This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaab763c-76dd-33fa-b5c1-63358270ca4b.roa File: aaab763c-76dd-33fa-b5c1-63358270ca4b.roa (raw, json) Hash identifier: DwQXxoX/RYvQx4uIEcSnD14YVX29GuvQUauRNzGO7PU= Subject key identifier: 48:F9:67:BC:67:E1:6D:35:F8:91:2E:79:35:EA:54:66:C0:84:7A:D6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC09325C84D7B29895A5E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaab763c-76dd-33fa-b5c1-63358270ca4b.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 56264 IP address blocks: 72.244.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:09:32:5c:84:d7:b2:98:95:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=e25629f1-f08b-4f76-8b8a-d36aedb79f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:59:7d:35:87:0e:c3:93:37:e4:64:7a:07: 8e:3f:4d:f3:d1:ba:fb:07:f1:ef:66:28:7b:85:25: c5:7a:ef:93:a4:86:06:fa:e0:56:22:35:a4:d3:5a: 23:ce:d4:b2:5d:aa:a6:56:d7:a5:05:16:59:3b:05: a1:f1:28:b7:e3:16:4c:f8:30:db:d2:61:66:b0:9e: 5f:c2:5d:c4:08:9e:d0:4c:d4:f9:04:d1:c1:6f:1e: 08:c1:73:d3:07:d6:cd:5f:85:86:64:eb:bb:cb:e7: 12:ed:95:7c:79:72:64:6e:cb:cd:02:2e:bb:d0:28: dd:17:e2:67:db:84:53:c1:85:18:fa:0f:64:1a:20: 61:01:ae:bc:a9:ce:9e:35:c1:a4:85:94:e1:f3:03: 48:a5:99:0b:7c:3d:c1:11:0d:28:69:56:be:e9:87: fb:c4:f8:40:18:36:35:c2:f1:88:82:19:3b:78:7e: 82:30:fe:da:bc:81:04:00:36:87:e9:73:7c:24:53: ed:3c:ae:8d:fd:f7:c9:4f:ad:aa:4b:b7:9d:b5:b6: bf:1b:4b:08:b0:c0:2a:31:f4:a2:5a:38:69:dc:61: 6e:ad:cc:a7:f6:61:f6:13:b9:a2:39:60:51:9d:36: d0:28:a8:6b:c4:cf:19:75:2b:a9:72:1b:43:30:8e: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F9:67:BC:67:E1:6D:35:F8:91:2E:79:35:EA:54:66:C0:84:7A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaab763c-76dd-33fa-b5c1-63358270ca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ae:fd:15:25:67:e8:7b:e5:74:94:5d:9c:ef:79:ee:bc:bf: c7:f1:a1:09:f4:64:d7:ea:7e:ee:b9:6b:2d:2b:2c:31:00:8e: e4:29:77:14:96:60:a1:78:fc:e8:dc:cd:4e:12:4c:9c:32:84: 07:ce:1d:3d:a7:2b:c5:88:6d:05:14:7f:7a:54:9b:2d:b4:d8: 92:a2:d4:94:86:c4:fd:07:8c:fe:08:fb:e9:f2:cf:26:f1:22: 45:52:1c:9c:67:9e:dc:58:c4:b3:1f:61:05:1e:6c:0d:42:5e: 75:cc:82:43:16:44:d7:1e:89:cb:2e:44:5b:d9:72:b5:35:0b: f7:75:8c:c2:ff:71:ef:9c:80:36:ed:65:68:da:d7:5f:2d:20: fd:1b:68:54:51:dd:4e:78:93:1d:b5:1e:1f:d4:db:e7:09:a3: 6d:55:94:89:fd:51:bf:b1:a6:25:a1:d6:ab:39:61:c9:0f:ea: 34:6d:e0:7a:d5:39:34:89:32:ca:43:16:3a:13:52:2c:45:de: 0b:7f:c5:a7:49:28:1b:cc:1f:d7:db:f7:95:d7:a1:90:f5:17: a1:91:10:1b:61:7d:02:33:81:a3:fd:98:86:14:a8:33:05:29: e3:11:68:cf:27:f9:db:f7:4f:40:45:76:3b:96:9d:6b:02:7b: 23:f2:45:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AkyXITXspiVpeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTI1NjI5ZjEtZjA4Yi00Zjc2LThiOGEtZDM2YWVkYjc5ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLdZfTWHDsOTN+RkegeOP03z0br7B/HvZih7 hSXFeu+TpIYG+uBWIjWk01ojztSyXaqmVtelBRZZOwWh8Si34xZM+DDb0mFmsJ5f wl3ECJ7QTNT5BNHBbx4IwXPTB9bNX4WGZOu7y+cS7ZV8eXJkbsvNAi670CjdF+Jn 24RTwYUY+g9kGiBhAa68qc6eNcGkhZTh8wNIpZkLfD3BEQ0oaVa+6Yf7xPhAGDY1 wvGIghk7eH6CMP7avIEEADaH6XN8JFPtPK6N/ffJT62qS7edtba/G0sIsMAqMfSi Wjhp3GFurcyn9mH2E7miOWBRnTbQKKhrxM8ZdSupchtDMI7+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj5Z7xn4W01+JEueTXqVGbAhHrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFhYjc2M2MtNzZkZC0z M2ZhLWI1YzEtNjMzNTgyNzBjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2u/RUlZ+h75XSUXZzvee68v8fxoQn0ZNfqfu65ay0rLDEAjuQpdxSW YKF4/OjczU4STJwyhAfOHT2nK8WIbQUUf3pUmy202JKi1JSGxP0HjP4I++nyzybx IkVSHJxnntxYxLMfYQUebA1CXnXMgkMWRNceicsuRFvZcrU1C/d1jML/ce+cgDbt ZWja118tIP0baFRR3U54kx21Hh/U2+cJo21VlIn9Ub+xpiWh1qs5YckP6jRt4HrV OTSJMspDFjoTUixF3gt/xadJKBvMH9fb95XXoZD1F6GREBthfQIzgaP9mIYUqDMF KeMRaM8n+dv3T0BFdjuWnWsCeyPyRUo= -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:48 2025 by rpki-client