This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2131e938-6f76-3d54-84e5-e748d39777bc.roa File: 2131e938-6f76-3d54-84e5-e748d39777bc.roa (raw, json) Hash identifier: QXNoN42d7AWUHQ+HbEXp0W4gukKLITvClbqPdKmtsFE= Subject key identifier: 8C:2D:D4:7A:D8:AC:16:4C:76:E3:08:32:4E:F9:95:2D:B5:D0:97:27 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C85DC2770D9EA9B55126A1360 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2131e938-6f76-3d54-84e5-e748d39777bc.roa Signing time: Wed 14 Jan 2026 14:00:38 +0000 ROA not before: Wed 14 Jan 2026 14:00:38 +0000 ROA not after: Tue 14 Apr 2026 13:00:38 +0000 asID: 834 IP address blocks: 72.244.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:85:dc:27:70:d9:ea:9b:55:12:6a:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 14 14:00:38 2026 GMT Not After : Apr 14 13:00:38 2026 GMT Subject: CN=8ead769f-e47a-455d-a636-c6f5af0b17d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:39:ad:7e:51:34:9e:bc:1d:32:86:07:fd: e0:96:ae:c6:2e:19:52:a9:fd:62:22:b8:ff:e1:c1: 34:56:e3:9e:dc:8d:e4:28:71:b1:5f:90:c5:07:e7: 32:fd:ec:15:9c:33:5e:31:0f:71:65:3e:83:af:fa: fd:4d:cc:5d:61:7c:68:b8:42:96:6a:63:9f:53:6f: 87:02:31:d1:5c:82:29:cb:b0:1e:79:4b:f9:cf:1e: 55:4e:83:87:58:92:72:7e:56:ef:27:93:dc:53:07: 38:0d:65:8f:14:25:13:16:f9:2d:c1:b9:fb:84:17: 49:f9:df:76:b3:88:85:83:d5:03:26:6b:7b:5a:2f: bc:e2:ef:a6:88:76:45:02:4c:f9:bc:25:db:95:ec: 46:9a:2d:e0:78:bd:fe:21:5b:bb:80:78:8d:3c:03: b8:71:86:35:a5:74:f2:ac:33:7b:14:aa:0b:67:69: eb:e6:39:ae:d5:17:3d:85:5c:fa:8c:57:33:d1:31: 48:70:15:c7:df:0b:51:22:ef:8a:2d:26:bb:6d:6e: 73:bb:81:ab:d4:ca:1d:4e:59:3d:98:be:9c:5c:0d: c8:44:1d:c9:9f:14:dd:b7:18:60:7b:18:8b:8e:ad: 57:65:c7:6e:aa:a6:b4:8b:2f:2e:b9:f1:9f:5b:ad: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2D:D4:7A:D8:AC:16:4C:76:E3:08:32:4E:F9:95:2D:B5:D0:97:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2131e938-6f76-3d54-84e5-e748d39777bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:01:ca:bf:c2:58:1a:68:0e:39:00:94:d1:e1:f0:f5:18:c4: 4e:25:e1:2d:72:33:f9:1a:df:9e:08:e5:87:5d:45:6f:e2:18: 00:f2:21:ec:5a:11:a9:86:2c:f5:49:2d:29:ec:0c:86:5b:70: 13:cd:60:56:82:26:54:c8:8b:13:7e:22:36:ec:d0:26:d2:5b: 70:cc:f5:c3:4e:01:ca:df:dd:cf:86:b4:96:38:f1:c2:ba:39: c4:fe:61:cb:c6:a5:00:0e:05:87:c0:c6:f1:12:93:22:9c:a7: 7f:95:3f:7e:2a:e2:c2:37:0a:61:71:a2:15:c4:3a:9e:77:09: 93:1a:ee:20:74:a0:1c:de:4c:75:dd:5f:20:7b:e4:21:79:11: 29:3c:4d:1b:86:75:3e:19:4d:01:da:0e:14:37:cc:21:3b:ca: 2c:23:a1:25:b4:4b:19:2a:c6:45:05:58:a9:b1:ad:3d:30:f6: 7d:7c:d3:5a:4b:71:76:b9:37:73:4c:1f:15:a6:3e:d0:78:47: c1:ff:24:33:b9:cd:9c:ad:8a:3d:16:e8:ac:5a:9b:f9:8c:75: bf:90:27:1e:84:8f:84:2a:65:a0:16:6a:76:06:2f:9d:14:28: 7d:44:b8:83:4e:74:80:7f:aa:fb:69:75:9f:95:e4:e2:04:37: 30:45:71:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyF3Cdw2eqbVRJqE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDExNDE0MDAzOFoXDTI2MDQxNDEzMDAzOFowLzEtMCsGA1UEAxMk OGVhZDc2OWYtZTQ3YS00NTVkLWE2MzYtYzZmNWFmMGIxN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1A5rX5RNJ68HTKGB/3glq7GLhlSqf1iIrj/ 4cE0VuOe3I3kKHGxX5DFB+cy/ewVnDNeMQ9xZT6Dr/r9TcxdYXxouEKWamOfU2+H AjHRXIIpy7AeeUv5zx5VToOHWJJyflbvJ5PcUwc4DWWPFCUTFvktwbn7hBdJ+d92 s4iFg9UDJmt7Wi+84u+miHZFAkz5vCXblexGmi3geL3+IVu7gHiNPAO4cYY1pXTy rDN7FKoLZ2nr5jmu1Rc9hVz6jFcz0TFIcBXH3wtRIu+KLSa7bW5zu4Gr1ModTlk9 mL6cXA3IRB3JnxTdtxhgexiLjq1XZcduqqa0iy8uufGfW63N8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwt1HrYrBZMduMIMk75lS210JcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjEzMWU5MzgtNmY3Ni0z ZDU0LTg0ZTUtZTc0OGQzOTc3N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPRaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcByr/CWBpoDjkAlNHh8PUYxE4l4S1yM/ka354I5YddRW/iGADyIexa EamGLPVJLSnsDIZbcBPNYFaCJlTIixN+Ijbs0CbSW3DM9cNOAcrf3c+GtJY48cK6 OcT+YcvGpQAOBYfAxvESkyKcp3+VP34q4sI3CmFxohXEOp53CZMa7iB0oBzeTHXd XyB75CF5ESk8TRuGdT4ZTQHaDhQ3zCE7yiwjoSW0SxkqxkUFWKmxrT0w9n1801pL cXa5N3NMHxWmPtB4R8H/JDO5zZytij0W6Kxam/mMdb+QJx6Ej4QqZaAWanYGL50U KH1EuINOdIB/qvtpdZ+V5OIENzBFcZg= -----END CERTIFICATE-----Generated at Sun Jan 25 11:03:06 2026 by rpki-client