This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa File: 8425037b-4f8a-3b06-8e08-787697563f1c.roa (raw, json) Hash identifier: RajgD2Jvmj/6xg3Tx3GxqpRNg59aS7+kFkvKOCLpiR8= Subject key identifier: FE:83:46:B2:59:38:C4:4E:76:1B:4E:42:A8:4A:32:7A:FB:3E:80:2B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C0570E939F642769F2A393980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 5650 IP address blocks: 72.244.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:e9:39:f6:42:76:9f:2a:39:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=a0461daf-005a-4cf2-9137-b11dccc9e49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:be:92:eb:77:4d:1d:67:76:eb:d5:f9:d2: 7e:3d:44:c7:0d:69:d9:a0:f4:5d:05:7a:6e:e0:c9: 0d:2d:6c:12:42:93:c0:da:0a:f9:52:50:07:bb:d0: 9f:7a:56:29:ff:9a:e4:07:c3:32:c1:8e:00:88:1f: 6c:4a:2e:5c:83:59:77:fc:96:39:15:a0:e9:22:05: 57:41:90:d4:5f:2e:b0:3f:ca:ee:eb:35:6f:11:ce: e7:d3:96:71:7b:7b:ef:0b:24:ab:50:40:16:f0:ea: ce:d1:33:03:1f:58:cf:19:1e:48:15:6b:c4:d2:fc: 2b:69:c6:9d:ab:5e:22:12:31:58:01:fa:d5:86:5f: df:73:d0:37:6b:23:66:6e:d4:63:ee:02:46:50:40: ea:bb:7f:4f:f5:50:de:b7:95:58:fc:10:5f:51:50: 5a:70:5a:74:00:82:63:29:04:6a:09:4c:95:f8:2d: 68:44:7b:ff:4e:2a:b4:bd:6d:b8:fe:2f:2e:ab:07: 4c:a8:cd:a3:5e:dd:bc:17:49:db:da:0a:7c:ee:25: 65:a2:04:12:4b:53:79:ea:ec:76:07:38:c2:0c:f8: 36:34:ac:5e:fa:11:b4:96:b7:db:69:dd:eb:09:c9: 3d:83:39:9e:fd:6c:12:72:15:71:45:80:f5:b6:2a: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:46:B2:59:38:C4:4E:76:1B:4E:42:A8:4A:32:7A:FB:3E:80:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:38:ef:1b:07:c3:30:22:17:13:e6:79:21:fc:9e:28:d3:de: 59:a0:bf:97:12:3d:70:29:52:aa:65:4d:d6:45:c6:04:25:48: fb:ab:b3:fe:c0:8b:a5:ed:41:03:93:e9:af:b8:52:76:94:1d: 80:f6:3a:6e:61:98:a6:90:aa:7a:f6:1c:ef:a8:29:09:8a:0b: 08:54:bc:37:7f:c9:8a:02:98:bf:6d:82:e4:5f:a4:f8:7b:6e: 98:b1:6c:b5:dc:dd:ae:77:42:7f:4f:28:a1:a0:b8:51:3f:2e: 4c:f6:ec:d2:f7:f8:7f:c5:8b:9e:d1:ed:c2:22:1b:7d:88:6a: 6e:df:d8:a2:aa:00:d4:1a:d2:af:f5:04:53:63:30:73:5b:e3: 91:1f:94:71:6e:40:f4:86:63:51:dc:5d:a8:a2:61:be:d4:f9: c2:c5:cd:1f:8c:e9:73:54:91:72:96:79:47:23:cf:c5:15:36: bc:eb:a4:8d:0c:38:32:63:f6:bc:c5:3e:87:68:75:0f:fc:33: 3a:aa:95:ff:3e:6a:9a:16:45:8f:4e:bb:f0:47:77:61:cf:41: 08:74:3e:f9:3d:20:ad:3a:59:b7:35:a7:d0:34:f7:37:87:0e: 63:d5:c4:c3:b9:fe:2b:94:d7:9a:d7:cf:28:a3:20:44:e0:9d: 3c:1e:0f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcOk59kJ2nyo5OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk YTA0NjFkYWYtMDA1YS00Y2YyLTkxMzctYjExZGNjYzllNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUS+kut3TR1nduvV+dJ+PUTHDWnZoPRdBXpu 4MkNLWwSQpPA2gr5UlAHu9CfelYp/5rkB8MywY4AiB9sSi5cg1l3/JY5FaDpIgVX QZDUXy6wP8ru6zVvEc7n05Zxe3vvCySrUEAW8OrO0TMDH1jPGR5IFWvE0vwracad q14iEjFYAfrVhl/fc9A3ayNmbtRj7gJGUEDqu39P9VDet5VY/BBfUVBacFp0AIJj KQRqCUyV+C1oRHv/Tiq0vW24/i8uqwdMqM2jXt28F0nb2gp87iVlogQSS1N56ux2 BzjCDPg2NKxe+hG0lrfbad3rCck9gzme/WwSchVxRYD1tiqsnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6DRrJZOMROdhtOQqhKMnr7PoArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODQyNTAzN2ItNGY4YS0z YjA2LThlMDgtNzg3Njk3NTYzZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk47xsHwzAiFxPmeSH8nijT3lmgv5cSPXApUqplTdZFxgQlSPurs/7A i6XtQQOT6a+4UnaUHYD2Om5hmKaQqnr2HO+oKQmKCwhUvDd/yYoCmL9tguRfpPh7 bpixbLXc3a53Qn9PKKGguFE/Lkz27NL3+H/Fi57R7cIiG32Iam7f2KKqANQa0q/1 BFNjMHNb45EflHFuQPSGY1HcXaiiYb7U+cLFzR+M6XNUkXKWeUcjz8UVNrzrpI0M ODJj9rzFPododQ/8Mzqqlf8+apoWRY9Ou/BHd2HPQQh0Pvk9IK06Wbc1p9A09zeH DmPVxMO5/iuU15rXzyijIETgnTweDwQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:11 2025 by rpki-client