This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa File: 4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa (raw, json) Hash identifier: o6+w9qlALamVm4S3Y9tomU6elqTgza9gFDenpqWs4mw= Subject key identifier: 11:C7:4B:63:43:BA:F2:16:F1:EB:E8:CE:B6:38:D9:C9:05:04:4F:0B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C1630E746648F4A600A97FE98 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e7:46:64:8f:4a:60:0a:97:fe:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=5b23e9d6-9418-4fd7-adbd-ea9f643d8aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:27:c2:d5:5c:03:a8:d9:c8:33:b9:ac:7e: 5b:24:42:e2:c7:c0:ae:3e:ce:7c:0f:70:23:df:93: 47:eb:90:cb:0e:da:61:35:ed:dc:16:2c:a6:47:49: 70:8d:a4:86:09:09:6d:fd:2c:b3:b0:53:87:81:14: bb:9c:cb:00:12:14:01:65:38:30:8e:02:a0:89:90: 34:0c:6c:0c:85:7b:f0:89:58:e6:4c:16:8a:cb:df: fe:cf:d7:f8:5e:0e:57:3c:7f:72:34:2a:76:03:d0: ad:3e:6f:d3:06:97:08:eb:8c:be:09:e8:44:f4:34: f4:7a:17:89:6a:72:c0:9d:1b:82:c8:50:95:1e:0c: ff:a0:7a:06:65:42:98:cf:ed:77:80:35:0d:92:e9: 02:1e:a7:b5:7a:d0:14:a7:ad:92:ce:76:37:95:42: 67:c4:ca:d9:e7:ad:0d:3c:d0:fb:c6:65:65:31:92: bb:96:be:c2:6d:10:e4:b5:66:52:4a:18:b8:73:a0: 45:19:6d:af:09:3b:6c:04:c8:4a:39:85:df:fa:84: 37:7f:f4:d4:4a:07:37:de:94:17:f1:12:f7:be:55: dd:25:9b:7e:1c:28:f4:bb:ad:ee:84:36:20:45:69: 2d:ed:3f:c4:02:b9:2f:c0:cf:2c:18:43:a5:9d:68: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C7:4B:63:43:BA:F2:16:F1:EB:E8:CE:B6:38:D9:C9:05:04:4F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:df:2a:ae:2e:ff:9e:e6:4a:81:b9:3f:d1:26:63:d2:68: b8:b5:cb:5f:9b:df:5d:9c:1d:f3:cf:91:82:94:e2:b1:db:46: 79:3b:36:1f:87:fd:11:a7:8d:5a:96:18:21:b0:db:08:94:68: 79:36:18:15:b0:98:99:b7:ef:a9:65:db:d4:07:98:c2:36:a4: f6:32:65:cd:10:af:43:b4:a8:76:07:aa:b7:0c:50:69:6c:65: a8:6d:d1:c1:3f:08:2d:00:f0:3b:f6:0f:5f:ed:e4:d5:30:5f: c3:3f:33:2b:5a:76:f4:b1:d7:72:09:bf:46:09:ad:94:fc:ec: ef:e6:43:39:8d:47:9c:97:9a:04:35:92:f7:35:db:0d:99:bf: e4:0e:e9:02:5b:2e:4d:54:29:4a:c0:77:d4:b5:24:d9:55:86: 35:8f:06:4b:e7:38:60:21:43:d0:0b:1b:f6:cd:63:51:eb:c9: 24:51:31:c0:29:66:c7:60:fb:01:a4:67:f5:e7:bd:57:1b:cc: cd:2d:f7:56:33:f4:34:13:16:86:e9:3d:1d:da:2e:1f:86:dc: 49:ee:c0:a1:69:d9:e3:06:38:8a:78:e2:84:dc:c6:91:88:26: 38:ec:61:ab:f8:99:4b:b2:46:c7:e2:75:24:b2:06:79:14:30: 0d:52:d3:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMOdGZI9KYAqX/pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk NWIyM2U5ZDYtOTQxOC00ZmQ3LWFkYmQtZWE5ZjY0M2Q4YWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU4nwtVcA6jZyDO5rH5bJELix8CuPs58D3Aj 35NH65DLDtphNe3cFiymR0lwjaSGCQlt/SyzsFOHgRS7nMsAEhQBZTgwjgKgiZA0 DGwMhXvwiVjmTBaKy9/+z9f4Xg5XPH9yNCp2A9CtPm/TBpcI64y+CehE9DT0eheJ anLAnRuCyFCVHgz/oHoGZUKYz+13gDUNkukCHqe1etAUp62SznY3lUJnxMrZ560N PND7xmVlMZK7lr7CbRDktWZSShi4c6BFGW2vCTtsBMhKOYXf+oQ3f/TUSgc33pQX 8RL3vlXdJZt+HCj0u63uhDYgRWkt7T/EArkvwM8sGEOlnWhLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHHS2NDuvIW8evozrY42ckFBE8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGRmNzUxZTQtYWE0Zi0z ZThjLTgwYjUtOWFiYThlYmUwZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpe3yquLv+e5kqBuT/RJmPSaLi1y1+b312cHfPPkYKU4rHbRnk7Nh+H /RGnjVqWGCGw2wiUaHk2GBWwmJm376ll29QHmMI2pPYyZc0Qr0O0qHYHqrcMUGls Zaht0cE/CC0A8Dv2D1/t5NUwX8M/MytadvSx13IJv0YJrZT87O/mQzmNR5yXmgQ1 kvc12w2Zv+QO6QJbLk1UKUrAd9S1JNlVhjWPBkvnOGAhQ9ALG/bNY1HrySRRMcAp Zsdg+wGkZ/XnvVcbzM0t91Yz9DQTFobpPR3aLh+G3EnuwKFp2eMGOIp44oTcxpGI JjjsYav4mUuyRsfidSSyBnkUMA1S02I= -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:06 2025 by rpki-client