This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/caf5a584-dfc7-393b-9216-331c3ed9c417.roa File: caf5a584-dfc7-393b-9216-331c3ed9c417.roa (raw, json) Hash identifier: jorD314G9eRarNd/eX9fIhVZslLnrsOtH3TVHRdHUas= Subject key identifier: ED:E0:07:F8:A2:3D:9B:BE:AA:C9:63:B0:5B:97:9F:BB:E4:5E:92:38 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C040B5D3FD773434AA0CFCAC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/caf5a584-dfc7-393b-9216-331c3ed9c417.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 9304 IP address blocks: 72.244.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:5d:3f:d7:73:43:4a:a0:cf:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=1a0b45b4-0a8a-46de-872f-d4aac48360ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:28:2b:3c:fa:4f:07:15:6d:5c:51:c4:a1: 54:db:b9:97:29:f8:75:70:18:a4:7c:d4:a5:95:59: d8:45:94:c7:03:a4:0a:72:12:d2:61:db:57:d8:03: 09:36:15:6f:76:0e:b4:52:ce:dd:65:57:2f:75:e8: 11:70:7f:0d:f5:48:ec:25:c5:83:97:34:32:7f:5b: ae:6c:cd:63:d4:f5:83:6c:2f:f7:e5:3d:dd:68:14: ea:81:30:58:6a:3e:76:19:61:cd:03:43:7f:63:07: 56:b9:03:e0:55:07:84:de:91:f3:9f:be:01:36:f2: d7:79:79:20:74:1d:91:9e:b7:51:e6:54:fd:f1:44: a2:4c:30:70:ba:94:d1:42:7f:83:1c:3e:bf:a7:87: 1a:c3:8e:23:ca:46:d9:05:1b:79:5e:c4:eb:54:ee: db:09:c8:1e:e5:d2:33:9e:18:7b:90:14:32:9d:fb: f3:1b:d6:9e:e8:4f:53:0c:c9:62:b8:62:6c:70:35: f4:e1:b0:12:8b:04:1f:76:fa:e9:df:d7:96:d1:5e: da:43:49:90:ef:dd:4d:f3:b1:fa:2f:dc:60:c5:92: 89:36:9c:c4:3d:d4:d6:43:22:71:b1:e9:84:90:0d: 10:64:1d:d7:f9:b8:83:30:80:6c:a6:6b:99:08:c9: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E0:07:F8:A2:3D:9B:BE:AA:C9:63:B0:5B:97:9F:BB:E4:5E:92:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/caf5a584-dfc7-393b-9216-331c3ed9c417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:73:09:6d:66:bf:a0:07:1f:db:85:24:1c:25:67:0b:12:6d: 3f:58:9c:38:31:32:e5:68:e7:d4:05:ac:ef:6c:39:0d:74:88: e4:da:cf:fd:f4:e2:1d:dc:2f:9d:4f:27:16:55:8f:90:e5:91: 16:70:aa:bc:da:82:f0:fa:68:d4:74:83:2d:81:00:66:c6:5d: 1e:3e:dd:91:c4:ed:77:4a:63:81:6a:af:58:ca:98:68:e2:4f: 53:16:30:cf:65:90:f0:5f:d8:1f:bb:a8:9e:5a:a8:d2:60:31: 91:c6:e3:f1:c6:8c:1f:23:85:98:fe:69:2b:34:4c:72:1d:0d: d3:5c:f0:75:51:7f:cf:c7:96:af:7a:95:c1:65:9f:7a:ce:59: f3:3a:08:e3:58:21:d1:47:dc:e2:40:73:bd:20:32:08:0c:88: 92:9f:b3:e2:fa:19:e0:39:a4:93:0a:3e:4d:1b:96:d3:5c:d4: 49:50:93:f8:25:11:c3:79:5e:f5:e5:4d:04:ff:ea:73:0b:a7: 94:9a:6a:a2:b8:52:21:df:d0:ad:f8:ce:d1:25:e9:f7:9d:cd: 36:a1:4d:a0:f6:db:5c:41:98:33:4f:a9:b8:4a:a8:27:51:42: 81:b5:b8:b5:7b:9c:53:27:4d:54:41:84:fd:b1:fe:e4:af:1b: 2f:80:d3:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC10/13NDSqDPysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk MWEwYjQ1YjQtMGE4YS00NmRlLTg3MmYtZDRhYWM0ODM2MGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAQoKzz6TwcVbVxRxKFU27mXKfh1cBikfNSl lVnYRZTHA6QKchLSYdtX2AMJNhVvdg60Us7dZVcvdegRcH8N9UjsJcWDlzQyf1uu bM1j1PWDbC/35T3daBTqgTBYaj52GWHNA0N/YwdWuQPgVQeE3pHzn74BNvLXeXkg dB2RnrdR5lT98USiTDBwupTRQn+DHD6/p4caw44jykbZBRt5XsTrVO7bCcge5dIz nhh7kBQynfvzG9ae6E9TDMliuGJscDX04bASiwQfdvrp39eW0V7aQ0mQ791N87H6 L9xgxZKJNpzEPdTWQyJxsemEkA0QZB3X+biDMIBspmuZCMm5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3gB/iiPZu+qsljsFuXn7vkXpI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2FmNWE1ODQtZGZjNy0z OTNiLTkyMTYtMzMxYzNlZDljNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtzCW1mv6AHH9uFJBwlZwsSbT9YnDgxMuVo59QFrO9sOQ10iOTaz/30 4h3cL51PJxZVj5DlkRZwqrzagvD6aNR0gy2BAGbGXR4+3ZHE7XdKY4Fqr1jKmGji T1MWMM9lkPBf2B+7qJ5aqNJgMZHG4/HGjB8jhZj+aSs0THIdDdNc8HVRf8/Hlq96 lcFln3rOWfM6CONYIdFH3OJAc70gMggMiJKfs+L6GeA5pJMKPk0bltNc1ElQk/gl EcN5XvXlTQT/6nMLp5SaaqK4UiHf0K34ztEl6fedzTahTaD221xBmDNPqbhKqCdR QoG1uLV7nFMnTVRBhP2x/uSvGy+A080= -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:13 2025 by rpki-client