This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0a03970-cbd0-3638-8930-977ce7fda78d.roa File: b0a03970-cbd0-3638-8930-977ce7fda78d.roa (raw, json) Hash identifier: aFawsE3WB1+GxhCxO6b/fagRUldA3mbtNDXCfCdEbNs= Subject key identifier: 69:35:D5:49:6D:8A:D1:47:10:67:46:87:97:B5:3F:C1:77:27:3F:C3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C0140F8DBA38DF4B658CF4760 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0a03970-cbd0-3638-8930-977ce7fda78d.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 199959 IP address blocks: 72.244.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:f8:db:a3:8d:f4:b6:58:cf:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=967eea20-7262-4eed-9dc3-53a0a2d01289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:c2:af:3a:98:78:f8:ae:31:20:f3:55:1b: 4b:02:89:5b:23:2f:f6:db:bd:75:0f:2a:c0:b1:1b: 98:fc:c1:8e:b8:ce:15:78:9b:90:a0:4c:e8:86:34: 77:1f:13:2f:a1:a4:60:6c:b9:0f:79:8b:e2:5a:aa: 4a:7c:f0:ca:ab:af:1f:5f:4a:68:c1:99:8e:68:fb: bb:83:1a:89:1e:e6:dc:e4:c1:5a:87:55:d6:f3:28: ee:ed:32:d7:49:98:8e:04:90:01:63:2d:76:cd:1f: 0f:4c:4d:48:9c:64:5b:17:80:58:39:83:23:59:e7: 95:ab:26:dc:04:40:4f:85:08:94:cb:6f:d8:c8:3c: b6:e5:a5:ca:f3:f6:15:98:b0:bb:85:3c:84:d7:7d: 8e:ef:d2:07:7e:27:65:8f:00:bb:8d:2a:5b:db:fc: 8d:be:b7:e3:0f:1c:47:67:ec:bc:02:44:3a:98:e7: 5e:d3:0c:e1:a1:db:57:9d:70:b6:8a:09:ea:1c:71: f1:77:7c:b1:ee:d1:74:2e:8b:4f:78:e2:dc:ef:19: 0f:f3:22:7b:12:ae:ae:88:15:4d:b4:f6:fe:e9:e3: e1:7d:a6:f9:2c:34:23:3e:09:22:23:1e:a6:31:0f: 1a:dd:7e:0a:55:21:15:1d:75:d6:26:22:46:a7:14: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:35:D5:49:6D:8A:D1:47:10:67:46:87:97:B5:3F:C1:77:27:3F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0a03970-cbd0-3638-8930-977ce7fda78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:70:5c:7d:b3:89:35:cc:1c:4f:b7:0c:1a:2c:24:08:ab:20: e1:f4:69:c5:61:3d:a3:de:99:71:70:05:dd:66:a7:31:c8:4d: e1:1a:9b:5b:fc:a6:ee:b5:2b:e6:93:96:28:31:87:e9:0f:88: 30:8c:1c:1d:ee:ab:48:00:c1:7f:93:c9:fa:0f:fb:d2:4e:81: cb:e1:21:70:13:e8:2b:0e:f4:4f:58:b4:0c:1c:b3:3d:d1:c6: 78:9f:4d:13:4c:56:69:cd:ae:15:10:9c:09:14:e2:11:f6:35: d3:b4:68:a6:cf:a1:6d:90:3e:19:a3:d1:95:4f:fb:e7:ee:8e: 63:aa:7f:41:69:09:b0:0d:21:9e:35:c1:f2:e5:08:a1:ec:64: 11:d2:db:3c:7c:95:82:6b:b3:61:e3:49:ba:3b:9b:6c:f0:5f: 99:c9:13:97:44:22:0b:00:b6:0c:8f:e5:fb:2a:6d:ba:de:70: 3e:37:b4:0a:57:e6:16:48:d5:77:b7:e3:3f:4c:67:68:ca:be: 58:fb:64:8c:d7:46:f1:13:dd:06:c0:6a:7d:80:54:2d:81:e8: 21:19:3f:73:7d:d5:12:d0:af:eb:de:7c:ee:dc:32:9d:17:80: 7f:48:8a:b2:ad:88:35:5d:fa:53:37:b5:ba:1c:43:9b:b8:9e: a9:1d:58:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQPjbo430tljPR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk OTY3ZWVhMjAtNzI2Mi00ZWVkLTlkYzMtNTNhMGEyZDAxMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkevCrzqYePiuMSDzVRtLAolbIy/22711DyrA sRuY/MGOuM4VeJuQoEzohjR3HxMvoaRgbLkPeYviWqpKfPDKq68fX0powZmOaPu7 gxqJHubc5MFah1XW8yju7TLXSZiOBJABYy12zR8PTE1InGRbF4BYOYMjWeeVqybc BEBPhQiUy2/YyDy25aXK8/YVmLC7hTyE132O79IHfidljwC7jSpb2/yNvrfjDxxH Z+y8AkQ6mOde0wzhodtXnXC2ignqHHHxd3yx7tF0LotPeOLc7xkP8yJ7Eq6uiBVN tPb+6ePhfab5LDQjPgkiIx6mMQ8a3X4KVSEVHXXWJiJGpxSNYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGk11UltitFHEGdGh5e1P8F3Jz/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjBhMDM5NzAtY2JkMC0z NjM4LTg5MzAtOTc3Y2U3ZmRhNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRwXH2ziTXMHE+3DBosJAirIOH0acVhPaPemXFwBd1mpzHITeEam1v8 pu61K+aTligxh+kPiDCMHB3uq0gAwX+TyfoP+9JOgcvhIXAT6CsO9E9YtAwcsz3R xnifTRNMVmnNrhUQnAkU4hH2NdO0aKbPoW2QPhmj0ZVP++fujmOqf0FpCbANIZ41 wfLlCKHsZBHS2zx8lYJrs2HjSbo7m2zwX5nJE5dEIgsAtgyP5fsqbbrecD43tApX 5hZI1Xe34z9MZ2jKvlj7ZIzXRvET3QbAan2AVC2B6CEZP3N91RLQr+vefO7cMp0X gH9IirKtiDVd+lM3tbocQ5u4nqkdWLs= -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:59 2025 by rpki-client