a:32:de:0c:50:05:6e:08:56:3d: 1b:e1:1d:b1:f5:36:97:18:7b:d9:2f:a9:3d:e1:a8: 37:0f:3a:9f:35:6b:12:91:e1:80:fa:08:41:f8:ae: 32:17:df:d1:89:2d:05:af:e8:33:94:1e:96:13:af: 77:72:b9:89:9c:7a:2b:4d:9d:a1:91:db:f5:47:e1: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BB:3E:09:F7:49:DD:5C:E3:37:E2:97:F4:54:19:6D:49:A6:7D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.128.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:80:b4:d2:6c:c4:20:54:36:6b:86:31:57:fe:67:23:49:76: 4f:d7:e8:75:2b:20:19:b8:b4:82:c8:33:3a:9e:40:3a:ad:17: 5f:77:be:0e:8f:4d:84:a4:d6:e1:6e:16:48:e6:49:00:7f:3b: 20:03:e5:8a:e6:ed:88:7c:62:f4:e3:f0:d1:72:c1:c1:a5:5f: 64:f3:28:c8:08:9d:ff:26:a7:a4:66:25:c3:ff:ca:78:7c:3b: 84:2b:e4:25:3a:78:47:c3:0d:4a:bd:3d:08:f7:c6:9f:60:98: f9:cc:e0:ec:85:83:1f:21:48:a1:d9:ce:9a:18:38:cf:09:fe: 42:e0:9f:09:70:c8:c6:94:15:f6:98:25:74:a7:46:28:3f:05: d4:6c:f6:dd:d3:eb:16:c9:96:f3:01:7e:58:46:b7:06:ec:d2: 13:31:1f:b1:d1:93:59:9b:08:28:33:38:50:d7:44:b9:7e:73: a4:28:e2:b8:ca:b6:d9:76:26:c0:e9:9d:38:d6:63:8f:cd:9e: 93:da:9b:f6:77:14:8b:17:5c:e8:20:14:21:6c:f3:f4:09:63: 14:19:9f:6a:fc:12:5c:a9:19:25:81:bb:fd:6d:db:a9:96:f0: 66:b1:d1:30:10:c9:40:0b:db:b4:c9:a9:61:8e:87:8e:5f:54: a1:89:7c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGza1v35H13vnjnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk MjAxMTAwZWUtN2JkNS00NjYwLThjNTEtNjdmNzBjNmY0ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilHKk33O8DR+IlEjtKA3QDzH/H6xk7mStcWd ANzcnyMZUONSyED9M8n2FmNORlRno3dL5eNDgqOd9ByZmw5BdnDwUwwxDKaM4A5a v6KeQyZNQY5s1Ssua1cozKFrX8reu++TSIXPstaadwTjSSeLgCyAYLpfsstWBHfW uoZEk71Kst9Z3Bu5Iy0sgLGJch4V64M8DRJb51obuP2MLrk+xZTMUSRF/Pd6izdz 5zFdCNmvjEuQrbLGOJoy3gxQBW4IVj0b4R2x9TaXGHvZL6k94ag3DzqfNWsSkeGA +ghB+K4yF9/RiS0Fr+gzlB6WE693crmJnHorTZ2hkdv1R+F9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC67Pgn3Sd1c4zfil/RUGW1Jpn3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvY2FhZmE2OTEtMjllNy0z YWNkLTliZWMtNjc2OTFhODc2YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmAtNJsxCBUNmuGMVf+ZyNJdk/X6HUrIBm4tILIMzqeQDqtF193vg6P TYSk1uFuFkjmSQB/OyAD5Yrm7Yh8YvTj8NFywcGlX2TzKMgInf8mp6RmJcP/ynh8 O4Qr5CU6eEfDDUq9PQj3xp9gmPnM4OyFgx8hSKHZzpoYOM8J/kLgnwlwyMaUFfaY JXSnRig/BdRs9t3T6xbJlvMBflhGtwbs0hMxH7HRk1mbCCgzOFDXRLl+c6Qo4rjK ttl2JsDpnTjWY4/NnpPam/Z3FIsXXOggFCFs8/QJYxQZn2r8ElypGSWBu/1t26mW 8Gax0TAQyUAL27TJqWGOh45fVKGJfLo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:56 2025 by rpki-client