This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa File: 868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa (raw, json) Hash identifier: tkG1Cwssgr268C+KnMUXS10wnsxtAl6mkiA/qeehDkU= Subject key identifier: F0:06:2C:04:79:BE:4D:35:46:37:FF:4F:DC:70:EB:4B:BB:36:4E:87 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC7048C69BDE9C27405A800 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 33363 IP address blocks: 72.31.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:04:8c:69:bd:e9:c2:74:05:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=464cca11-3590-45d1-acdd-cf04565fe1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:c9:c1:ab:bc:35:68:c6:2c:6e:1f:9e:d7: e4:be:35:55:e3:e6:e0:ae:b3:0e:13:69:9c:55:d3: db:5a:58:ba:53:b6:3f:0b:53:86:d9:63:59:9e:6c: 66:ca:fc:89:eb:9d:f7:93:43:69:3a:b3:95:a8:16: 6e:04:ac:af:52:7c:ca:f5:84:81:12:dd:bf:80:dc: 0c:ee:04:d2:d8:40:16:66:72:59:e6:85:13:a3:a4: f7:72:47:21:30:7b:0c:8d:f0:1b:64:54:ef:5e:dc: ff:f6:1a:61:52:da:c1:3d:fe:db:fe:27:6d:e3:8e: ed:97:b8:fa:4d:09:2c:44:56:fd:e6:1e:b5:4c:c4: 08:0d:42:bd:72:7d:60:e6:fc:ab:62:04:eb:5c:f2: 7c:09:5b:ab:6f:6f:23:da:b1:8d:be:bd:28:79:b1: e9:4d:ca:d6:4b:47:1f:4d:e5:35:61:18:05:ed:15: ad:cd:5e:53:b7:91:33:55:0e:c2:4d:62:e9:4e:6b: 0c:a6:10:e7:13:15:29:9d:db:46:41:b7:01:b7:b4: b2:23:e3:2d:c9:6e:9b:ca:03:9b:2c:95:00:6f:a6: fd:f7:51:dc:24:32:9e:fc:34:94:42:40:5e:ca:c7: 3e:96:7b:d0:ed:23:10:fb:a0:e9:82:01:4c:24:c5: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:06:2C:04:79:BE:4D:35:46:37:FF:4F:DC:70:EB:4B:BB:36:4E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:82:6d:cc:fe:fd:1f:09:04:df:ad:d2:ea:e4:d4:b7:dd:ab: d8:d9:be:91:a3:9d:28:ea:66:4f:1b:59:f6:1c:76:1b:fd:3c: 48:0a:24:a5:40:d5:12:5d:9e:0a:eb:d1:f0:7e:6f:9d:c1:d4: 12:0b:26:a4:dc:10:47:9f:e5:fd:94:1e:67:c4:3e:03:6e:91: 28:63:a1:ae:57:9a:38:0e:23:4f:be:6b:4d:85:28:3e:af:1f: d4:e5:0f:b5:bf:2c:f5:19:7d:df:0f:71:53:a7:4b:54:ce:9b: 2a:2c:e0:25:39:d7:6d:7a:b5:48:93:39:69:58:c9:59:d3:96: 50:1b:2f:df:c6:b9:24:5f:93:a3:b9:b4:06:29:da:34:8f:3a: f2:75:d6:21:c2:44:ea:a3:a9:db:f4:07:fe:ad:08:ec:24:75: b2:83:e9:7b:49:22:36:1a:32:d2:0a:ec:b2:12:9d:7c:00:cc: 45:d9:aa:5e:9b:16:3b:af:63:15:5b:e1:5c:1e:d5:31:d2:6c: 99:9e:08:8f:f4:28:5c:3b:d3:bf:42:8c:ae:fa:b5:f4:35:25: d6:12:7c:71:5c:92:80:83:10:bb:9f:df:18:95:a2:75:cc:f3: dd:c0:fa:3d:81:c4:50:12:d5:4a:8d:1a:31:74:3a:ed:43:5d: ea:d9:f6:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexwSMab3pwnQFqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NDY0Y2NhMTEtMzU5MC00NWQxLWFjZGQtY2YwNDU2NWZlMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS7Jwau8NWjGLG4fntfkvjVV4+bgrrMOE2mc VdPbWli6U7Y/C1OG2WNZnmxmyvyJ6533k0NpOrOVqBZuBKyvUnzK9YSBEt2/gNwM 7gTS2EAWZnJZ5oUTo6T3ckchMHsMjfAbZFTvXtz/9hphUtrBPf7b/idt447tl7j6 TQksRFb95h61TMQIDUK9cn1g5vyrYgTrXPJ8CVurb28j2rGNvr0oebHpTcrWS0cf TeU1YRgF7RWtzV5Tt5EzVQ7CTWLpTmsMphDnExUpndtGQbcBt7SyI+MtyW6bygOb LJUAb6b991HcJDKe/DSUQkBeysc+lnvQ7SMQ+6DpggFMJMU8dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAGLAR5vk01Rjf/T9xw60u7Nk6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODY4YzU0ZjYtM2YzMC0z YjBkLTlhZDUtYjdiZTE3MzAzYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuCbcz+/R8JBN+t0urk1Lfdq9jZvpGjnSjqZk8bWfYcdhv9PEgKJKVA 1RJdngrr0fB+b53B1BILJqTcEEef5f2UHmfEPgNukShjoa5XmjgOI0++a02FKD6v H9TlD7W/LPUZfd8PcVOnS1TOmyos4CU51216tUiTOWlYyVnTllAbL9/GuSRfk6O5 tAYp2jSPOvJ11iHCROqjqdv0B/6tCOwkdbKD6XtJIjYaMtIK7LISnXwAzEXZql6b FjuvYxVb4Vwe1THSbJmeCI/0KFw7079CjK76tfQ1JdYSfHFckoCDELuf3xiVonXM 893A+j2BxFAS1UqNGjF0Ou1DXerZ9lc= -----END CERTIFICATE-----Generated at Tue Jan 20 16:16:15 2026 by rpki-client