This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6959f10b-8c6e-36da-92ac-959804532193.roa File: 6959f10b-8c6e-36da-92ac-959804532193.roa (raw, json) Hash identifier: I+un5XYhgSW0sF0czAAiO/jA6dUvonpe/0tSH6q2DNI= Subject key identifier: CF:49:46:C7:4D:52:C0:AB:44:30:09:05:20:28:B0:67:25:B9:5A:E0 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC708ED7D15575594488B80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6959f10b-8c6e-36da-92ac-959804532193.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 33363 IP address blocks: 72.31.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:08:ed:7d:15:57:55:94:48:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=cd0330b7-fa1b-45ba-b0d2-09049dee1b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:49:0d:d5:89:42:14:eb:d8:82:78:87:36:3b: b4:c3:75:a2:0a:95:6c:8a:c8:18:b1:39:a9:af:59: ee:33:7b:5f:8a:b0:05:46:21:49:f7:94:47:79:60: f0:d2:27:15:19:d3:ed:c3:77:29:04:54:75:41:d9: 10:23:cd:da:b7:cf:18:79:85:4c:68:f2:8d:63:b2: 71:30:61:96:bc:73:c6:33:4a:04:17:24:bf:3c:d5: cc:06:2e:0c:0a:50:ce:e3:42:2d:de:ac:c4:bd:2e: ea:66:cc:fd:50:97:44:6d:ea:ac:c1:f2:14:0f:1b: a8:d3:33:8c:4d:13:95:e8:1c:6e:5a:2e:32:77:f0: 81:36:57:d7:b1:d2:fc:a6:e6:d6:ba:60:74:05:a5: 24:cd:00:bb:ea:cb:58:ec:2c:64:17:dc:24:6f:fa: 4c:0f:fe:e0:c8:20:ea:63:2d:13:5d:11:71:ca:cd: 12:c3:87:0d:a2:fa:b7:b7:59:27:4e:f4:7e:33:cb: 9e:26:6c:9d:ba:08:14:0a:65:01:32:bd:7b:45:6d: 61:97:e0:61:71:7f:c8:12:67:f6:52:ea:2e:b1:0f: 7e:8f:29:b8:17:27:3a:cb:36:07:8a:22:66:1f:d4: f5:b7:50:de:00:a0:8a:28:47:c2:3d:e3:e1:f7:3f: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:49:46:C7:4D:52:C0:AB:44:30:09:05:20:28:B0:67:25:B9:5A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6959f10b-8c6e-36da-92ac-959804532193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5f:76:62:1f:a2:b9:8c:03:da:7a:a4:7d:da:54:e8:fc:1e: 2f:0b:ae:10:25:7d:a5:ae:00:7b:10:04:0a:74:92:f0:2c:43: 4d:13:a7:1c:d5:cf:0c:f0:0e:f6:33:bf:03:13:db:2a:2a:4a: 5c:4c:dd:9c:57:9c:2b:7f:73:8a:89:3a:30:0c:fb:6c:1c:eb: 9d:a1:ac:5a:2c:a1:b4:80:64:1f:03:01:c2:4d:33:53:5a:e5: f1:91:fc:f6:45:59:59:63:2c:ab:70:3c:0d:64:7c:b7:37:cd: 63:68:72:8a:45:ac:68:33:ed:b8:71:42:a9:83:f7:7d:97:14: 28:74:93:3c:1d:a3:0c:df:44:d5:8e:23:05:d0:ce:dc:a4:a1: 03:a7:21:97:b4:aa:63:d6:af:82:17:11:e9:43:3f:5d:b6:f1: cf:8f:f9:93:b4:8c:3c:44:d3:6f:21:bc:aa:1b:48:a7:bd:21: 63:43:88:32:e2:07:ef:9e:b2:7b:5c:7a:bd:cb:35:8a:68:1f: 53:35:91:2b:6f:11:e2:fd:b8:9d:49:76:25:fc:76:ee:0c:41: 77:3f:2c:8d:7c:6c:92:65:e4:b8:dc:63:ab:9d:db:d0:11:4c: 88:18:9f:5b:7c:f1:e7:97:ba:93:c6:74:2f:96:92:6e:b0:31: 60:19:d9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexwjtfRVXVZRIi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk Y2QwMzMwYjctZmExYi00NWJhLWIwZDItMDkwNDlkZWUxYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEkN1YlCFOvYgniHNju0w3WiCpVsisgYsTmp r1nuM3tfirAFRiFJ95RHeWDw0icVGdPtw3cpBFR1QdkQI83at88YeYVMaPKNY7Jx MGGWvHPGM0oEFyS/PNXMBi4MClDO40It3qzEvS7qZsz9UJdEbeqswfIUDxuo0zOM TROV6BxuWi4yd/CBNlfXsdL8pubWumB0BaUkzQC76stY7CxkF9wkb/pMD/7gyCDq Yy0TXRFxys0Sw4cNovq3t1knTvR+M8ueJmyduggUCmUBMr17RW1hl+BhcX/IEmf2 UuousQ9+jym4Fyc6yzYHiiJmH9T1t1DeAKCKKEfCPePh9z93xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9JRsdNUsCrRDAJBSAosGcluVrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjk1OWYxMGItOGM2ZS0z NmRhLTkyYWMtOTU5ODA0NTMyMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSB9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdfdmIformMA9p6pH3aVOj8Hi8LrhAlfaWuAHsQBAp0kvAsQ00TpxzV zwzwDvYzvwMT2yoqSlxM3ZxXnCt/c4qJOjAM+2wc652hrFosobSAZB8DAcJNM1Na 5fGR/PZFWVljLKtwPA1kfLc3zWNocopFrGgz7bhxQqmD932XFCh0kzwdowzfRNWO IwXQztykoQOnIZe0qmPWr4IXEelDP1228c+P+ZO0jDxE028hvKobSKe9IWNDiDLi B++esntcer3LNYpoH1M1kStvEeL9uJ1JdiX8du4MQXc/LI18bJJl5LjcY6ud29AR TIgYn1t88eeXupPGdC+Wkm6wMWAZ2ak= -----END CERTIFICATE-----Generated at Tue Jan 20 16:16:45 2026 by rpki-client