This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa File: 36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa (raw, json) Hash identifier: x5Yrj6BnEn8Ahi43gERwTBWKNhsjgvHAdb70viWy7ak= Subject key identifier: 15:F3:57:99:EC:8D:7E:13:48:4F:29:ED:3D:4A:BD:55:D3:31:03:DC Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC703FBA7F2530B9D710DB0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 33363 IP address blocks: 72.31.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:03:fb:a7:f2:53:0b:9d:71:0d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=8e66fa52-803b-47a5-8c72-cc0bcb8e064a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:e3:48:05:95:89:4d:0f:d8:d8:4a:55:16: 34:05:79:6f:8e:fa:94:e8:a8:72:cf:52:31:4d:b2: 03:67:af:5b:d0:25:55:a1:3d:29:33:7f:ed:4b:0b: 97:59:c9:e7:74:2a:c3:aa:31:20:cd:23:5f:17:ae: 51:94:d2:7a:97:f4:27:80:3a:44:64:4c:4a:05:2d: 1a:1a:ac:83:8c:d8:d0:cc:82:ad:5c:1c:40:94:34: c5:cd:41:cb:ec:75:c7:47:c2:08:63:2c:af:5e:30: 06:ff:c5:dd:a3:31:82:5a:63:f3:2d:c8:53:fe:c5: a8:38:2b:a8:42:1f:7e:5e:4a:cf:39:a0:a7:83:cf: d9:28:5e:1a:96:0c:d5:2a:62:e6:2f:1d:34:e0:58: 10:c5:b8:4d:54:df:67:6b:7a:36:26:f8:a5:66:81: 77:2d:eb:53:8b:a0:6b:c9:38:ec:2f:cd:da:05:f0: f0:d3:17:64:16:ab:91:e8:a7:b6:da:2d:27:9b:4c: 8d:13:a6:bc:3c:11:ba:a8:d3:8b:dc:30:c9:08:06: ac:0a:01:2d:60:51:92:f6:c6:b6:79:37:30:32:c8: 48:13:7f:40:b0:5a:a6:68:93:16:ea:b3:0d:cb:66: 6d:17:ba:9d:54:b1:83:78:9f:2a:72:db:87:53:dd: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:57:99:EC:8D:7E:13:48:4F:29:ED:3D:4A:BD:55:D3:31:03:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:21:e7:f8:04:54:c9:69:f0:74:0f:c1:9e:40:50:8c:0b:de: 7c:e7:7e:f2:84:73:26:aa:9d:a4:4c:fd:8f:4f:ac:f2:8c:ba: 9f:9d:1c:bf:88:22:d9:c8:de:5c:eb:1e:fb:21:c5:85:c6:9b: 37:a1:27:a7:a8:ef:17:59:e3:22:9e:55:bf:b5:79:24:cf:03: 6f:3f:c2:e5:6a:f2:2e:1b:ba:24:b3:14:23:ea:0d:ca:fa:00: 51:da:b2:33:bd:2b:74:9a:a6:ed:e2:6b:2b:92:b4:62:a2:0d: a4:bd:4f:05:24:d7:27:fe:70:17:23:bd:90:61:94:74:c1:5f: 52:32:16:4d:f8:0d:dd:6e:38:a5:9f:91:50:8e:4e:b5:56:34: e1:5a:59:51:14:75:cd:13:92:ce:88:ad:b4:5a:b7:20:06:f7: 95:a8:3e:40:5a:61:6b:76:dd:00:e2:52:f1:5f:47:17:e1:c9: 65:30:a9:a3:55:f5:5e:6c:48:5b:ef:e8:f9:ba:b8:75:fd:ee: d5:96:29:e7:cf:ac:2b:f5:d4:16:0c:54:c0:fc:07:50:c4:2a: 22:54:80:7a:e9:7e:ac:83:a0:8f:51:d4:a4:c3:09:51:7d:cd: 38:52:c1:29:fe:b5:34:35:a1:ad:65:1f:9c:22:2e:10:aa:49: a8:0c:3d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexwP7p/JTC51xDbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk OGU2NmZhNTItODAzYi00N2E1LThjNzItY2MwYmNiOGUwNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4DjSAWViU0P2NhKVRY0BXlvjvqU6Khyz1Ix TbIDZ69b0CVVoT0pM3/tSwuXWcnndCrDqjEgzSNfF65RlNJ6l/QngDpEZExKBS0a GqyDjNjQzIKtXBxAlDTFzUHL7HXHR8IIYyyvXjAG/8XdozGCWmPzLchT/sWoOCuo Qh9+XkrPOaCng8/ZKF4algzVKmLmLx004FgQxbhNVN9na3o2JvilZoF3LetTi6Br yTjsL83aBfDw0xdkFquR6Ke22i0nm0yNE6a8PBG6qNOL3DDJCAasCgEtYFGS9sa2 eTcwMshIE39AsFqmaJMW6rMNy2ZtF7qdVLGDeJ8qctuHU93oCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXzV5nsjX4TSE8p7T1KvVXTMQPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzZiNmI3YTEtYjlkNy0z YTQ2LWFhOWQtNTc4ZjZmNzUxMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsh5/gEVMlp8HQPwZ5AUIwL3nznfvKEcyaqnaRM/Y9PrPKMup+dHL+I ItnI3lzrHvshxYXGmzehJ6eo7xdZ4yKeVb+1eSTPA28/wuVq8i4buiSzFCPqDcr6 AFHasjO9K3Sapu3iayuStGKiDaS9TwUk1yf+cBcjvZBhlHTBX1IyFk34Dd1uOKWf kVCOTrVWNOFaWVEUdc0Tks6IrbRatyAG95WoPkBaYWt23QDiUvFfRxfhyWUwqaNV 9V5sSFvv6Pm6uHX97tWWKefPrCv11BYMVMD8B1DEKiJUgHrpfqyDoI9R1KTDCVF9 zThSwSn+tTQ1oa1lH5wiLhCqSagMPXY= -----END CERTIFICATE-----Generated at Tue Jan 20 19:04:35 2026 by rpki-client