This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa File: 4a94a50c-a556-39b0-83af-a1d6940051da.roa (raw, json) Hash identifier: Vl7iGxXl7ORm5C9nSR/y4VFsPQ2vuTgciDehdladsZ0= Subject key identifier: 17:38:25:F5:67:E3:A5:43:B2:90:85:AB:0D:71:D6:17:82:ED:11:A6 Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Certificate serial: 010D0C9F4328584C5EC6945B6161D1D0F0FD3200 Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 18491 IP address blocks: 74.220.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:94:5b:61:61:d1:d0:f0:fd:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=40fbcc58-c06b-430f-82c5-f41245ad8527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:99:6c:09:1a:57:9a:b5:2e:da:3e:17:d4:92: c7:14:88:9e:79:85:2f:b9:ed:60:8c:41:ef:07:e5: 76:d1:a4:b7:9b:b0:2e:58:92:2a:2f:f1:63:1b:9a: 7f:2b:0a:1d:b9:3f:7b:b9:5e:af:3e:d9:66:d1:2f: 50:56:75:2a:23:2c:f9:78:26:de:57:37:90:f9:85: 51:63:bd:f4:aa:41:7f:61:ca:ea:36:34:f3:f0:03: 7b:61:f2:66:38:08:7a:f6:1c:c2:ea:be:52:a2:5d: c5:6d:3c:98:a7:7f:b6:41:bc:d3:dc:79:3a:94:c9: fe:7d:90:6d:e5:4b:f6:19:1c:b1:09:46:a1:46:75: 6a:f1:b0:43:07:a8:ec:68:3b:8f:2a:7d:ec:c4:ab: 41:eb:fc:7a:b3:e4:83:f2:9a:4a:d7:36:14:f0:b7: f0:b8:a4:29:6a:5c:eb:93:02:8b:9e:08:70:f1:e8: 38:3e:34:32:e0:b8:8b:63:a5:a1:a0:e7:b8:a1:16: 46:ac:c6:ca:87:4b:47:52:db:f7:7b:9d:03:bd:f2: ea:f3:90:e8:51:96:c3:d1:87:0c:dc:3c:c6:48:6c: 88:9a:c4:56:62:74:ee:f9:50:bd:30:e9:9e:71:de: b4:7a:c8:0a:b0:3f:42:e1:30:aa:7b:82:8a:0c:f7: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:38:25:F5:67:E3:A5:43:B2:90:85:AB:0D:71:D6:17:82:ED:11:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl X509v3 Authority Key Identifier: keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer sbgp-ipAddrBlock: critical IPv4: 74.220.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:80:ff:5d:b1:3c:f1:ef:bc:93:4b:0f:32:18:1e:22:5f:9c: d3:49:e5:cd:8c:ef:2c:2a:42:4c:12:37:c7:f1:95:2f:37:57: 4e:f1:41:35:a1:da:79:19:22:3c:61:aa:17:02:52:ca:34:3c: 00:68:37:d1:04:fd:14:bf:62:97:54:b9:f4:97:5b:d9:74:57: 2e:a5:6a:0a:89:29:c8:a6:5f:0d:2e:e5:e0:55:40:5e:9b:4a: c6:3f:f0:7d:a0:c4:09:fa:cf:31:ed:72:6f:c2:97:10:e6:c6: fb:86:03:1a:9e:bb:d4:93:ef:61:cb:ed:71:1b:ca:ea:af:a0: b9:f2:dc:3c:d8:d1:11:d5:d0:e7:d7:17:19:22:da:45:37:c9: 8e:35:74:40:fe:50:18:50:da:c8:1a:81:8b:cf:14:23:b3:19: d1:38:75:1f:d7:19:0f:61:d6:a3:68:fe:e4:da:da:97:02:2f: 29:63:0f:e9:7d:23:0f:9c:55:96:0a:4d:ab:b1:54:d0:e7:23: 6c:b1:ea:78:73:0f:76:86:32:c0:7d:0f:c6:87:f4:b6:b1:45: bd:40:8f:9f:ed:2e:47:c0:7a:68:e6:2e:34:93:6a:df:8d:13: 26:36:58:6a:1f:d5:39:a3:50:1a:f0:61:d1:f4:98:94:e1:06: c7:28:9f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexpRbYWHR0PD9MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj MTZiMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NDBmYmNjNTgtYzA2Yi00MzBmLTgyYzUtZjQxMjQ1YWQ4NTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4plsCRpXmrUu2j4X1JLHFIieeYUvue1gjEHv B+V20aS3m7AuWJIqL/FjG5p/KwoduT97uV6vPtlm0S9QVnUqIyz5eCbeVzeQ+YVR Y730qkF/YcrqNjTz8AN7YfJmOAh69hzC6r5Sol3FbTyYp3+2QbzT3Hk6lMn+fZBt 5Uv2GRyxCUahRnVq8bBDB6jsaDuPKn3sxKtB6/x6s+SD8ppK1zYU8LfwuKQpalzr kwKLnghw8eg4PjQy4LiLY6WhoOe4oRZGrMbKh0tHUtv3e50DvfLq85DoUZbD0YcM 3DzGSGyImsRWYnTu+VC9MOmecd60esgKsD9C4TCqe4KKDPciWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc4JfVn46VDspCFqw1x1heC7RGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvNGE5NGE1MGMtYTU1Ni0z OWIwLTgzYWYtYTFkNjk0MDA1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0 YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuA/12xPPHvvJNLDzIYHiJfnNNJ5c2M7ywqQkwSN8fxlS83V07xQTWh 2nkZIjxhqhcCUso0PABoN9EE/RS/YpdUufSXW9l0Vy6lagqJKcimXw0u5eBVQF6b SsY/8H2gxAn6zzHtcm/ClxDmxvuGAxqeu9ST72HL7XEbyuqvoLny3DzY0RHV0OfX Fxki2kU3yY41dED+UBhQ2sgagYvPFCOzGdE4dR/XGQ9h1qNo/uTa2pcCLyljD+l9 Iw+cVZYKTauxVNDnI2yx6nhzD3aGMsB9D8aH9LaxRb1Aj5/tLkfAemjmLjSTat+N EyY2WGof1TmjUBrwYdH0mJThBscon+E= -----END CERTIFICATE-----Generated at Sat Jan 10 23:03:01 2026 by rpki-client