This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3a4d2692-2e92-3de8-ac2a-9743752e13e6.roa File: 3a4d2692-2e92-3de8-ac2a-9743752e13e6.roa (raw, json) Hash identifier: wsfgUXywdB8RgTFKi+1KrVlvMpTg6n3GwTUporTeuFQ= Subject key identifier: 2B:7E:DD:27:25:DD:FC:99:7F:15:CF:31:41:1E:1E:1E:CD:92:C1:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BF5D993A0ECD1B07FB5FAB480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3a4d2692-2e92-3de8-ac2a-9743752e13e6.roa Signing time: Sun 23 Nov 2025 23:59:08 +0000 ROA not before: Sun 23 Nov 2025 23:59:08 +0000 ROA not after: Sat 21 Feb 2026 23:59:08 +0000 asID: 54252 IP address blocks: 72.244.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f5:d9:93:a0:ec:d1:b0:7f:b5:fa:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 23 23:59:08 2025 GMT Not After : Feb 21 23:59:08 2026 GMT Subject: CN=99775b29-fe84-48c9-b22c-2f4f1601b6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:22:a1:65:a7:18:ae:5e:d6:cc:dc:da:52:6c: 5f:8b:f5:49:72:92:ac:b9:d0:b1:f1:ff:9a:89:23: 2f:47:4b:e0:79:a8:32:2c:e8:75:de:31:2b:bf:8d: 20:09:ac:fd:a9:8b:81:37:73:47:c2:4d:54:16:c2: 84:86:bb:12:24:2e:b0:e6:c5:c7:37:ee:cf:b8:c8: d7:8a:a0:c5:04:7f:27:2a:c8:17:27:cc:63:d6:d4: d0:92:e6:e0:bc:7d:28:a5:84:44:c8:3a:6b:0b:23: c0:f1:36:2c:e6:cf:3b:af:a3:ac:91:9b:1f:b8:0e: 60:e9:70:80:8a:64:eb:99:82:7e:29:fc:ea:e4:36: 5c:c7:36:7a:7a:1b:4a:ce:75:65:54:2f:d6:c4:14: e7:35:82:5e:da:85:b9:20:15:16:ef:2d:8e:0f:8e: ee:47:7d:1b:15:b3:2d:9e:5a:98:c2:52:f1:61:64: c8:ee:48:ac:c1:16:f0:c4:bd:64:00:72:86:b2:6c: bb:6d:cd:cd:0d:dc:b6:3f:43:a2:ac:ef:4f:96:48: 69:e6:6c:45:49:dc:4f:d3:c5:3a:a7:05:2b:80:52: 35:f2:4f:6b:a4:f6:7e:b4:9a:4e:ed:64:1c:71:d4: 2c:6d:f6:c3:f5:8a:f9:b4:6a:ba:94:34:24:6c:3f: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7E:DD:27:25:DD:FC:99:7F:15:CF:31:41:1E:1E:1E:CD:92:C1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3a4d2692-2e92-3de8-ac2a-9743752e13e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:21:ea:46:fe:34:dc:8c:70:94:06:ec:bb:63:1d:70:4f:33: fc:d5:4f:1a:dd:b9:ae:b7:5f:30:94:00:e6:cb:ab:48:dc:ea: 2d:5f:3e:a2:97:5a:9f:d1:37:04:75:7d:08:71:da:ca:5f:18: 6a:e2:37:d0:b3:b3:91:4d:75:86:b7:81:16:38:0c:07:ca:35: cc:38:f5:38:fa:e4:e8:67:25:65:d4:ec:8d:8a:d6:5c:7b:bc: 27:7b:b0:29:db:b6:61:e0:fe:b8:38:d9:00:5e:31:ae:e9:00: 14:8b:6a:4c:a3:a5:3c:df:a9:c7:cc:20:c7:65:05:bb:67:2d: e2:4b:f2:c2:ff:28:e7:10:36:0b:31:7f:43:b4:a2:00:00:5f: 83:ae:67:39:e0:8a:89:3d:b6:6a:8a:89:8a:b2:34:e2:e7:9b: 2c:5e:92:8f:88:e5:77:f8:40:ba:27:e6:e4:e0:32:ac:5d:82: 56:01:27:9f:43:05:2a:15:20:3f:d9:8b:7d:44:1c:fb:51:8f: b1:98:ff:eb:75:bf:c0:cd:62:ec:76:49:76:98:57:d4:16:34: 9b:97:37:19:aa:8b:9e:0c:67:f3:9a:19:3a:94:c1:09:18:8b: 67:a8:2c:ea:0c:70:c8:47:2f:23:95:dd:47:e9:4d:50:f9:4d: 28:b1:6f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv12ZOg7NGwf7X6tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyMzIzNTkwOFoXDTI2MDIyMTIzNTkwOFowLzEtMCsGA1UEAxMk OTk3NzViMjktZmU4NC00OGM5LWIyMmMtMmY0ZjE2MDFiNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiKhZacYrl7WzNzaUmxfi/VJcpKsudCx8f+a iSMvR0vgeagyLOh13jErv40gCaz9qYuBN3NHwk1UFsKEhrsSJC6w5sXHN+7PuMjX iqDFBH8nKsgXJ8xj1tTQkubgvH0opYREyDprCyPA8TYs5s87r6OskZsfuA5g6XCA imTrmYJ+Kfzq5DZcxzZ6ehtKznVlVC/WxBTnNYJe2oW5IBUW7y2OD47uR30bFbMt nlqYwlLxYWTI7kiswRbwxL1kAHKGsmy7bc3NDdy2P0OirO9Plkhp5mxFSdxP08U6 pwUrgFI18k9rpPZ+tJpO7WQccdQsbfbD9Yr5tGq6lDQkbD/AfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt+3Scl3fyZfxXPMUEeHh7NksFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2E0ZDI2OTItMmU5Mi0z ZGU4LWFjMmEtOTc0Mzc1MmUxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUh6kb+NNyMcJQG7LtjHXBPM/zVTxrdua63XzCUAObLq0jc6i1fPqKX Wp/RNwR1fQhx2spfGGriN9Czs5FNdYa3gRY4DAfKNcw49Tj65OhnJWXU7I2K1lx7 vCd7sCnbtmHg/rg42QBeMa7pABSLakyjpTzfqcfMIMdlBbtnLeJL8sL/KOcQNgsx f0O0ogAAX4OuZzngiok9tmqKiYqyNOLnmyxeko+I5Xf4QLon5uTgMqxdglYBJ59D BSoVID/Zi31EHPtRj7GY/+t1v8DNYux2SXaYV9QWNJuXNxmqi54MZ/OaGTqUwQkY i2eoLOoMcMhHLyOV3UfpTVD5TSixb2o= -----END CERTIFICATE-----Generated at Tue Nov 25 14:49:10 2025 by rpki-client