This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa File: 452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa (raw, json) Hash identifier: yOnA6tIj6pGx775o5IOz5vWF0TjKj2Bha1f+Ux1eoLg= Subject key identifier: C3:8D:E5:57:79:76:91:06:55:F2:FE:D1:66:49:55:AA:DD:A1:16:10 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584C42DBD24A51008592E6BF9910 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 395494 IP address blocks: 72.19.28.0/24 maxlen: 24 72.19.29.0/24 maxlen: 24 72.19.30.0/24 maxlen: 24 72.19.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:d2:4a:51:00:85:92:e6:bf:99:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=d01481e4-a2cb-40b9-8e79-4526768ed9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:f1:4c:c4:d3:46:c0:3c:8e:cc:00:28:15: 71:65:c0:b1:b6:d6:b2:d3:03:5d:95:ca:dd:e8:76: d0:ba:25:2d:21:d6:e1:c6:d7:64:50:66:46:25:c4: aa:4c:41:80:ea:22:b0:78:de:7e:7a:2b:40:42:df: 27:0a:ee:11:86:b2:f8:6f:ee:3c:fb:f2:c9:1d:e3: e9:85:cd:87:b6:95:0b:e1:b0:4d:f4:26:e5:9a:c5: cd:58:02:90:c2:ec:ba:0a:42:13:04:78:9d:50:1b: 37:03:69:da:c0:3f:5f:6e:42:51:c3:9e:c7:ea:b9: b5:48:c5:b2:45:33:8e:89:3b:3c:c2:bb:b7:f9:2a: a5:77:e4:2c:a1:a2:b2:0f:eb:28:82:9f:54:4b:8c: 01:7b:9e:d9:a8:d5:af:24:d1:f1:a3:e0:a6:f7:f4: 12:81:03:0e:ce:ff:09:d5:30:be:82:af:8d:56:cc: 78:be:9b:bd:ec:5b:c2:6d:99:e6:1f:9e:4d:2a:5f: 1b:4b:7d:b5:4e:8b:f3:e4:94:e4:86:11:35:c0:bf: ca:4a:e6:71:e8:81:df:16:03:92:5f:f4:fa:0c:ba: bc:e0:04:72:59:50:9f:1e:cb:01:14:55:d7:d7:b3: 28:30:41:d1:cb:01:83:55:8d:00:78:e9:2d:67:f7: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:E5:57:79:76:91:06:55:F2:FE:D1:66:49:55:AA:DD:A1:16:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 72.19.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ca:e7:34:de:2d:00:a0:f4:f4:99:f7:9f:04:65:af:9d:ba: 13:9a:b3:16:80:a2:fe:57:40:ac:2e:37:d0:3d:77:a7:d7:a9: 8e:d4:5a:29:77:97:c8:83:4b:e9:d6:39:3d:48:a7:22:0f:5a: 7a:91:51:ba:9b:66:00:63:6d:5c:bf:b3:78:c8:9c:11:35:e3: f8:3b:c0:53:98:17:b9:50:f9:68:8b:ca:f1:52:e1:5b:11:d2: f5:b5:38:54:8f:3a:db:68:f1:6e:3f:51:9e:33:ac:05:c0:37: c4:e4:78:b3:bf:5f:be:18:f0:87:38:e0:a8:05:e0:07:09:69: 92:ec:64:a7:90:eb:1d:94:cf:93:08:6d:08:4f:57:97:88:64: b6:0f:fe:b5:8f:a4:ee:8d:23:94:0d:24:72:4e:70:96:12:36: 67:bb:6d:2a:af:94:fe:19:0e:77:15:8d:87:96:25:8e:ab:a6: 9c:52:62:9c:74:86:d8:70:c6:45:0d:bf:6e:fc:2b:7e:0e:a9: 03:ff:2f:eb:ae:63:12:36:4c:10:0e:c9:2a:89:43:a5:d8:0a: fa:d3:c0:f9:a1:02:0e:7e:e5:51:90:80:74:f2:19:5d:37:e9: f9:30:11:00:a7:ea:10:e3:77:55:65:2e:b6:8d:80:4c:6e:7f: 04:78:62:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC29JKUQCFkua/mRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDAxNDgxZTQtYTJjYi00MGI5LThlNzktNDUyNjc2OGVkOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnHxTMTTRsA8jswAKBVxZcCxttay0wNdlcrd 6HbQuiUtIdbhxtdkUGZGJcSqTEGA6iKweN5+eitAQt8nCu4RhrL4b+48+/LJHePp hc2HtpUL4bBN9CblmsXNWAKQwuy6CkITBHidUBs3A2nawD9fbkJRw57H6rm1SMWy RTOOiTs8wru3+Sqld+QsoaKyD+sogp9US4wBe57ZqNWvJNHxo+Cm9/QSgQMOzv8J 1TC+gq+NVsx4vpu97FvCbZnmH55NKl8bS321Tovz5JTkhhE1wL/KSuZx6IHfFgOS X/T6DLq84ARyWVCfHssBFFXX17MoMEHRywGDVY0AeOktZ/dObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMON5Vd5dpEGVfL+0WZJVardoRYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvNDUyZjhkZDktNDg2Ny0z ZWU1LWIzYjAtZDQzOTMwZjE1ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLK5zTeLQCg9PSZ958EZa+duhOasxaAov5XQKwuN9A9d6fXqY7UWil3 l8iDS+nWOT1IpyIPWnqRUbqbZgBjbVy/s3jInBE14/g7wFOYF7lQ+WiLyvFS4VsR 0vW1OFSPOtto8W4/UZ4zrAXAN8TkeLO/X74Y8Ic44KgF4AcJaZLsZKeQ6x2Uz5MI bQhPV5eIZLYP/rWPpO6NI5QNJHJOcJYSNme7bSqvlP4ZDncVjYeWJY6rppxSYpx0 hthwxkUNv278K34OqQP/L+uuYxI2TBAOySqJQ6XYCvrTwPmhAg5+5VGQgHTyGV03 6fkwEQCn6hDjd1VlLraNgExufwR4YiU= -----END CERTIFICATE-----Generated at Sat Jan 10 04:47:14 2026 by rpki-client