This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa File: baa423ff-3491-327f-b5ba-048ac3231549.roa (raw, json) Hash identifier: o6wSREJDreATD10651qtM71C1/y2sY9H0s2GuUhTbCE= Subject key identifier: C7:3F:3B:FB:46:B5:09:A6:7C:5B:92:1F:92:B2:D9:19:98:76:0E:CF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C1630C26B27327968E7B0FC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:c2:6b:27:32:79:68:e7:b0:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=dc29d185-bf68-48a0-a44d-a9c25b02e4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:2e:7f:1f:f9:a1:99:34:e5:dc:26:b1:81: 65:f0:69:0a:b7:08:63:94:11:ba:f2:e3:02:e7:6f: b3:6f:82:7e:37:be:8b:3a:95:bb:d4:35:3d:d0:04: 10:84:46:d3:5e:c9:34:1c:9b:15:ee:41:13:b2:40: 2b:fb:a1:36:1d:4e:a3:75:4a:4a:a8:2a:c1:94:77: c0:a1:c5:eb:a4:a6:61:66:28:57:a4:49:84:c0:3c: 2c:8f:8c:97:78:6e:e0:c5:de:bf:95:8e:16:fb:1d: 42:69:fe:4b:a0:85:3f:e5:2e:67:2f:fb:c7:db:d4: c8:7d:46:4b:8e:09:4b:d9:13:31:86:23:1c:25:24: 71:94:98:86:a6:0d:9a:93:03:bc:03:4e:49:c8:25: f6:18:8b:5c:5a:66:fe:99:d3:fd:0c:b7:de:bf:3d: 60:f6:4f:a2:02:96:a0:2d:6b:24:1b:32:bb:27:46: ba:59:48:a0:ee:49:fe:ba:d1:a0:4a:ef:1f:dc:a8: 14:e9:b2:b4:c7:7b:4d:2a:2b:c8:ff:aa:ea:35:56: b3:c7:4d:63:19:15:41:f7:db:25:af:7c:5b:08:81: 3e:e2:3f:26:cd:9e:ca:16:2d:39:d3:18:97:9b:ae: 39:c9:34:09:64:56:7d:3f:39:6b:87:70:ea:e8:fa: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3F:3B:FB:46:B5:09:A6:7C:5B:92:1F:92:B2:D9:19:98:76:0E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5a:59:56:fd:77:cc:d6:e0:09:f0:0d:9c:a6:f6:fe:d4:3d: 65:9a:f4:ef:5b:c4:75:b1:45:0f:79:02:95:65:c9:b4:9e:5b: b7:0f:6e:70:52:02:6f:32:86:e0:ba:b7:b9:76:63:32:b4:91: e6:6f:bc:9e:ea:41:49:a9:0d:91:a5:a7:60:9a:e7:34:71:9a: d5:af:9b:69:35:5e:12:e9:a2:33:36:f0:49:5b:13:ac:67:35: 3f:f1:98:94:2a:1f:6f:41:23:81:05:96:5d:b7:7e:02:ce:47: dd:98:5a:2a:1b:53:9a:26:5d:41:8a:24:28:83:db:22:47:95: 95:9d:48:a3:53:1a:4e:4a:f4:cc:cb:c1:15:c5:2f:fc:8c:1a: b7:ee:05:76:e8:ac:dd:f1:1d:a2:ca:25:d2:45:9c:3c:40:86: 58:b5:22:c7:69:53:73:e7:f0:64:c4:18:c0:52:ce:8e:d2:4a: 12:9e:a9:1e:31:a5:fa:1a:ac:6b:70:86:8e:0f:74:5f:f6:a0: f5:07:56:e5:a7:9b:5a:d2:ae:e1:e2:05:21:f7:cd:e9:50:09: 48:ba:dc:4d:b2:a1:b0:2f:6f:b7:89:a4:cb:e6:92:5d:31:de: 1b:93:0b:0b:6c:73:24:e7:15:70:c7:13:40:1f:27:d8:18:f9: 9e:54:6c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMMJrJzJ5aOew/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZGMyOWQxODUtYmY2OC00OGEwLWE0NGQtYTljMjViMDJlNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm0ufx/5oZk05dwmsYFl8GkKtwhjlBG68uMC 52+zb4J+N76LOpW71DU90AQQhEbTXsk0HJsV7kETskAr+6E2HU6jdUpKqCrBlHfA ocXrpKZhZihXpEmEwDwsj4yXeG7gxd6/lY4W+x1Caf5LoIU/5S5nL/vH29TIfUZL jglL2RMxhiMcJSRxlJiGpg2akwO8A05JyCX2GItcWmb+mdP9DLfevz1g9k+iApag LWskGzK7J0a6WUig7kn+utGgSu8f3KgU6bK0x3tNKivI/6rqNVazx01jGRVB99sl r3xbCIE+4j8mzZ7KFi050xiXm645yTQJZFZ9Pzlrh3Dq6Poi+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc/O/tGtQmmfFuSH5Ky2RmYdg7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFhNDIzZmYtMzQ5MS0z MjdmLWI1YmEtMDQ4YWMzMjMxNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVaWVb9d8zW4AnwDZym9v7UPWWa9O9bxHWxRQ95ApVlybSeW7cPbnBS Am8yhuC6t7l2YzK0keZvvJ7qQUmpDZGlp2Ca5zRxmtWvm2k1XhLpojM28ElbE6xn NT/xmJQqH29BI4EFll23fgLOR92YWiobU5omXUGKJCiD2yJHlZWdSKNTGk5K9MzL wRXFL/yMGrfuBXborN3xHaLKJdJFnDxAhli1IsdpU3Pn8GTEGMBSzo7SShKeqR4x pfoarGtwho4PdF/2oPUHVuWnm1rSruHiBSH3zelQCUi63E2yobAvb7eJpMvmkl0x 3huTCwtscyTnFXDHE0AfJ9gY+Z5UbGg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:08 2025 by rpki-client