This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86b222ef-b31c-3324-afc5-4f625731b428.roa File: 86b222ef-b31c-3324-afc5-4f625731b428.roa (raw, json) Hash identifier: kveYZZ4T1ew7Q/gUYXw2GzIAsPUkmuFcvTI0DSTMSnw= Subject key identifier: AC:09:5D:E2:06:D8:AC:19:17:26:5A:83:8A:F2:38:5C:CB:47:59:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFA190DFA1CB80CC8F7EF6540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86b222ef-b31c-3324-afc5-4f625731b428.roa Signing time: Tue 25 Nov 2025 12:30:16 +0000 ROA not before: Tue 25 Nov 2025 12:30:16 +0000 ROA not after: Mon 23 Feb 2026 12:30:16 +0000 asID: 397630 IP address blocks: 74.2.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:19:0d:fa:1c:b8:0c:c8:f7:ef:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 25 12:30:16 2025 GMT Not After : Feb 23 12:30:16 2026 GMT Subject: CN=b9e0110b-1bac-40d6-89d9-632a54cb8870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:5f:b4:e5:6f:fc:ee:9b:fd:03:60:18:f7: fb:64:2a:f6:ab:1e:3c:d0:99:1c:78:e4:e2:e1:e6: a5:ed:86:22:cd:db:a6:5c:ce:3e:72:9e:fb:0b:c7: 1a:c6:14:85:b6:fc:de:8d:0d:ea:e6:be:7d:7f:af: 2d:47:fc:bf:c6:42:05:73:4d:b9:1f:36:30:40:c0: 01:f8:87:de:8f:5a:08:ae:4e:80:c8:4a:b2:cd:e7: 90:8f:c5:d6:30:93:97:29:de:d0:1a:64:81:97:c5: 13:f4:ba:be:cc:92:42:00:8a:a1:da:9e:83:98:86: 36:6d:9f:53:ff:39:75:22:96:57:84:de:ae:e5:78: 4b:0f:03:38:7c:61:dd:6c:22:f2:19:77:21:df:14: 5f:10:bb:1e:94:86:07:0c:32:ee:05:e8:d7:70:d9: 16:1e:4f:ff:f1:40:8a:1e:78:d5:dd:06:2f:fd:a4: 0e:24:42:f4:89:2f:3a:aa:1c:0a:26:1d:6a:89:68: ee:8b:7e:72:1b:d6:8c:c7:2e:30:73:8a:df:f7:af: b8:0b:04:3a:91:ba:72:c0:b5:07:49:64:6e:2b:4c: 1c:db:da:04:a9:ef:ec:76:18:35:10:fc:dc:d8:a2: 55:8a:9b:71:f4:0d:af:01:5c:b3:70:57:25:b9:18: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:09:5D:E2:06:D8:AC:19:17:26:5A:83:8A:F2:38:5C:CB:47:59:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86b222ef-b31c-3324-afc5-4f625731b428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b2:75:ae:d0:28:da:11:48:64:be:ad:1c:18:8c:dc:ed:53: d9:f8:16:f7:34:78:7a:4b:4d:10:9a:e1:7e:52:7d:d4:e0:12: 1a:8a:fc:82:9d:1d:76:ac:8d:a2:06:6a:e2:98:9b:ac:73:09: 5f:f7:3a:ca:1e:52:f2:4e:38:13:e3:33:73:54:17:18:cf:66: f2:9e:20:76:70:fa:fe:57:ca:e0:f2:54:4c:37:5c:57:3a:ff: 49:4f:2e:5d:fc:79:99:f8:af:96:a3:52:19:31:2b:3c:ff:fd: 24:7e:e6:93:79:9c:b0:45:11:4e:d9:67:7f:c9:c1:89:9b:02: 20:ad:43:90:0d:b4:22:51:64:80:bd:70:02:d2:37:cc:9b:e5: df:b0:c6:17:b9:6d:6f:3f:24:ac:0d:66:3c:85:fa:6a:ae:78: 99:85:3c:1e:92:77:cb:ef:06:c7:c7:66:20:37:63:48:82:d9: 6b:a6:c6:0b:2c:a1:e6:8e:5d:49:c0:25:4f:db:12:1f:4a:1c: 3a:2d:be:d2:20:c6:f8:9f:1f:87:69:b7:0b:5e:c6:6b:74:99: e5:67:00:0c:16:b4:a3:4f:c2:e9:7e:69:ed:83:c7:1c:90:20: cb:58:9a:1d:14:b0:4e:e0:e0:1b:32:a5:be:2f:03:bd:3d:70: 1a:22:e6:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6GQ36HLgMyPfvZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNTEyMzAxNloXDTI2MDIyMzEyMzAxNlowLzEtMCsGA1UEAxMk YjllMDExMGItMWJhYy00MGQ2LTg5ZDktNjMyYTU0Y2I4ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJftOVv/O6b/QNgGPf7ZCr2qx480JkceOTi 4eal7YYizdumXM4+cp77C8caxhSFtvzejQ3q5r59f68tR/y/xkIFc025HzYwQMAB +Ifej1oIrk6AyEqyzeeQj8XWMJOXKd7QGmSBl8UT9Lq+zJJCAIqh2p6DmIY2bZ9T /zl1IpZXhN6u5XhLDwM4fGHdbCLyGXch3xRfELselIYHDDLuBejXcNkWHk//8UCK HnjV3QYv/aQOJEL0iS86qhwKJh1qiWjui35yG9aMxy4wc4rf96+4CwQ6kbpywLUH SWRuK0wc29oEqe/sdhg1EPzc2KJViptx9A2vAVyzcFcluRhbawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwJXeIG2KwZFyZag4ryOFzLR1l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODZiMjIyZWYtYjMxYy0z MzI0LWFmYzUtNGY2MjU3MzFiNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgJfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKyda7QKNoRSGS+rRwYjNztU9n4Fvc0eHpLTRCa4X5SfdTgEhqK/IKd HXasjaIGauKYm6xzCV/3OsoeUvJOOBPjM3NUFxjPZvKeIHZw+v5XyuDyVEw3XFc6 /0lPLl38eZn4r5ajUhkxKzz//SR+5pN5nLBFEU7ZZ3/JwYmbAiCtQ5ANtCJRZIC9 cALSN8yb5d+wxhe5bW8/JKwNZjyF+mqueJmFPB6Sd8vvBsfHZiA3Y0iC2Wumxgss oeaOXUnAJU/bEh9KHDotvtIgxvifH4dptwtexmt0meVnAAwWtKNPwul+ae2DxxyQ IMtYmh0UsE7g4Bsypb4vA709cBoi5rY= -----END CERTIFICATE-----Generated at Fri Dec 5 15:38:11 2025 by rpki-client