This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa File: 687e6f21-4967-30f7-9256-ae4644c10035.roa (raw, json) Hash identifier: 3Rr2U2QYg0KtFCGUzDuu5IO0Ux9HG73hAeeKTK4UhCc= Subject key identifier: E7:C2:5C:51:BC:E8:6F:F0:CC:5F:1E:6A:B7:2D:82:56:1C:37:54:51 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584C751C06CE41B4765307A87DC0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 16970 IP address blocks: 72.20.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:06:ce:41:b4:76:53:07:a8:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=6a8c2a61-10c0-464c-a03b-a63dc8f81f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:c9:5e:b7:1b:bb:61:25:e5:d0:5a:f3:53: 5d:04:9b:f0:68:ab:88:59:06:b6:87:50:18:22:68: fb:47:90:d0:a2:cc:5b:5a:b0:bd:12:72:e0:3e:e4: 17:9b:7d:d6:f5:28:3a:ce:5d:8d:19:ab:a7:d5:df: 8a:6c:eb:1c:96:1e:25:36:e9:12:60:11:d9:85:a8: 8f:97:bd:0b:84:88:e6:e1:3f:2e:9b:02:ee:84:b8: 02:39:3b:0c:b9:cf:fb:b9:b3:31:a7:2a:6e:4e:82: b1:1f:55:c5:28:49:44:d3:26:12:e8:f3:f7:de:3a: 97:c3:e7:75:c4:3a:d9:d7:4f:6e:9c:55:55:70:4b: a8:4c:7c:6f:3a:b8:34:bb:00:2d:f4:4b:26:40:8c: 13:a6:63:50:3f:ea:c7:9a:78:88:72:3b:a3:58:f5: 9f:15:79:47:4b:0a:f1:d6:05:2b:12:56:41:53:6e: fb:a7:55:cd:e9:d3:d7:75:6a:e3:fc:38:c2:d9:80: b6:3d:5f:26:a0:79:33:0a:f8:38:ba:40:36:e0:cf: 4f:74:2b:d0:52:58:14:db:21:ba:04:0a:04:4a:d1: f1:c6:29:ae:74:e8:79:83:b5:15:c0:5a:62:4c:07: ac:a7:d2:3a:05:0f:f9:5f:e2:6a:1e:67:2f:87:99: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:5C:51:BC:E8:6F:F0:CC:5F:1E:6A:B7:2D:82:56:1C:37:54:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:33:a6:72:1d:1f:80:d5:87:cb:3a:4b:ee:ed:51:f3:e8:6a: 3c:67:aa:4a:20:4e:a0:96:4d:2a:76:16:93:2f:02:cb:26:af: 43:74:49:e1:db:a3:88:2e:01:fe:9d:11:5a:34:43:79:9f:a8: 4f:76:1e:c2:6b:6a:f2:c8:fc:32:ab:6d:3f:16:a5:1e:c6:63: 0d:37:ad:de:10:66:8b:de:7a:f3:f0:4a:97:36:d9:3e:d0:fa: 7a:6b:6d:df:f0:7b:63:86:27:9c:92:10:27:b0:56:98:4b:e7: 7b:53:4c:9a:2d:a6:73:0c:2c:34:ae:e9:58:00:2a:0f:98:05: f6:c8:c6:db:8e:cf:21:3e:dc:c9:72:8d:10:2b:9f:59:cf:b7: cf:52:5c:37:dc:1b:ab:8e:e5:77:b9:66:fe:23:71:f2:a5:04: ec:7f:7d:40:d3:f7:47:0a:37:c8:01:6a:f1:8d:ca:dc:9b:ba: ad:e1:ae:02:88:47:df:07:6a:37:67:32:7b:ae:9b:12:1b:2a: 84:20:cf:2c:25:f5:55:47:78:4e:4a:8e:34:ac:dd:de:fe:8c: 6f:1a:60:95:87:ad:a2:fe:60:b7:a9:1b:0b:b1:5a:67:17:d3: b4:1e:4c:9c:63:27:1b:b5:e2:29:ce:c2:46:73:b5:19:6e:7c: fd:c6:b5:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HAbOQbR2UweofcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk NmE4YzJhNjEtMTBjMC00NjRjLWEwM2ItYTYzZGM4ZjgxZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYzJXrcbu2El5dBa81NdBJvwaKuIWQa2h1AY Imj7R5DQosxbWrC9EnLgPuQXm33W9Sg6zl2NGaun1d+KbOsclh4lNukSYBHZhaiP l70LhIjm4T8umwLuhLgCOTsMuc/7ubMxpypuToKxH1XFKElE0yYS6PP33jqXw+d1 xDrZ109unFVVcEuoTHxvOrg0uwAt9EsmQIwTpmNQP+rHmniIcjujWPWfFXlHSwrx 1gUrElZBU277p1XN6dPXdWrj/DjC2YC2PV8moHkzCvg4ukA24M9PdCvQUlgU2yG6 BAoEStHxximudOh5g7UVwFpiTAesp9I6BQ/5X+JqHmcvh5lJUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfCXFG86G/wzF8earctglYcN1RRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjg3ZTZmMjEtNDk2Ny0z MGY3LTkyNTYtYWU0NjQ0YzEwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUzpnIdH4DVh8s6S+7tUfPoajxnqkogTqCWTSp2FpMvAssmr0N0SeHb o4guAf6dEVo0Q3mfqE92HsJravLI/DKrbT8WpR7GYw03rd4QZoveevPwSpc22T7Q +nprbd/we2OGJ5ySECewVphL53tTTJotpnMMLDSu6VgAKg+YBfbIxtuOzyE+3Mly jRArn1nPt89SXDfcG6uO5Xe5Zv4jcfKlBOx/fUDT90cKN8gBavGNytybuq3hrgKI R98HajdnMnuumxIbKoQgzywl9VVHeE5KjjSs3d7+jG8aYJWHraL+YLepGwuxWmcX 07QeTJxjJxu14inOwkZztRlufP3Gtbo= -----END CERTIFICATE-----Generated at Sun Jan 11 15:46:17 2026 by rpki-client