This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa File: ca7435da-c073-32a7-95f4-50726ece35b1.roa (raw, json) Hash identifier: lKSlKudkFGLGCEMBT4xHYjaT4S8Bi2sc9aDiKDWGdWA= Subject key identifier: DC:9F:1B:90:0B:B8:19:60:FB:45:9C:CE:F3:E9:7B:57:1A:47:08:C8 Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Certificate serial: 010D0C9F4328584C602BE174DFBD7897FE631500 Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa Signing time: Thu 01 Jan 2026 02:00:31 +0000 ROA not before: Thu 01 Jan 2026 02:00:31 +0000 ROA not after: Wed 01 Apr 2026 01:00:31 +0000 asID: 19704 IP address blocks: 74.85.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:60:2b:e1:74:df:bd:78:97:fe:63:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Validity Not Before: Jan 1 02:00:31 2026 GMT Not After : Apr 1 01:00:31 2026 GMT Subject: CN=53ccfa44-8791-4f65-8115-67f8048300e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:3a:9d:9c:d2:95:7b:be:76:0b:fb:06:77: 2f:ee:fa:f8:c9:32:bb:2a:d3:28:c5:cd:30:ce:89: 21:06:0c:c4:ab:73:e5:2b:5b:5a:51:61:a6:c1:92: 1c:e4:28:56:13:75:c3:2c:26:9d:fa:5b:8c:cb:7d: 10:60:78:5f:41:55:a3:73:8a:26:23:ab:9c:be:09: 7c:c3:7f:ab:45:96:10:86:9b:64:43:ef:37:04:2e: 84:c0:b7:bd:c4:31:5c:e2:6f:90:dc:bd:70:e7:5e: ae:5e:01:9e:b4:d3:3b:da:0b:7e:81:84:7d:8c:83: 5f:94:53:6e:47:4e:4f:83:44:54:8c:06:bc:24:37: 9e:3c:ed:56:08:47:51:13:57:c1:52:f6:b4:48:04: 81:94:16:b2:57:25:f0:29:16:d3:03:ea:e5:e9:ef: 76:7b:b4:fa:fe:9d:08:55:13:99:23:c6:1b:22:32: b5:a1:51:8a:37:a5:54:be:d8:7f:f4:94:de:6c:16: c3:e5:d2:dd:f0:a4:b1:cb:aa:b0:c1:78:a6:e9:e4: bf:c5:0e:d4:41:5f:aa:f7:0f:26:4c:0a:be:4e:ed: d5:23:6a:3b:68:03:89:93:c8:d5:84:1a:0a:45:c2: ff:46:92:29:c9:fc:e2:74:cd:cf:b5:eb:2c:37:9c: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9F:1B:90:0B:B8:19:60:FB:45:9C:CE:F3:E9:7B:57:1A:47:08:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl X509v3 Authority Key Identifier: keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer sbgp-ipAddrBlock: critical IPv4: 74.85.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1e:2a:21:66:17:a7:63:df:81:cf:f4:fc:b9:19:c5:33:a4: d7:00:c0:f2:43:6a:18:43:f0:81:d1:21:14:8f:77:02:35:46: 87:56:f0:37:40:e4:cb:92:59:f2:d2:ce:5a:08:17:d7:17:65: d5:cc:fb:f5:62:6c:b7:28:b2:77:45:ec:18:ce:73:d8:54:6e: e8:c2:d5:2f:fa:b3:25:2a:a5:26:f9:b4:e2:92:82:b4:f7:db: 3c:13:b4:8a:13:ad:c4:7f:8c:b5:91:ec:63:82:2e:a9:8d:22: b7:99:65:a8:8d:08:8d:54:fb:9d:32:4e:cc:fa:7c:e6:95:2b: 17:66:37:1a:a4:c5:ba:4e:45:0c:12:a3:92:df:3a:e9:69:63: 9e:56:59:5f:4a:d8:b3:f9:db:a6:3a:22:aa:42:b2:82:62:cd: d3:d7:90:71:87:cd:ae:5b:e1:4c:f9:40:1e:2b:6a:0b:65:91: 11:33:25:74:33:d1:83:bb:4c:b0:9e:9f:30:9f:aa:74:a0:2e: d5:7b:18:36:0d:ad:e9:e9:38:d7:cb:db:6e:68:13:e9:81:bb: 82:73:f9:f0:92:39:f3:df:3a:01:1e:c0:79:f4:8b:79:76:35: f3:e2:98:8a:d7:22:db:ac:e5:bf:f7:7a:e1:93:f6:0f:30:8d: 09:08:6a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExgK+F03714l/5jFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRmZTcyZDMtYzdmNy00YzkzLWE5ZjAtYTU3MzQxYjI1 OTBiMB4XDTI2MDEwMTAyMDAzMVoXDTI2MDQwMTAxMDAzMVowLzEtMCsGA1UEAxMk NTNjY2ZhNDQtODc5MS00ZjY1LTgxMTUtNjdmODA0ODMwMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oA6nZzSlXu+dgv7Bncv7vr4yTK7KtMoxc0w zokhBgzEq3PlK1taUWGmwZIc5ChWE3XDLCad+luMy30QYHhfQVWjc4omI6ucvgl8 w3+rRZYQhptkQ+83BC6EwLe9xDFc4m+Q3L1w516uXgGetNM72gt+gYR9jINflFNu R05Pg0RUjAa8JDeePO1WCEdRE1fBUva0SASBlBayVyXwKRbTA+rl6e92e7T6/p0I VROZI8YbIjK1oVGKN6VUvth/9JTebBbD5dLd8KSxy6qwwXim6eS/xQ7UQV+q9w8m TAq+Tu3VI2o7aAOJk8jVhBoKRcL/RpIpyfzidM3PtessN5w5gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyfG5ALuBlg+0WczvPpe1caRwjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZl NzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFiMjU5MGIvY2E3NDM1ZGEtYzA3My0z MmE3LTk1ZjQtNTA3MjZlY2UzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRmZTcyZDMtYzdmNy00YzkzLWE5 ZjAtYTU3MzQxYjI1OTBiLzc0ZmU3MmQzLWM3ZjctNGM5My1hOWYwLWE1NzM0MWIy NTkwYi5jcmwwHwYDVR0jBBgwFoAUvpvwQ+HnqqEBnAX000Kk3J9+yFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTcz NDFiMjU5MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACseKiFmF6dj34HP9Py5GcUzpNcAwPJDahhD8IHRIRSPdwI1RodW8DdA 5MuSWfLSzloIF9cXZdXM+/VibLcosndF7BjOc9hUbujC1S/6syUqpSb5tOKSgrT3 2zwTtIoTrcR/jLWR7GOCLqmNIreZZaiNCI1U+50yTsz6fOaVKxdmNxqkxbpORQwS o5LfOulpY55WWV9K2LP526Y6IqpCsoJizdPXkHGHza5b4Uz5QB4ragtlkREzJXQz 0YO7TLCenzCfqnSgLtV7GDYNrenpONfL225oE+mBu4Jz+fCSOfPfOgEewHn0i3l2 NfPimIrXItus5b/3euGT9g8wjQkIalk= -----END CERTIFICATE-----Generated at Sat Jan 10 05:01:32 2026 by rpki-client