This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d15f53cd-8813-374d-a306-2e6e8ef1eba3.roa File: d15f53cd-8813-374d-a306-2e6e8ef1eba3.roa (raw, json) Hash identifier: xh1jrnHjHo65DCcE5rCCd9b4dedfmzYTHyAhVFgMekg= Subject key identifier: 83:2A:88:A5:CB:BF:82:0C:8F:27:3F:FC:E2:63:77:69:22:6D:5E:93 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C4570CF82C09150040B219180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d15f53cd-8813-374d-a306-2e6e8ef1eba3.roa Signing time: Mon 22 Dec 2025 12:12:43 +0000 ROA not before: Mon 22 Dec 2025 12:12:43 +0000 ROA not after: Sun 22 Mar 2026 11:12:43 +0000 asID: 834 IP address blocks: 72.244.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:70:cf:82:c0:91:50:04:0b:21:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 22 12:12:43 2025 GMT Not After : Mar 22 11:12:43 2026 GMT Subject: CN=a607109a-9ff6-4430-8259-f12acb20cb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:bd:4b:a4:9b:67:62:81:e2:0a:52:c9:43: 7d:c7:17:d3:7e:a6:d2:01:b3:69:2e:fe:12:42:d3: db:3e:79:b0:0a:c3:03:51:04:e8:f5:6e:27:79:38: 8e:d0:2c:31:fe:45:ec:0f:38:44:67:42:1c:f3:12: d4:52:5e:25:28:58:d1:87:b8:b2:f1:44:34:73:0d: ba:9e:47:5e:68:a8:09:b2:09:f7:09:30:37:2b:d0: 0c:83:67:a3:86:9e:ce:5c:c7:23:54:6d:cd:de:cd: 00:1e:47:c7:5d:08:67:d5:2c:59:26:9f:ba:d0:04: 80:2f:4a:1f:e3:d2:4c:63:b7:00:71:c7:42:07:05: f8:a0:81:6c:2f:11:01:9f:04:bb:51:e7:5d:a0:02: 98:36:55:c7:da:d8:00:1c:7f:f8:7c:45:97:ed:38: 85:02:cb:72:f6:1d:6e:a9:d8:13:0d:9f:01:b9:f8: 37:55:47:9a:6b:11:d6:7a:47:58:51:9e:06:00:69: 4f:f8:0e:b5:92:49:bc:fd:5f:0b:3d:04:1b:1c:02: b0:ff:6b:21:9d:52:02:8a:0c:36:6d:eb:fd:35:2e: 53:11:7c:a9:1e:88:a9:61:03:49:95:f8:f8:39:69: 97:d7:a8:0d:a9:a3:ba:45:67:27:a5:46:01:f2:39: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2A:88:A5:CB:BF:82:0C:8F:27:3F:FC:E2:63:77:69:22:6D:5E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d15f53cd-8813-374d-a306-2e6e8ef1eba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2c:68:91:cf:ce:82:c9:01:e7:e9:e9:c1:03:b9:24:2e:dd: 66:64:19:0a:75:78:13:1a:66:51:b8:d7:d4:4b:7b:83:fe:0e: ec:31:1c:4d:07:75:91:64:dd:a6:ae:73:93:f1:c4:50:48:28: 27:fd:cf:a0:8d:fb:03:e9:5c:a6:51:74:df:a0:34:83:4b:dd: fb:ce:68:cb:3f:1c:a9:19:03:b9:47:0a:5d:bf:19:61:cc:ba: a7:43:be:f8:66:84:08:17:00:23:22:42:8b:d0:39:ba:cf:53: bc:e5:97:d6:f8:ae:49:54:73:d5:99:90:bc:51:f4:22:4c:73: 39:30:d1:d7:05:a4:f2:56:0f:a8:5d:70:7f:83:df:7b:de:35: 61:e3:69:41:06:2d:57:71:1e:48:ea:25:24:d8:8e:6e:08:c4: d5:54:44:55:71:c0:46:9c:da:94:0c:bf:e4:d6:42:a9:b5:21: 03:e4:a2:ec:cf:b4:47:09:ea:3f:e7:55:58:c4:d2:ce:b9:4e: 23:4e:c6:77:92:8f:ea:c5:1d:3d:c7:3c:fa:81:2e:fb:54:71: bd:1b:46:b2:b6:52:04:c1:2f:eb:42:c1:d4:0c:6d:7c:cc:47: d6:87:4b:63:62:05:0b:44:2c:89:d5:54:5f:6f:01:0a:53:6e: b0:00:bc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFcM+CwJFQBAshkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyMjEyMTI0M1oXDTI2MDMyMjExMTI0M1owLzEtMCsGA1UEAxMk YTYwNzEwOWEtOWZmNi00NDMwLTgyNTktZjEyYWNiMjBjYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuq9S6SbZ2KB4gpSyUN9xxfTfqbSAbNpLv4S QtPbPnmwCsMDUQTo9W4neTiO0Cwx/kXsDzhEZ0Ic8xLUUl4lKFjRh7iy8UQ0cw26 nkdeaKgJsgn3CTA3K9AMg2ejhp7OXMcjVG3N3s0AHkfHXQhn1SxZJp+60ASAL0of 49JMY7cAccdCBwX4oIFsLxEBnwS7UeddoAKYNlXH2tgAHH/4fEWX7TiFAsty9h1u qdgTDZ8Bufg3VUeaaxHWekdYUZ4GAGlP+A61kkm8/V8LPQQbHAKw/2shnVICigw2 bev9NS5TEXypHoipYQNJlfj4OWmX16gNqaO6RWcnpUYB8jkWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMqiKXLv4IMjyc//OJjd2kibV6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDE1ZjUzY2QtODgxMy0z NzRkLWEzMDYtMmU2ZThlZjFlYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAsaJHPzoLJAefp6cEDuSQu3WZkGQp1eBMaZlG419RLe4P+DuwxHE0H dZFk3aauc5PxxFBIKCf9z6CN+wPpXKZRdN+gNINL3fvOaMs/HKkZA7lHCl2/GWHM uqdDvvhmhAgXACMiQovQObrPU7zll9b4rklUc9WZkLxR9CJMczkw0dcFpPJWD6hd cH+D33veNWHjaUEGLVdxHkjqJSTYjm4IxNVURFVxwEac2pQMv+TWQqm1IQPkouzP tEcJ6j/nVVjE0s65TiNOxneSj+rFHT3HPPqBLvtUcb0bRrK2UgTBL+tCwdQMbXzM R9aHS2NiBQtELInVVF9vAQpTbrAAvCI= -----END CERTIFICATE-----Generated at Tue Dec 30 21:09:39 2025 by rpki-client