This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ef8f4a3d-812b-385c-8086-273799953ce6.roa File: ef8f4a3d-812b-385c-8086-273799953ce6.roa (raw, json) Hash identifier: L1bPduJs/P2a1fzOFzhIKQujksiP51aOzMvc6Xifd5g= Subject key identifier: 6A:B7:A9:73:4A:2A:67:6F:E4:60:D2:02:02:DA:FB:FC:7E:93:40:9C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C083B6AF6958C866AF128EA00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ef8f4a3d-812b-385c-8086-273799953ce6.roa Signing time: Sun 30 Nov 2025 14:00:39 +0000 ROA not before: Sun 30 Nov 2025 14:00:39 +0000 ROA not after: Sat 28 Feb 2026 14:00:39 +0000 asID: 40676 IP address blocks: 72.244.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:08:3b:6a:f6:95:8c:86:6a:f1:28:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 30 14:00:39 2025 GMT Not After : Feb 28 14:00:39 2026 GMT Subject: CN=b6dc8166-dda8-4fb3-87ca-863436abb205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:fc:ce:00:7d:7c:76:02:1d:53:2b:7b:74: a1:cc:2a:94:d9:81:04:10:68:44:13:28:7a:30:36: f1:3c:56:74:70:d3:60:34:dd:c6:45:8d:de:9c:64: 97:66:78:d1:19:af:d2:75:40:8c:bd:68:84:5e:34: 06:41:66:31:1c:dc:1b:f0:b8:79:79:97:55:16:d8: 4d:31:a5:b0:86:87:0f:82:61:b9:be:72:22:93:f6: 82:68:40:41:9f:92:07:33:25:9b:45:c4:d8:b3:f8: ea:6f:75:9b:20:29:c7:05:15:99:4a:af:7e:d9:60: c4:b9:dd:eb:b0:4a:e0:56:4b:6f:09:ab:f0:af:b7: 79:56:87:d0:8a:77:73:9d:43:16:6f:d5:76:45:fa: be:b7:ac:89:d3:93:ef:0d:04:2e:4b:08:c5:7c:a8: 12:d7:24:13:c5:98:ec:ff:1a:3c:59:65:21:c7:95: 97:a6:35:af:12:c1:9e:4d:68:fb:99:0a:5d:4e:4e: 36:63:6a:05:d8:b9:64:81:8a:9b:49:74:fc:ed:58: 40:34:58:ec:2a:50:2e:4e:4a:7a:1e:c9:f2:b0:ce: eb:a2:cc:55:5f:bd:81:23:6d:fc:a5:c2:cf:1c:e5: 51:6b:26:c0:d2:4b:51:14:9b:13:fb:7b:56:de:f1: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B7:A9:73:4A:2A:67:6F:E4:60:D2:02:02:DA:FB:FC:7E:93:40:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ef8f4a3d-812b-385c-8086-273799953ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:7b:e8:9f:19:e2:60:8f:c2:59:92:e2:08:30:7a:29:10:53: d5:4e:ab:29:86:0f:50:bf:b8:1d:7f:91:08:e4:fc:d1:d4:aa: ff:36:ad:80:17:22:ca:49:12:62:aa:54:01:b7:32:ad:ae:a4: 75:93:d1:9a:4e:7d:8b:ee:2c:b5:05:c1:fe:76:2a:75:6f:1f: 06:0f:9c:69:82:2d:42:15:07:ef:fb:84:58:f5:9e:6f:ca:46: d3:05:49:e6:ea:92:36:fc:b1:a2:fa:cc:20:09:f3:aa:2b:d4: e8:c9:f3:ef:cb:c6:47:a2:78:d1:5d:2f:83:7c:f2:07:17:f3: af:6a:9e:43:16:0f:9b:6c:68:20:10:b7:cb:54:34:e0:e7:fb: 9c:e3:ac:60:d8:4b:51:86:ce:d5:53:c7:b4:4d:f4:4d:ea:e1: 04:79:a8:8d:74:98:2f:c9:bc:da:7a:b8:e8:78:6b:79:2b:cd: 44:21:00:54:7e:57:a4:3f:8c:f0:00:dd:19:cc:b6:a9:e4:46: 03:d1:d8:7b:9a:be:40:0e:1e:2f:88:ae:de:32:d7:5f:a1:d2: bb:d0:c2:cf:eb:c8:7e:fe:f4:a6:78:fa:d2:7f:ca:11:69:af: a8:b4:8a:41:0f:f4:f4:6c:6d:be:82:c0:c0:a0:a1:0d:7f:fd: 10:1b:90:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwIO2r2lYyGavEo6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEzMDE0MDAzOVoXDTI2MDIyODE0MDAzOVowLzEtMCsGA1UEAxMk YjZkYzgxNjYtZGRhOC00ZmIzLTg3Y2EtODYzNDM2YWJiMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNn8zgB9fHYCHVMre3ShzCqU2YEEEGhEEyh6 MDbxPFZ0cNNgNN3GRY3enGSXZnjRGa/SdUCMvWiEXjQGQWYxHNwb8Lh5eZdVFthN MaWwhocPgmG5vnIik/aCaEBBn5IHMyWbRcTYs/jqb3WbICnHBRWZSq9+2WDEud3r sErgVktvCavwr7d5VofQindznUMWb9V2Rfq+t6yJ05PvDQQuSwjFfKgS1yQTxZjs /xo8WWUhx5WXpjWvEsGeTWj7mQpdTk42Y2oF2LlkgYqbSXT87VhANFjsKlAuTkp6 HsnysM7rosxVX72BI238pcLPHOVRaybA0ktRFJsT+3tW3vEFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq3qXNKKmdv5GDSAgLa+/x+k0CcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWY4ZjRhM2QtODEyYi0z ODVjLTgwODYtMjczNzk5OTUzY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMN76J8Z4mCPwlmS4ggweikQU9VOqymGD1C/uB1/kQjk/NHUqv82rYAX IspJEmKqVAG3Mq2upHWT0ZpOfYvuLLUFwf52KnVvHwYPnGmCLUIVB+/7hFj1nm/K RtMFSebqkjb8saL6zCAJ86or1OjJ8+/LxkeieNFdL4N88gcX869qnkMWD5tsaCAQ t8tUNODn+5zjrGDYS1GGztVTx7RN9E3q4QR5qI10mC/JvNp6uOh4a3krzUQhAFR+ V6Q/jPAA3RnMtqnkRgPR2HuavkAOHi+Irt4y11+h0rvQws/ryH7+9KZ4+tJ/yhFp r6i0ikEP9PRsbb6CwMCgoQ1//RAbkN8= -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:34 2025 by rpki-client