This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa File: 21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa (raw, json) Hash identifier: cgKh2768RDcmwoU/cfUm+/lEAZjiF5/kEtsoenDWLKk= Subject key identifier: 70:BF:3D:53:FC:FD:9C:82:6F:3E:2C:8C:27:59:B4:E8:0F:84:80:97 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BF463DD97CB73A21516E77700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa Signing time: Sun 23 Nov 2025 11:26:09 +0000 ROA not before: Sun 23 Nov 2025 11:26:09 +0000 ROA not after: Sat 21 Feb 2026 11:26:09 +0000 asID: 834 IP address blocks: 72.244.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:63:dd:97:cb:73:a2:15:16:e7:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 23 11:26:09 2025 GMT Not After : Feb 21 11:26:09 2026 GMT Subject: CN=857a4f35-a1de-46a9-a17c-bf345a96c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:85:4d:e7:2f:c8:ce:53:2f:da:5f:78:92: be:f7:bc:55:f1:f0:86:da:bf:72:1b:eb:d4:00:cd: f7:56:d9:05:26:9e:e7:5f:30:2a:ec:d1:94:0e:29: fc:0b:71:45:79:dd:de:ba:0d:62:e2:29:3b:93:b9: 01:cf:fb:12:e2:4e:f5:56:74:55:7b:09:bb:41:ff: 1e:c9:d6:8f:6a:fc:ec:08:bf:8f:b2:ec:7e:f9:e6: 88:eb:68:ce:49:2e:c9:04:e8:93:6b:85:b6:f1:2d: 0b:48:ce:ce:fe:73:6d:f2:fe:44:cd:4f:57:2e:8c: b0:15:d8:13:47:40:f0:5d:a9:3e:aa:be:92:42:eb: d2:7c:45:ab:fe:f8:5a:cc:da:a8:26:00:45:4f:3c: ad:f8:f2:54:10:6b:dd:ac:ff:6e:a5:e6:aa:af:59: 7f:0e:8d:42:f2:dd:3b:22:d4:d9:4d:15:63:97:06: 8b:83:48:46:94:a9:1b:a0:02:c9:3a:8a:bd:0f:b9: 97:12:a4:8b:87:cc:3a:37:6a:cc:78:4b:d2:f1:5c: 5a:f5:e7:0e:97:e6:fc:92:2b:0e:75:dd:7c:5f:5c: 5c:d9:ed:da:6d:d7:45:e8:5f:3c:3b:98:b7:d2:5c: d6:fd:3e:bb:d6:93:f9:28:51:38:b5:65:30:55:02: b3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:3D:53:FC:FD:9C:82:6F:3E:2C:8C:27:59:B4:E8:0F:84:80:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:61:b4:58:40:4a:8e:8f:00:f8:68:a8:34:c2:14:a9:9e:88: f8:4f:89:0d:2a:df:1c:a1:86:18:af:d7:80:16:52:88:bb:01: 73:34:9d:21:d2:89:11:d4:c6:06:4f:d3:a8:87:8e:b0:90:12: 71:ca:67:8a:8f:89:f8:21:47:a0:ff:6f:70:37:cd:d9:b6:08: 38:35:2a:a8:ed:97:ae:0c:7f:b6:5c:d7:d5:96:09:56:dd:64: 9b:d8:ae:6c:ff:a5:66:8b:ab:02:32:f2:51:1d:df:07:41:b1: 50:6f:50:b5:fc:68:98:cf:7c:ef:17:e8:01:21:7d:55:c8:3d: d6:89:ca:27:f4:30:e9:b8:79:91:fa:af:1c:a5:6f:10:6f:3e: 1e:76:d3:4e:4a:7a:42:05:5f:15:28:6e:21:86:71:5c:6a:cb: a4:9e:ed:d1:a5:ab:76:05:dd:9e:e2:3d:dc:11:54:18:d8:4c: d9:92:a3:82:2d:e6:26:d2:72:16:5f:61:e2:36:d4:44:42:ca: 81:46:6a:87:d6:30:b2:1c:d0:c7:bd:b9:10:55:93:0a:61:dc: 13:b5:4d:15:66:b9:6c:17:6e:e8:bc:1d:d2:1c:43:f2:e2:97: 15:70:34:ed:ae:00:04:36:79:64:e0:24:1c:53:49:48:e1:ea: 05:e7:14:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0Y92Xy3OiFRbndwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyMzExMjYwOVoXDTI2MDIyMTExMjYwOVowLzEtMCsGA1UEAxMk ODU3YTRmMzUtYTFkZS00NmE5LWExN2MtYmYzNDVhOTZjNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNSFTecvyM5TL9pfeJK+97xV8fCG2r9yG+vU AM33VtkFJp7nXzAq7NGUDin8C3FFed3eug1i4ik7k7kBz/sS4k71VnRVewm7Qf8e ydaPavzsCL+Psux++eaI62jOSS7JBOiTa4W28S0LSM7O/nNt8v5EzU9XLoywFdgT R0DwXak+qr6SQuvSfEWr/vhazNqoJgBFTzyt+PJUEGvdrP9upeaqr1l/Do1C8t07 ItTZTRVjlwaLg0hGlKkboALJOoq9D7mXEqSLh8w6N2rMeEvS8Vxa9ecOl+b8kisO dd18X1xc2e3abddF6F88O5i30lzW/T671pP5KFE4tWUwVQKzswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHC/PVP8/ZyCbz4sjCdZtOgPhICXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFjYWY1YjItZGFkMy0z YjA4LWJmMGMtOGZmMDg1MTIzZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJhtFhASo6PAPhoqDTCFKmeiPhPiQ0q3xyhhhiv14AWUoi7AXM0nSHS iRHUxgZP06iHjrCQEnHKZ4qPifghR6D/b3A3zdm2CDg1Kqjtl64Mf7Zc19WWCVbd ZJvYrmz/pWaLqwIy8lEd3wdBsVBvULX8aJjPfO8X6AEhfVXIPdaJyif0MOm4eZH6 rxylbxBvPh52005KekIFXxUobiGGcVxqy6Se7dGlq3YF3Z7iPdwRVBjYTNmSo4It 5ibSchZfYeI21ERCyoFGaofWMLIc0Me9uRBVkwph3BO1TRVmuWwXbui8HdIcQ/Li lxVwNO2uAAQ2eWTgJBxTSUjh6gXnFK4= -----END CERTIFICATE-----Generated at Tue Nov 25 16:14:54 2025 by rpki-client