This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3af14dec-b384-381e-94db-1c8ee807f999.roa File: 3af14dec-b384-381e-94db-1c8ee807f999.roa (raw, json) Hash identifier: ONXQjIiAgib2ax8XH7+/4TXzSowkvdmMPL9UpxXUp8c= Subject key identifier: 0D:30:AB:18:35:0F:55:A5:68:CD:5C:A3:E3:25:AD:11:60:16:5F:FC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BE6B47ED59F41C9AC0C761940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3af14dec-b384-381e-94db-1c8ee807f999.roa Signing time: Tue 18 Nov 2025 13:47:18 +0000 ROA not before: Tue 18 Nov 2025 13:47:18 +0000 ROA not after: Mon 16 Feb 2026 13:47:18 +0000 asID: 834 IP address blocks: 72.244.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:b4:7e:d5:9f:41:c9:ac:0c:76:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 18 13:47:18 2025 GMT Not After : Feb 16 13:47:18 2026 GMT Subject: CN=f06362f7-25ae-4eb3-b712-126d299bfb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:7f:d5:ae:df:c1:73:12:b5:12:51:9e:b9: 1f:77:7b:71:b1:cc:f2:ec:fe:6d:a0:64:74:42:ae: 2d:a7:70:97:b2:5d:f2:9b:94:d4:84:43:a5:37:b7: a4:a0:7e:15:14:b0:4d:51:d7:f6:60:58:d3:bf:16: d6:8a:68:a8:85:18:7c:45:e7:f3:91:70:00:69:81: de:72:13:99:8f:81:95:49:b7:66:96:3c:46:fd:cb: 1c:5f:7c:38:cf:56:cf:8e:e0:52:d4:8f:d8:16:1f: 54:f1:f2:f5:ba:92:c9:ba:c9:ab:d1:0d:0c:d5:2a: de:f7:e1:5d:bb:fb:7d:cf:d8:20:ca:5b:0c:bf:9e: bd:f2:b1:d6:b2:43:46:12:f8:ae:69:a6:4c:ac:5f: a4:7a:21:6a:5a:37:15:ea:b2:28:f1:ed:f6:d3:1f: 8f:7e:4f:af:19:ab:e0:a1:c7:34:ef:ca:a7:ca:33: d0:66:a5:bc:1e:56:b8:5f:fa:81:bd:b4:de:2a:34: d3:99:0e:01:0f:98:4b:c4:6a:c8:1d:49:f9:4b:9e: bb:e9:20:47:94:3c:e8:00:ee:eb:4b:ad:ef:9e:be: d4:ee:fb:9b:40:34:27:0d:8d:54:ae:95:73:64:e8: eb:1b:cc:80:d5:13:9c:49:20:9e:72:e8:15:54:7f: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:30:AB:18:35:0F:55:A5:68:CD:5C:A3:E3:25:AD:11:60:16:5F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3af14dec-b384-381e-94db-1c8ee807f999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:28:74:59:a3:58:d7:36:7d:08:f9:a9:e0:f7:94:a3:23:9a: ca:cc:fa:4e:60:9a:f7:97:5e:cf:42:f4:37:25:4b:b1:33:46: 70:89:dd:0e:2d:3b:11:0d:1e:85:d2:b3:82:51:d9:25:21:17: 62:b3:6c:ca:8f:72:ca:ed:6e:cb:61:cc:e5:a2:f0:44:f0:e0: 20:d1:8a:30:dc:8a:ac:0a:ae:16:dd:c5:3c:a3:ef:c0:73:d3: e1:84:13:e7:07:28:cb:d8:10:6a:dc:d3:cb:30:c8:db:f1:07: 20:ea:88:f5:52:70:06:5f:38:1f:74:2f:88:31:db:9b:36:6b: c2:62:a5:2e:5a:2a:5a:5a:7a:2e:bc:f1:43:22:f9:57:b3:b0: 50:63:e2:db:50:38:db:20:c3:f1:c5:0d:d4:8b:b9:27:ac:03: e0:db:e7:30:83:08:46:fc:29:1c:79:dc:c4:1b:45:1d:07:3f: a6:0d:7c:31:2f:d7:4a:59:a4:20:e5:1d:47:00:91:7e:57:47: a5:04:db:c5:26:9a:fe:ac:3b:32:74:b4:b5:14:e9:22:80:83: d8:64:74:79:d8:f0:a5:11:ac:41:ff:32:de:ba:84:2e:14:43: 97:be:58:9c:ee:cd:b7:37:92:49:78:e1:c0:44:e0:75:05:38: 17:3b:58:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvmtH7Vn0HJrAx2GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTExODEzNDcxOFoXDTI2MDIxNjEzNDcxOFowLzEtMCsGA1UEAxMk ZjA2MzYyZjctMjVhZS00ZWIzLWI3MTItMTI2ZDI5OWJmYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnV/1a7fwXMStRJRnrkfd3txsczy7P5toGR0 Qq4tp3CXsl3ym5TUhEOlN7ekoH4VFLBNUdf2YFjTvxbWimiohRh8RefzkXAAaYHe chOZj4GVSbdmljxG/cscX3w4z1bPjuBS1I/YFh9U8fL1upLJusmr0Q0M1Sre9+Fd u/t9z9ggylsMv5698rHWskNGEviuaaZMrF+keiFqWjcV6rIo8e320x+Pfk+vGavg occ078qnyjPQZqW8Hla4X/qBvbTeKjTTmQ4BD5hLxGrIHUn5S5676SBHlDzoAO7r S63vnr7U7vubQDQnDY1UrpVzZOjrG8yA1ROcSSCecugVVH96TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0wqxg1D1WlaM1co+MlrRFgFl/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2FmMTRkZWMtYjM4NC0z ODFlLTk0ZGItMWM4ZWU4MDdmOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkodFmjWNc2fQj5qeD3lKMjmsrM+k5gmveXXs9C9DclS7EzRnCJ3Q4t OxENHoXSs4JR2SUhF2KzbMqPcsrtbsthzOWi8ETw4CDRijDciqwKrhbdxTyj78Bz 0+GEE+cHKMvYEGrc08swyNvxByDqiPVScAZfOB90L4gx25s2a8JipS5aKlpaei68 8UMi+VezsFBj4ttQONsgw/HFDdSLuSesA+Db5zCDCEb8KRx53MQbRR0HP6YNfDEv 10pZpCDlHUcAkX5XR6UE28Ummv6sOzJ0tLUU6SKAg9hkdHnY8KURrEH/Mt66hC4U Q5e+WJzuzbc3kkl44cBE4HUFOBc7WBc= -----END CERTIFICATE-----Generated at Tue Nov 25 16:14:56 2025 by rpki-client