This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: /wLKwywdGJ19IJy83UTxTCeePCjoQtV2bBkTC+jNcsQ= Subject key identifier: F9:8B:59:EA:A8:79:D9:8F:DC:51:08:CB:6E:9E:5F:56:13:E4:48:C7 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584BE555C4BFC11030B47D827D88 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:c4:bf:c1:10:30:b4:7d:82:7d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=46dfecfd-3db4-4526-819f-ca60e3493238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:55:83:01:32:a7:3c:8e:1d:e8:80:1d:30: 02:00:7a:ac:60:90:f4:74:0d:37:25:cc:d2:7e:16: b2:4f:40:c6:b5:4d:88:6f:db:42:f0:b7:0e:4f:ff: ba:62:d6:03:ff:29:02:e2:a0:07:8e:e9:f9:83:e3: e5:1b:c6:ad:ff:93:c7:dd:94:64:0d:ba:2f:1d:b4: 0e:4a:c3:25:8e:d3:d7:07:32:86:75:be:2d:ed:b5: a0:39:2f:b8:23:ff:7f:83:7f:2d:64:99:fe:8f:86: 0e:ba:95:4e:8e:20:51:a0:6e:c4:f4:61:e6:a1:86: 98:5f:6f:cd:56:aa:84:60:f6:af:d6:c5:bd:e9:a9: 35:0a:42:68:9f:ea:40:c1:20:6e:98:ce:1d:59:9c: fb:62:b2:7b:c3:d1:4f:4a:4f:72:48:37:42:5d:85: a6:db:cb:1c:32:d8:b9:b4:69:f6:97:16:07:b4:d0: 0b:b8:81:90:54:07:df:6e:b6:bb:0b:ed:05:ae:73: b0:cb:d6:a5:8e:c6:2c:ca:3a:19:68:6a:f8:20:fb: bf:57:ea:59:84:48:bc:c6:fb:08:10:74:4e:3b:db: 7d:6f:a4:f5:f3:23:ae:c2:3b:c3:bb:41:00:b7:5b: b6:b2:d1:15:ea:85:8d:a9:d7:48:21:57:97:73:56: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:59:EA:A8:79:D9:8F:DC:51:08:CB:6E:9E:5F:56:13:E4:48:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ad:2c:f9:a5:e9:a1:fa:f3:0a:8f:6f:50:b5:07:ec:85:2b: bb:8f:33:4a:b4:1e:68:1b:4e:70:de:f8:aa:47:e7:0f:89:a9: 2c:3a:15:59:8f:90:cc:5b:b8:31:3d:02:88:db:50:42:1a:20: 65:c8:bd:9c:42:e1:f0:92:ed:52:de:47:96:1d:af:49:08:d6: ff:e3:b4:ca:40:23:2e:26:39:2a:f1:ac:db:ca:59:12:07:f1: b4:eb:27:c2:8c:aa:57:6e:3f:dd:ad:29:7f:66:7d:da:ae:45: b1:77:8a:ce:3a:19:d5:bd:16:57:0f:c8:d0:0c:7b:57:d3:bd: b5:6c:8f:c6:25:92:24:d3:08:39:35:b0:fe:2f:1f:81:9a:e9: 5a:cc:e5:05:61:33:6a:5b:4d:7e:bc:a5:9c:e2:2c:e6:7f:3d: 28:f5:9c:ca:3e:53:a9:1e:f2:92:88:94:1c:6d:36:bf:53:8e: ec:23:b2:73:64:d3:48:4a:07:ed:28:22:58:13:52:a5:b1:f0: 90:37:f9:1d:85:4e:48:3a:ef:4b:8e:3e:61:2b:68:14:c4:98: ee:79:f9:0d:49:4d:68:79:7a:b5:71:1a:02:8c:56:49:8f:4f: 70:88:4f:6a:e6:5e:e2:ce:09:51:41:23:a6:6f:81:fd:4b:a7: 85:97:94:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVcS/wRAwtH2CfYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk NDZkZmVjZmQtM2RiNC00NTI2LTgxOWYtY2E2MGUzNDkzMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO9VgwEypzyOHeiAHTACAHqsYJD0dA03JczS fhayT0DGtU2Ib9tC8LcOT/+6YtYD/ykC4qAHjun5g+PlG8at/5PH3ZRkDbovHbQO SsMljtPXBzKGdb4t7bWgOS+4I/9/g38tZJn+j4YOupVOjiBRoG7E9GHmoYaYX2/N VqqEYPav1sW96ak1CkJon+pAwSBumM4dWZz7YrJ7w9FPSk9ySDdCXYWm28scMti5 tGn2lxYHtNALuIGQVAffbra7C+0FrnOwy9aljsYsyjoZaGr4IPu/V+pZhEi8xvsI EHROO9t9b6T18yOuwjvDu0EAt1u2stEV6oWNqddIIVeXc1ab8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmLWeqoedmP3FEIy26eX1YT5EjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6tLPml6aH68wqPb1C1B+yFK7uPM0q0HmgbTnDe+KpH5w+JqSw6FVmP kMxbuDE9AojbUEIaIGXIvZxC4fCS7VLeR5Ydr0kI1v/jtMpAIy4mOSrxrNvKWRIH 8bTrJ8KMqlduP92tKX9mfdquRbF3is46GdW9FlcPyNAMe1fTvbVsj8YlkiTTCDk1 sP4vH4Ga6VrM5QVhM2pbTX68pZziLOZ/PSj1nMo+U6ke8pKIlBxtNr9TjuwjsnNk 00hKB+0oIlgTUqWx8JA3+R2FTkg670uOPmEraBTEmO55+Q1JTWh5erVxGgKMVkmP T3CIT2rmXuLOCVFBI6Zvgf1Lp4WXlEo= -----END CERTIFICATE-----Generated at Sun Nov 23 06:14:21 2025 by rpki-client