This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa File: 5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa (raw, json) Hash identifier: U+y3PiC5bEKwcnP4440okLkotWNFe1KUy1uDoob60nw= Subject key identifier: 2C:1D:9A:62:32:91:E5:04:55:95:A0:3D:73:63:21:A7:FC:7A:AA:6A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C969C645B40A31BA2BE801840 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 2914 IP address blocks: 72.245.128.0/21 maxlen: 24 72.245.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:64:5b:40:a3:1b:a2:be:80:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=67f05916-c9ca-4354-a490-9b16b702027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:fb:12:10:f8:1f:c7:71:fc:33:c8:c4:29: ca:58:4e:e1:77:35:52:96:fa:5d:2e:b0:5e:97:19: 12:4a:fa:60:b1:01:dc:b9:67:c3:b0:7f:bc:68:b3: 02:ac:c1:e8:1c:16:33:68:2d:8e:55:9f:dc:b6:26: 9e:6d:1f:3f:5d:39:f4:a0:ac:99:5c:65:42:66:b5: 46:42:4c:2b:76:29:84:7a:f2:00:7f:1f:5c:b0:68: 7b:e9:4a:9a:ee:64:a8:5a:ba:7a:88:57:be:9e:7a: 76:66:d4:55:af:e8:74:f6:08:a3:0b:17:29:af:51: ab:21:1f:86:ed:c4:62:b2:27:e8:e0:50:5f:5d:94: 40:b4:bd:24:6d:9c:f1:7c:f1:c9:7b:36:a9:19:c8: 0d:c4:b0:37:cc:ce:fa:21:04:41:cd:22:74:da:2c: 7b:ca:70:69:78:4a:8d:75:0e:d8:e9:af:6e:38:0b: e3:1e:69:cf:d8:01:72:f3:b5:2a:00:f0:f0:34:ad: 2a:5d:a5:78:13:03:9b:9b:ca:dc:bf:33:6d:5c:85: 1b:c5:82:06:86:84:07:46:30:5c:dd:db:25:91:83: 61:7d:e4:82:be:68:76:d5:0d:66:cd:91:0e:3c:d2: 4f:ed:90:cf:ba:58:55:13:70:3d:f5:f7:19:9c:a9: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:9A:62:32:91:E5:04:55:95:A0:3D:73:63:21:A7:FC:7A:AA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:78:71:23:30:ca:38:ed:41:2c:ba:6a:fb:75:3f:56:26:82: a7:34:6d:ac:18:6d:41:98:aa:a7:34:47:4c:1e:75:2c:a0:2b: f9:4e:4c:64:1a:d2:90:0a:07:7a:0a:41:9c:eb:02:0b:0a:b4: 2f:b6:be:f6:46:e1:60:d5:2a:01:3b:d5:38:4d:11:1d:53:24: b3:25:97:26:21:26:e9:a5:2b:d0:84:28:82:36:35:1b:2e:ff: e6:67:ec:d9:2e:73:74:69:0c:d7:10:05:4d:44:35:2f:7c:ce: d3:19:bf:d1:b2:f6:52:5d:2a:32:6e:9c:7d:79:ef:ba:af:69: 32:f0:68:df:91:4b:16:f6:ac:3e:56:fa:49:05:2f:03:6b:ff: 64:87:19:e7:e9:5b:b4:af:4c:24:2e:3a:72:28:5c:9f:9c:65: 0e:0d:51:df:e7:0b:a8:3a:57:33:c1:0c:82:c2:d0:b9:56:7c: ae:09:34:3c:29:75:6f:e4:d5:7e:f7:6a:43:8c:59:45:2f:78: 6b:b1:b5:44:7e:12:9b:53:a7:a6:62:df:31:5a:49:ad:6e:e5: 4b:87:34:96:ac:2e:16:27:a2:aa:7d:d0:3e:b3:e4:a8:c3:81: e2:e7:31:3a:ab:73:2f:53:7b:b9:be:6d:b3:aa:a0:0a:a3:82: bb:68:bf:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGRbQKMbor6AGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk NjdmMDU5MTYtYzljYS00MzU0LWE0OTAtOWIxNmI3MDIwMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0b7EhD4H8dx/DPIxCnKWE7hdzVSlvpdLrBe lxkSSvpgsQHcuWfDsH+8aLMCrMHoHBYzaC2OVZ/ctiaebR8/XTn0oKyZXGVCZrVG QkwrdimEevIAfx9csGh76Uqa7mSoWrp6iFe+nnp2ZtRVr+h09gijCxcpr1GrIR+G 7cRisifo4FBfXZRAtL0kbZzxfPHJezapGcgNxLA3zM76IQRBzSJ02ix7ynBpeEqN dQ7Y6a9uOAvjHmnP2AFy87UqAPDwNK0qXaV4EwObm8rcvzNtXIUbxYIGhoQHRjBc 3dslkYNhfeSCvmh21Q1mzZEOPNJP7ZDPulhVE3A99fcZnKmHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwdmmIykeUEVZWgPXNjIaf8eqpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTg1N2YyNGYtOGI1NS0z NWMzLWE1MTQtOWQzZjFhOTBkNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ4cSMwyjjtQSy6avt1P1Ymgqc0bawYbUGYqqc0R0wedSygK/lOTGQa 0pAKB3oKQZzrAgsKtC+2vvZG4WDVKgE71ThNER1TJLMllyYhJumlK9CEKII2NRsu /+Zn7Nkuc3RpDNcQBU1ENS98ztMZv9Gy9lJdKjJunH1577qvaTLwaN+RSxb2rD5W +kkFLwNr/2SHGefpW7SvTCQuOnIoXJ+cZQ4NUd/nC6g6VzPBDILC0LlWfK4JNDwp dW/k1X73akOMWUUveGuxtUR+EptTp6Zi3zFaSa1u5UuHNJasLhYnoqp90D6z5KjD geLnMTqrcy9Te7m+bbOqoAqjgrtov8s= -----END CERTIFICATE-----Generated at Sun Jan 25 04:04:22 2026 by rpki-client