This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json) Hash identifier: 8hbAHyH2BVmBApHgv76NLl381bfrp/J+mqzy7mAbKko= Subject key identifier: E4:21:A8:72:33:65:F1:AB:8A:46:2C:81:C0:E4:4B:1F:5F:6E:89:D7 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584C9C31ADC9E8FDC59D3192AB80 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 211373 IP address blocks: 72.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:ad:c9:e8:fd:c5:9d:31:92:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=c3578e02-ee33-4239-8ba2-e93461ef179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:ab:ec:67:69:9d:5f:d2:91:21:8f:7e:d9: bd:fb:5b:47:77:74:bd:33:98:a1:9c:93:6d:a8:36: 96:c4:3e:13:aa:c1:af:ce:e8:cb:c6:57:28:5c:c0: 66:2e:49:c7:34:78:29:4b:20:63:d3:00:27:61:4b: b6:5d:2e:49:66:39:90:a4:9e:ae:e7:95:e6:8f:2b: 65:27:41:ac:4d:a5:cd:e8:86:76:3f:2e:b7:ad:57: 1b:c5:53:bc:36:37:be:75:e9:d2:c5:f9:cd:3c:a9: e6:cc:b6:c0:7d:8b:85:e0:43:da:9e:91:03:c4:2d: 2f:12:0d:f7:d6:a7:79:c7:ba:c5:31:ca:05:10:27: 82:3c:5b:f1:25:f5:d0:69:af:10:f4:61:22:20:33: 1e:57:d6:91:fb:0f:d1:c7:58:6a:e0:8a:2e:27:15: 14:81:51:3b:fe:75:7a:ff:96:b1:c8:69:09:bc:5c: 43:4d:72:7c:13:f7:18:c9:82:bd:02:73:ae:74:2e: 63:20:63:c9:ea:80:09:2c:38:59:f2:a9:76:80:08: a4:f3:2f:50:d6:73:89:fd:78:80:4f:cf:48:9b:53: 04:bb:b9:76:51:79:0b:13:25:10:a6:b0:5d:e5:0f: 0e:7d:05:59:7f:97:a6:d7:b9:bb:67:20:7c:41:6c: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:A8:72:33:65:F1:AB:8A:46:2C:81:C0:E4:4B:1F:5F:6E:89:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0d:46:f9:ff:87:98:f3:d6:50:a6:b5:04:f1:e8:2a:bf:15: e7:53:92:d2:f2:21:e9:08:6d:05:ca:ce:fa:6d:9b:86:10:76: 0b:7c:d2:08:bd:32:22:2b:0f:3e:cd:20:1a:f7:bd:dc:fc:a3: 47:64:69:3d:fc:8c:e5:3c:80:e3:e7:4f:f6:60:a2:a8:8f:1c: e5:24:85:24:a7:4f:c9:50:2b:16:48:c1:fe:54:90:e0:5b:18: f1:f8:4d:14:9b:d0:7e:a2:dd:c0:15:36:71:cd:f8:64:46:a5: a0:86:3f:c6:73:90:2b:b0:73:95:16:b2:fb:e6:2e:b3:07:b1: b9:cc:05:95:49:09:60:6b:c8:25:ad:cd:a1:4e:89:47:d0:58: 5a:d9:d1:8f:b4:7b:f5:10:dc:27:21:ba:7b:9f:9e:da:b6:d2: ac:ae:a3:a0:2a:da:dc:02:8e:b8:a1:f8:8d:52:35:e1:aa:45: ee:da:27:3c:3b:dc:11:6f:12:cb:6f:b7:f2:1d:48:6c:87:84: 3e:46:22:a1:4c:ae:ed:f5:82:d6:4b:6d:d6:22:d0:98:b2:94: dc:bf:59:2a:f1:87:bd:26:7a:44:55:cf:b7:3b:18:ef:f7:95: 6b:2a:a9:ec:11:6f:55:73:1c:a6:c8:4d:dc:ae:30:5b:f9:35: b3:55:f1:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMa3J6P3FnTGSq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk YzM1NzhlMDItZWUzMy00MjM5LThiYTItZTkzNDYxZWYxNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuer7GdpnV/SkSGPftm9+1tHd3S9M5ihnJNt qDaWxD4TqsGvzujLxlcoXMBmLknHNHgpSyBj0wAnYUu2XS5JZjmQpJ6u55Xmjytl J0GsTaXN6IZ2Py63rVcbxVO8Nje+denSxfnNPKnmzLbAfYuF4EPanpEDxC0vEg33 1qd5x7rFMcoFECeCPFvxJfXQaa8Q9GEiIDMeV9aR+w/Rx1hq4IouJxUUgVE7/nV6 /5axyGkJvFxDTXJ8E/cYyYK9AnOudC5jIGPJ6oAJLDhZ8ql2gAik8y9Q1nOJ/XiA T89Im1MEu7l2UXkLEyUQprBd5Q8OfQVZf5em17m7ZyB8QWxeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQhqHIzZfGrikYsgcDkSx9fbonXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNzA4ZTA0MWYtNmVlYS0z MmM1LWI1ZWYtMjQzN2I4NmE0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAENRvn/h5jz1lCmtQTx6Cq/FedTktLyIekIbQXKzvptm4YQdgt80gi9 MiIrDz7NIBr3vdz8o0dkaT38jOU8gOPnT/ZgoqiPHOUkhSSnT8lQKxZIwf5UkOBb GPH4TRSb0H6i3cAVNnHN+GRGpaCGP8ZzkCuwc5UWsvvmLrMHsbnMBZVJCWBryCWt zaFOiUfQWFrZ0Y+0e/UQ3Cchunufntq20qyuo6Aq2twCjrih+I1SNeGqRe7aJzw7 3BFvEstvt/IdSGyHhD5GIqFMru31gtZLbdYi0JiylNy/WSrxh70mekRVz7c7GO/3 lWsqqewRb1VzHKbITdyuMFv5NbNV8Wo= -----END CERTIFICATE-----Generated at Sun Jan 25 09:58:10 2026 by rpki-client