This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: MQ7Dma/qWg9VTi00kgahCNXCrAKH9ZDId+GuMUY9xoI= Subject key identifier: F6:8A:35:D5:D4:59:22:4B:5E:FD:C0:EB:FD:3E:12:27:5F:41:92:27 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584BF4B0A9EC0B981CD351BCB3A0 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:a9:ec:0b:98:1c:d3:51:bc:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=0f3e874c-3d3b-4290-910f-2049a57beb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:e1:2c:3f:28:9f:b2:38:6b:d8:15:dd:70: b6:92:7c:13:8f:03:2e:a9:7d:0e:a3:eb:f7:5b:ac: 24:04:00:7e:ec:37:09:4e:03:b7:42:60:2e:2f:92: e3:04:63:88:a4:48:95:fd:e3:0c:fb:6e:99:a7:59: ea:75:11:f1:2e:19:f4:ab:ed:a3:b9:1d:76:7a:a6: 82:74:22:e9:9f:8b:a4:07:b0:c8:28:33:12:56:be: b5:86:03:dc:3a:7b:32:46:b9:af:d7:28:8e:e6:86: da:5f:d3:4c:a2:dd:af:65:3c:62:0c:9f:6c:11:b3: 03:79:22:86:1e:fb:30:58:9d:ee:d5:7f:3c:1e:72: 89:2f:91:66:57:99:b7:04:44:a7:77:7d:4e:70:e9: f1:54:bc:e6:86:e1:e6:4e:cb:c7:01:b8:fb:3d:1b: 57:3e:e6:3c:2b:41:f1:a7:22:2a:2f:f7:8b:88:c7: 61:97:40:73:94:c2:4c:bf:8f:6b:4d:05:66:1c:82: 36:b0:6b:e3:ae:58:3d:ad:83:bc:4e:8e:07:e1:8b: 95:bc:fb:ce:4e:f8:fb:34:58:fe:cc:32:06:e7:07: c1:47:2a:b2:6b:c6:c4:4b:46:3b:40:c8:e3:29:5a: 6f:87:5e:f6:ca:95:0f:3f:22:a9:bd:bc:ed:25:58: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8A:35:D5:D4:59:22:4B:5E:FD:C0:EB:FD:3E:12:27:5F:41:92:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fd:ca:5c:cd:6d:92:0f:6d:c4:1f:8c:d8:ee:45:27:90:96: 42:80:76:af:87:90:5d:84:58:60:0c:f2:5e:17:52:72:04:12: 78:ec:e0:b8:24:05:f3:e9:29:26:7f:b5:d5:87:ed:c7:12:d8: 61:0e:e0:b4:2c:7d:1d:a6:d4:a8:1d:56:29:47:73:68:a4:7c: 96:ad:3a:44:83:97:4c:d4:3a:df:11:17:1a:02:01:58:dd:1d: ea:b5:48:55:e3:06:95:8a:33:db:42:e4:ec:93:16:69:fa:85: 51:d0:f5:b6:30:10:41:33:54:1b:04:f6:b2:87:0f:5e:ff:52: 9f:31:26:09:c5:37:d4:ab:30:b1:7a:ee:db:b7:23:53:c8:1e: 7d:0e:b4:31:08:43:7f:bf:62:3d:55:e7:7c:04:ee:42:fe:20: 0f:90:4a:6d:ab:3a:6e:61:8f:ec:b1:1a:40:9f:68:3c:93:75: 4d:4f:b8:b9:5c:61:55:3f:e3:ad:eb:9b:57:54:d1:06:5e:d0: a3:a8:37:51:63:2f:61:d0:a1:f1:73:87:4b:c6:58:75:20:41: fa:f0:5d:59:86:37:29:c0:48:5c:1b:a9:db:9d:cc:09:a8:a0: a2:83:b7:0e:78:21:51:2b:88:e6:98:f7:ad:01:52:16:cf:59: b2:7c:64:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sKnsC5gc01G8s6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk MGYzZTg3NGMtM2QzYi00MjkwLTkxMGYtMjA0OWE1N2JlYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfPhLD8on7I4a9gV3XC2knwTjwMuqX0Oo+v3 W6wkBAB+7DcJTgO3QmAuL5LjBGOIpEiV/eMM+26Zp1nqdRHxLhn0q+2juR12eqaC dCLpn4ukB7DIKDMSVr61hgPcOnsyRrmv1yiO5obaX9NMot2vZTxiDJ9sEbMDeSKG HvswWJ3u1X88HnKJL5FmV5m3BESnd31OcOnxVLzmhuHmTsvHAbj7PRtXPuY8K0Hx pyIqL/eLiMdhl0BzlMJMv49rTQVmHII2sGvjrlg9rYO8To4H4YuVvPvOTvj7NFj+ zDIG5wfBRyqya8bES0Y7QMjjKVpvh172ypUPPyKpvbztJVi2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaKNdXUWSJLXv3A6/0+EidfQZInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH9ylzNbZIPbcQfjNjuRSeQlkKAdq+HkF2EWGAM8l4XUnIEEnjs4Lgk BfPpKSZ/tdWH7ccS2GEO4LQsfR2m1KgdVilHc2ikfJatOkSDl0zUOt8RFxoCAVjd Heq1SFXjBpWKM9tC5OyTFmn6hVHQ9bYwEEEzVBsE9rKHD17/Up8xJgnFN9SrMLF6 7tu3I1PIHn0OtDEIQ3+/Yj1V53wE7kL+IA+QSm2rOm5hj+yxGkCfaDyTdU1PuLlc YVU/463rm1dU0QZe0KOoN1FjL2HQofFzh0vGWHUgQfrwXVmGNynASFwbqdudzAmo oKKDtw54IVEriOaY960BUhbPWbJ8ZMI= -----END CERTIFICATE-----Generated at Tue Nov 25 18:42:10 2025 by rpki-client