This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/22ecd43d-eaa7-3f32-bee6-8e6a9de08993.roa File: 22ecd43d-eaa7-3f32-bee6-8e6a9de08993.roa (raw, json) Hash identifier: muCWWA7Iws4zWZNUOqzl/vzT7xk5BonwvI8Pf/uaj+w= Subject key identifier: 63:B5:FC:47:44:93:59:69:C3:5C:FC:C0:D8:D8:4A:23:99:C4:00:64 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584C109B73A29EDD8A84A473B300 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/22ecd43d-eaa7-3f32-bee6-8e6a9de08993.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 6621 IP address blocks: 72.171.0.0/22 maxlen: 22 72.171.4.0/23 maxlen: 23 72.171.10.0/24 maxlen: 24 72.171.12.0/23 maxlen: 23 72.171.16.0/20 maxlen: 20 72.171.16.0/21 maxlen: 21 72.171.24.0/21 maxlen: 21 72.171.112.0/20 maxlen: 20 72.171.192.0/19 maxlen: 19 72.171.192.0/21 maxlen: 21 72.171.200.0/21 maxlen: 21 72.171.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:73:a2:9e:dd:8a:84:a4:73:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=3153ce2d-48e5-4539-8fea-ab4d20fdb91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:2f:7c:47:29:d5:54:92:b1:2c:8a:52:cf: 5e:69:97:ab:b6:8c:cd:fc:4f:9e:90:fc:f8:01:db: aa:d7:6b:d5:3f:20:76:67:2c:1b:91:cf:bd:18:6d: ba:c1:3c:c3:ee:44:aa:dc:f9:5d:8f:64:bb:7f:66: f2:80:ae:6f:d2:05:1c:3a:6c:a5:ae:c2:ef:f5:21: 85:92:b7:2d:29:f4:ab:bf:0f:d8:1f:9a:3e:37:e6: f2:3d:52:24:9d:cc:bd:ed:29:56:b7:c4:32:cf:c9: 3a:af:10:8e:70:bc:17:58:d5:41:80:5c:7b:91:3d: 15:b2:7a:6f:65:c4:57:ac:68:dc:c4:20:7b:25:25: b1:fe:da:38:2a:89:d0:3c:c1:97:72:b5:a4:fc:78: d6:fc:e9:d6:81:7e:6e:9e:cc:97:f8:1d:0b:41:fd: 82:89:a2:8b:e6:89:68:83:f5:b5:da:24:ab:49:33: 4d:a3:49:7f:88:01:f8:c6:d3:e8:f1:44:77:ca:2d: 66:0e:2e:a5:5d:c9:b4:fd:22:cf:f3:c8:6b:1c:0e: 3a:88:e7:ae:25:ae:c6:bf:dc:a9:4e:6a:dd:5d:ba: 40:16:51:04:92:e5:b0:ca:53:1b:37:e4:67:b8:a4: d5:de:0b:82:1c:21:bc:fa:9f:15:16:0f:6b:8f:b5: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:FC:47:44:93:59:69:C3:5C:FC:C0:D8:D8:4A:23:99:C4:00:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/22ecd43d-eaa7-3f32-bee6-8e6a9de08993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.171.0.0-72.171.5.255 72.171.10.0/24 72.171.12.0/23 72.171.16.0/20 72.171.112.0/20 72.171.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a9:15:6a:11:da:82:7c:9f:dd:72:e4:ab:df:4e:a4:bf:6e: 96:2b:22:2a:03:85:84:b4:25:05:57:9f:18:0c:d5:48:90:7f: b3:76:99:6b:3c:4b:86:0e:b4:2f:3f:9f:2f:9b:35:a3:7a:d7: 6e:c7:fa:56:e5:00:b9:5f:13:a2:a5:59:01:ca:de:b2:7b:ac: 74:d3:f0:86:1d:10:03:1d:8f:ed:e8:d5:96:71:3d:62:e3:78: 55:f3:36:17:8c:0b:56:23:71:ad:37:30:b2:01:a7:56:68:8c: be:4a:a2:9c:c0:54:e2:a2:72:94:df:75:10:58:ef:fe:fd:74: fa:1a:c9:83:f3:bb:57:59:0a:d7:37:06:90:cc:4a:6b:43:fb: 71:b6:54:8b:92:fc:86:61:8b:95:2f:bb:1b:36:0a:37:a2:e7: 93:4d:1f:92:3a:6c:cb:a5:66:a6:92:7a:04:2b:02:05:dd:d9: 33:f5:3f:1b:0d:83:47:4d:2a:f6:f3:ee:72:e0:3f:83:4c:90: f2:11:90:07:d6:ce:80:61:34:2c:77:d9:bb:73:24:76:4b:d6: 13:db:27:a8:44:df:bc:49:89:c1:cb:b9:6b:8c:8f:f8:0e:d2: 91:bb:6f:49:b6:c9:9b:44:8c:13:db:f4:da:5a:42:3b:2b:83: b0:5f:b0:23 -----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWEwQm3Oint2KhKRzswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzE1M2NlMmQtNDhlNS00NTM5LThmZWEtYWI0ZDIwZmRiOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr0vfEcp1VSSsSyKUs9eaZertozN/E+ekPz4 Aduq12vVPyB2Zywbkc+9GG26wTzD7kSq3Pldj2S7f2bygK5v0gUcOmylrsLv9SGF krctKfSrvw/YH5o+N+byPVIkncy97SlWt8Qyz8k6rxCOcLwXWNVBgFx7kT0Vsnpv ZcRXrGjcxCB7JSWx/to4KonQPMGXcrWk/HjW/OnWgX5unsyX+B0LQf2CiaKL5olo g/W12iSrSTNNo0l/iAH4xtPo8UR3yi1mDi6lXcm0/SLP88hrHA46iOeuJa7Gv9yp TmrdXbpAFlEEkuWwylMbN+RnuKTV3guCHCG8+p8VFg9rj7XilwIDAQABo4IDejCC A3YwHQYDVR0OBBYEFGO1/EdEk1lpw1z8wNjYSiOZxABkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMjJlY2Q0M2QtZWFhNy0z ZjMyLWJlZTYtOGU2YTlkZTA4OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArMAsDAwBIqwME AUirBAMEAEirCgMEAUirDAMEBEirEAMEBEircAMEBkirwDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeqRVq EdqCfJ/dcuSr306kv26WKyIqA4WEtCUFV58YDNVIkH+zdplrPEuGDrQvP58vmzWj etdux/pW5QC5XxOipVkByt6ye6x00/CGHRADHY/t6NWWcT1i43hV8zYXjAtWI3Gt NzCyAadWaIy+SqKcwFTionKU33UQWO/+/XT6GsmD87tXWQrXNwaQzEprQ/txtlSL kvyGYYuVL7sbNgo3oueTTR+SOmzLpWamknoEKwIF3dkz9T8bDYNHTSr28+5y4D+D TJDyEZAH1s6AYTQsd9m7cyR2S9YT2yeoRN+8SYnBy7lrjI/4DtKRu29JtsmbRIwT 2/TaWkI7K4OwX7Aj -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:58 2025 by rpki-client