This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/282c6175-5296-324f-ada1-8c25ae39b69a.roa File: 282c6175-5296-324f-ada1-8c25ae39b69a.roa (raw, json) Hash identifier: rw7cEoUp8RiFMMIZUO9zmRAQmtt3vBqpvZr9Uyk9/BI= Subject key identifier: E3:72:81:D5:89:34:78:B9:8D:A8:21:A0:FB:EF:FB:6C:9C:2F:C6:13 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BEBF664891A267C0ACE88D100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/282c6175-5296-324f-ada1-8c25ae39b69a.roa Signing time: Thu 20 Nov 2025 10:59:07 +0000 ROA not before: Thu 20 Nov 2025 10:59:07 +0000 ROA not after: Wed 18 Feb 2026 10:59:07 +0000 asID: 9304 IP address blocks: 74.1.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:eb:f6:64:89:1a:26:7c:0a:ce:88:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 20 10:59:07 2025 GMT Not After : Feb 18 10:59:07 2026 GMT Subject: CN=bf6fcb2f-e245-4478-887f-9c480d68063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:f0:88:65:fe:c8:1a:82:60:56:73:93:86: d3:b2:d5:1f:47:3e:16:de:c4:1a:2d:85:d4:75:d1: c7:01:be:5a:51:b6:4d:f1:0f:b4:06:c6:c4:85:b3: b7:ae:be:99:64:6e:d4:e1:bd:d5:d6:19:15:2b:8d: 8b:b5:6d:e8:e1:b2:16:ce:47:91:09:c1:72:05:ca: eb:13:39:7e:bd:c7:8b:c5:02:2f:36:61:cf:cc:59: 05:db:66:0b:02:98:f7:c2:c2:e7:52:39:4c:66:aa: b5:63:cc:89:8e:bd:4a:13:8d:cc:8f:4b:c2:02:5a: 08:e5:9e:b6:1d:cb:bc:c9:cb:75:05:5a:06:85:ec: 68:e8:77:1f:e3:3c:ad:27:41:5c:12:20:36:47:9c: d8:10:1d:bc:5f:f3:57:20:e3:49:25:ae:8e:50:9e: ac:29:18:53:33:27:48:59:6c:0c:0d:cb:9b:18:25: ed:ac:81:a2:d2:3b:bb:ca:94:18:3a:e3:d4:b0:fa: 0f:fc:39:82:4c:d8:ea:d0:15:c3:25:cb:b9:e2:b9: c6:c8:55:e0:f1:27:fd:26:af:34:77:4a:98:9c:99: 18:bc:03:c3:5a:85:e9:ce:fd:3b:ac:c3:f3:8c:e6: 22:35:4b:67:63:a8:17:67:6d:d6:4b:9f:7a:2b:7c: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:81:D5:89:34:78:B9:8D:A8:21:A0:FB:EF:FB:6C:9C:2F:C6:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/282c6175-5296-324f-ada1-8c25ae39b69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:aa:42:8b:37:5c:1d:17:ae:6d:ad:b1:1f:ce:f9:9a:f3:01: 36:d9:27:f7:23:91:cc:d6:29:ee:6f:c7:05:25:7e:c9:67:6f: 42:7e:07:6e:dc:38:55:59:1e:be:59:b3:a3:b7:3c:9e:07:50: 09:32:e9:99:d7:94:3e:dc:3a:3d:e1:ef:05:4c:75:d8:67:8a: 9a:70:fe:b5:72:84:d7:75:f0:2b:96:84:c6:d8:19:19:1d:98: cf:2e:8a:73:1f:72:95:4f:1b:ce:5e:7e:c6:f1:9d:8f:79:39: b2:10:79:aa:21:fd:e9:43:56:de:48:35:d8:70:a3:b7:fd:eb: 22:3c:6b:e8:4f:5c:a6:3a:b7:29:f5:94:4d:65:04:49:ba:60: 0a:1f:d9:24:99:3b:c4:31:17:28:f9:1a:63:f1:2f:bf:af:e9: 93:29:16:6d:57:6a:78:be:cf:72:96:5c:5c:2b:74:35:77:84: df:42:ec:3e:40:cf:14:cf:1f:c1:04:06:9f:24:b6:82:6a:61: 9a:8d:44:8e:76:92:c0:ca:ed:27:d4:cd:54:15:03:1d:c4:e0: a1:c8:7f:13:14:83:fb:dd:3b:05:f3:2c:55:5d:71:16:cd:5c: 8a:6c:71:ac:7e:36:94:5c:c7:c3:6a:a6:1d:f8:cd:56:95:cd: 3b:bc:55:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvr9mSJGiZ8Cs6I0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyMDEwNTkwN1oXDTI2MDIxODEwNTkwN1owLzEtMCsGA1UEAxMk YmY2ZmNiMmYtZTI0NS00NDc4LTg4N2YtOWM0ODBkNjgwNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsPwiGX+yBqCYFZzk4bTstUfRz4W3sQaLYXU ddHHAb5aUbZN8Q+0BsbEhbO3rr6ZZG7U4b3V1hkVK42LtW3o4bIWzkeRCcFyBcrr Ezl+vceLxQIvNmHPzFkF22YLApj3wsLnUjlMZqq1Y8yJjr1KE43Mj0vCAloI5Z62 Hcu8yct1BVoGhexo6Hcf4zytJ0FcEiA2R5zYEB28X/NXIONJJa6OUJ6sKRhTMydI WWwMDcubGCXtrIGi0ju7ypQYOuPUsPoP/DmCTNjq0BXDJcu54rnGyFXg8Sf9Jq80 d0qYnJkYvAPDWoXpzv07rMPzjOYiNUtnY6gXZ23WS596K3wUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONygdWJNHi5jaghoPvv+2ycL8YTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjgyYzYxNzUtNTI5Ni0z MjRmLWFkYTEtOGMyNWFlMzliNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+qQos3XB0Xrm2tsR/O+ZrzATbZJ/cjkczWKe5vxwUlfslnb0J+B27c OFVZHr5Zs6O3PJ4HUAky6ZnXlD7cOj3h7wVMddhnippw/rVyhNd18CuWhMbYGRkd mM8uinMfcpVPG85efsbxnY95ObIQeaoh/elDVt5INdhwo7f96yI8a+hPXKY6tyn1 lE1lBEm6YAof2SSZO8QxFyj5GmPxL7+v6ZMpFm1Xani+z3KWXFwrdDV3hN9C7D5A zxTPH8EEBp8ktoJqYZqNRI52ksDK7SfUzVQVAx3E4KHIfxMUg/vdOwXzLFVdcRbN XIpscax+NpRcx8Nqph34zVaVzTu8Va4= -----END CERTIFICATE-----Generated at Tue Nov 25 14:50:41 2025 by rpki-client