This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa File: 60a2e865-c471-3ee9-baed-a9d2115f86f0.roa (raw, json) Hash identifier: pAriTX3+ddxrfvYXJ/ywrH6iN1Xw99h+2BALFBFXG0s= Subject key identifier: D8:40:EE:6F:27:40:24:E2:D7:04:75:FD:70:80:BD:1E:48:BA:32:13 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC6D93F83B4A543600E3330 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 33363 IP address blocks: 72.31.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:d9:3f:83:b4:a5:43:60:0e:33:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=84236c8c-9108-4c5b-b336-87b6a31f34d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:f5:56:74:9c:bb:8c:2a:90:c4:3a:aa:9c: d7:be:63:2a:3b:0d:0c:98:c6:6d:0b:ee:4e:55:a5: fc:8b:6c:d1:93:be:c6:a8:17:7b:4a:55:cd:ae:78: 6e:d2:4d:d1:88:02:f0:76:42:e0:9a:f1:4e:c5:99: 69:dc:c8:dc:ea:e4:9f:8f:a3:84:7e:90:31:1f:c7: db:b4:01:bc:a8:61:3e:65:e3:ac:a8:fc:b6:eb:31: 1f:08:dd:ec:a7:aa:8b:8e:21:74:80:c9:70:fd:a1: ac:87:7c:ed:66:7a:36:6e:08:04:1a:d5:cf:01:4c: 48:7a:db:20:20:64:ee:df:ca:e8:0d:c7:28:7a:c1: 8d:36:ab:47:7d:84:95:b7:a3:06:00:d4:60:b3:71: a4:a5:f3:fa:f9:a3:18:d3:db:fc:46:83:2d:30:dc: 8c:5f:53:96:87:60:7f:9a:d7:86:e4:0b:5e:7d:71: 0d:68:de:4d:0a:38:d7:ed:0d:e1:4b:95:35:46:e0: 2d:2e:f5:11:45:8b:e4:44:33:35:00:ef:18:c1:7c: d3:9e:44:fa:16:30:24:61:29:cc:d4:3b:82:d1:9e: 81:1b:d0:e6:ba:ed:36:d8:df:15:07:08:6e:3c:f8: fc:38:22:e5:38:69:72:03:27:95:15:47:93:94:68: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:EE:6F:27:40:24:E2:D7:04:75:FD:70:80:BD:1E:48:BA:32:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a2:0e:19:58:a1:b1:f0:92:35:c0:8f:20:b0:41:55:7b:02: 8b:76:87:36:0f:a5:65:b8:f1:27:52:d6:b1:70:91:77:40:cf: 23:74:7d:10:a6:6c:b6:42:6b:5c:50:25:d0:39:75:7f:8d:e5: 3b:86:6d:5c:68:72:5d:59:16:de:9f:a2:cb:1f:e8:fe:36:15: ef:f5:d5:f3:67:e5:67:50:66:d9:8d:07:b5:49:e7:78:d2:f8: e2:9f:12:8c:aa:98:5b:ff:c9:8e:62:1d:b4:2b:1e:59:44:6d: 37:8a:52:e0:1e:d7:b3:7c:4e:b9:4a:72:8d:fd:41:3e:4c:ea: b9:3b:e8:2b:35:29:d6:7a:17:24:fa:84:ac:9c:be:59:0e:a0: 03:16:c8:07:21:a5:6a:83:9f:57:e5:8a:cd:75:3a:6a:ee:c1: c5:4b:2e:93:a9:ae:d8:5f:0b:ee:22:54:d0:0d:f3:9e:26:60: 00:39:fa:6b:22:e3:bc:a0:9b:8d:be:f5:97:5e:66:a8:ef:1b: 14:95:a4:6a:e2:9c:d1:e6:ed:56:a0:91:ad:06:19:8f:d5:19: f2:5a:02:de:b0:be:15:48:21:fe:ac:c9:27:01:ee:8b:12:da: 1c:3d:58:12:c6:b2:d7:5a:a7:bc:f7:1f:0a:c4:44:57:97:83: 8b:0b:0a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExextk/g7SlQ2AOMzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ODQyMzZjOGMtOTEwOC00YzViLWIzMzYtODdiNmEzMWYzNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Af1VnScu4wqkMQ6qpzXvmMqOw0MmMZtC+5O VaX8i2zRk77GqBd7SlXNrnhu0k3RiALwdkLgmvFOxZlp3Mjc6uSfj6OEfpAxH8fb tAG8qGE+ZeOsqPy26zEfCN3sp6qLjiF0gMlw/aGsh3ztZno2bggEGtXPAUxIetsg IGTu38roDccoesGNNqtHfYSVt6MGANRgs3GkpfP6+aMY09v8RoMtMNyMX1OWh2B/ mteG5AtefXENaN5NCjjX7Q3hS5U1RuAtLvURRYvkRDM1AO8YwXzTnkT6FjAkYSnM 1DuC0Z6BG9Dmuu022N8VBwhuPPj8OCLlOGlyAyeVFUeTlGgjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhA7m8nQCTi1wR1/XCAvR5IujITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjBhMmU4NjUtYzQ3MS0z ZWU5LWJhZWQtYTlkMjExNWY4NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGiDhlYobHwkjXAjyCwQVV7Aot2hzYPpWW48SdS1rFwkXdAzyN0fRCm bLZCa1xQJdA5dX+N5TuGbVxocl1ZFt6fossf6P42Fe/11fNn5WdQZtmNB7VJ53jS +OKfEoyqmFv/yY5iHbQrHllEbTeKUuAe17N8TrlKco39QT5M6rk76Cs1KdZ6FyT6 hKycvlkOoAMWyAchpWqDn1flis11OmruwcVLLpOprthfC+4iVNAN854mYAA5+msi 47ygm42+9ZdeZqjvGxSVpGrinNHm7Vagka0GGY/VGfJaAt6wvhVIIf6syScB7osS 2hw9WBLGstdap7z3HwrERFeXg4sLCog= -----END CERTIFICATE-----Generated at Tue Jan 20 16:13:20 2026 by rpki-client