This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa File: 12e7bd35-126d-30c1-bd74-909e56a08057.roa (raw, json) Hash identifier: dRPHO411hzrpia7Kgfy1a/duUFaz+XqAm88yhdh0tzk= Subject key identifier: E0:BB:D9:40:90:92:DF:D4:96:E5:E3:8C:61:4C:F6:97:6C:0A:4F:2B Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C3BE1090C842FDC4672D61FC0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 394437 IP address blocks: 72.20.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:09:0c:84:2f:dc:46:72:d6:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=0dd3aa24-e252-43ff-a501-c4f610fe7c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:f0:a2:de:a3:e6:d7:e4:0d:9e:ce:05:59: a0:f6:9b:99:74:a5:01:f5:c6:67:cb:e3:fa:62:c8: 12:ce:7e:a6:64:d5:ff:ba:61:d7:97:c3:12:bb:b4: 97:26:d6:43:c9:99:81:e9:35:ec:76:03:a0:95:e5: c5:b5:d7:55:e1:6c:f8:1a:65:c1:7f:60:c4:98:f6: 8a:d9:5d:ce:4f:c1:c9:4b:79:c5:2f:3a:72:dc:31: 4d:2e:4c:65:6b:85:79:9d:4a:ed:83:1f:94:d3:ef: bb:fd:87:c4:0c:3a:d8:98:51:8f:c1:73:4f:13:0a: 81:fc:47:c4:2d:e1:46:f4:c7:5d:52:e7:19:8d:3b: 9a:99:30:70:db:36:92:38:a2:d8:c9:c6:75:9c:bd: 88:b4:68:e7:f5:24:2e:f6:bc:87:06:5a:60:0e:dc: 91:44:1b:ce:fc:d9:a7:ad:41:b4:fb:04:7f:ac:c9: b4:c9:fd:d4:95:d3:f1:91:70:49:36:04:fc:4b:82: d7:f7:5a:d9:15:d4:6f:52:bd:25:d9:a2:46:c6:bb: 22:cd:79:07:f0:e9:f5:d2:e6:09:c6:41:40:e1:40: 2a:36:0c:a0:72:7a:76:e0:91:5c:bb:35:dd:84:5f: 37:ea:70:9c:08:8f:04:65:b3:07:b0:93:54:de:4b: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BB:D9:40:90:92:DF:D4:96:E5:E3:8C:61:4C:F6:97:6C:0A:4F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:29:75:91:78:70:86:27:73:2a:8b:5f:68:8a:54:c2:5a:67: fa:3a:fc:d1:d3:51:13:0a:42:a1:74:ca:e8:9d:eb:e2:fd:a8: ee:69:8c:15:94:bb:80:05:93:d9:b8:0c:7b:97:d3:10:a3:f5: d3:07:38:38:fc:ce:de:d1:d4:0a:6b:f2:a5:0c:d3:71:d0:2d: 01:2e:36:90:b5:bf:eb:9e:93:a6:b3:64:0e:6a:e5:03:bf:c3: 75:4c:32:07:65:84:2c:dd:68:b6:9d:85:ca:dc:7f:87:77:14: 19:d8:59:ef:38:23:58:50:13:b4:e3:81:26:c9:90:0c:61:21: c7:c0:de:80:4f:40:84:45:a3:00:c9:41:25:cc:dc:c0:05:9e: 6e:d1:7c:e9:eb:20:b4:e2:1c:58:51:e9:11:84:fd:0e:b0:47: ab:1f:24:93:84:5e:8c:03:e2:9c:4e:5f:59:1d:9c:ac:e3:0e: 05:a2:3d:63:f3:20:02:a9:29:65:01:a1:71:80:7e:8a:90:77: ec:b2:83:38:f3:77:e2:25:c3:55:fb:53:51:8b:f8:36:1a:73: ba:e0:3f:ae:dc:5a:b1:74:f9:1b:48:b1:e7:c5:d0:49:aa:94: e8:17:50:87:7d:b0:43:6f:75:55:5e:e4:16:d3:4f:c4:87:5c: 74:89:70:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74QkMhC/cRnLWH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MGRkM2FhMjQtZTI1Mi00M2ZmLWE1MDEtYzRmNjEwZmU3YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhPwot6j5tfkDZ7OBVmg9puZdKUB9cZny+P6 YsgSzn6mZNX/umHXl8MSu7SXJtZDyZmB6TXsdgOgleXFtddV4Wz4GmXBf2DEmPaK 2V3OT8HJS3nFLzpy3DFNLkxla4V5nUrtgx+U0++7/YfEDDrYmFGPwXNPEwqB/EfE LeFG9MddUucZjTuamTBw2zaSOKLYycZ1nL2ItGjn9SQu9ryHBlpgDtyRRBvO/Nmn rUG0+wR/rMm0yf3UldPxkXBJNgT8S4LX91rZFdRvUr0l2aJGxrsizXkH8On10uYJ xkFA4UAqNgygcnp24JFcuzXdhF836nCcCI8EZbMHsJNU3kttJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC72UCQkt/UluXjjGFM9pdsCk8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMTJlN2JkMzUtMTI2ZC0z MGMxLWJkNzQtOTA5ZTU2YTA4MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgpdZF4cIYncyqLX2iKVMJaZ/o6/NHTURMKQqF0yuid6+L9qO5pjBWU u4AFk9m4DHuX0xCj9dMHODj8zt7R1Apr8qUM03HQLQEuNpC1v+uek6azZA5q5QO/ w3VMMgdlhCzdaLadhcrcf4d3FBnYWe84I1hQE7TjgSbJkAxhIcfA3oBPQIRFowDJ QSXM3MAFnm7RfOnrILTiHFhR6RGE/Q6wR6sfJJOEXowD4pxOX1kdnKzjDgWiPWPz IAKpKWUBoXGAfoqQd+yygzjzd+Ilw1X7U1GL+DYac7rgP67cWrF0+RtIsefF0Emq lOgXUId9sENvdVVe5BbTT8SHXHSJcJo= -----END CERTIFICATE-----Generated at Sun Dec 21 00:23:07 2025 by rpki-client