This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa File: 4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa (raw, json) Hash identifier: G0qupR3xp8BvtzC9MB5E2FodYVYAay86t1cki/JXQo4= Subject key identifier: A3:BD:70:47:77:B6:0F:0D:23:94:CA:EA:2C:0E:04:B1:04:41:A3:23 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584C4B3BEA50A0FC9CB0AC37A740 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 14618 IP address blocks: 72.0.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:ea:50:a0:fc:9c:b0:ac:37:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=8d8217a7-f65c-4093-8ce4-523e4085a07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:00:4f:e5:9b:db:e1:9f:86:99:d9:e4:81: 72:3f:79:50:44:70:66:b0:08:8b:b6:65:6e:98:7c: 98:e3:da:b5:65:5d:2b:a6:9e:83:ff:a8:bd:67:c9: 03:f2:49:9f:db:9d:2f:6e:bc:2e:fc:96:b4:ee:76: c7:d1:c9:73:8b:a2:b4:32:e2:5c:c2:4d:42:4a:9a: 0b:f1:34:33:ef:5e:39:fb:0b:78:d6:f2:b6:cc:37: 5b:e3:7a:47:e4:ee:0f:34:32:73:a3:12:5d:14:ac: f1:99:86:49:e8:68:57:b0:ca:ec:96:4f:fc:a7:65: 22:96:9d:24:6e:88:f1:cf:17:f3:b8:98:8b:75:81: 38:45:2a:77:34:99:24:84:5f:98:06:07:f4:eb:20: a7:1b:68:fe:a8:6f:d8:d1:93:67:2a:1d:57:9b:af: dc:6a:01:b5:ea:43:37:a2:e0:8d:4b:70:cf:3b:ab: f3:e6:53:5f:95:14:81:e0:37:d3:15:7f:e8:08:5c: be:2a:5e:a2:91:eb:2a:3b:c0:f1:4b:e1:38:8a:e1: 05:a3:8d:2a:40:fb:00:41:b0:bf:8d:d0:82:45:1b: 99:ee:f8:62:cc:b4:ec:63:9a:bf:5f:7f:9c:79:cd: 70:00:39:25:19:c5:c0:8c:49:fe:fc:90:15:ab:0b: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:70:47:77:B6:0F:0D:23:94:CA:EA:2C:0E:04:B1:04:41:A3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:98:34:47:bf:0f:96:cf:e4:55:89:c8:de:8b:04:e2:93:b2: ab:c3:1c:21:03:66:74:c0:67:9d:e4:85:9f:17:21:33:2b:e1: 0f:59:f2:f7:3e:54:ee:9d:89:dc:3b:83:41:44:eb:50:52:6c: b2:ac:4b:65:ce:d7:05:ea:7f:50:95:f4:fb:c7:ea:f3:1b:c3: 71:08:7a:08:49:90:80:b7:4c:aa:e2:2f:fb:3e:70:85:a6:fb: e0:b8:56:d2:90:f8:96:e9:90:78:54:fe:65:84:fc:fd:ec:70: 0b:f7:72:e2:4c:7c:f7:45:dc:53:61:32:7b:4f:9a:62:7b:3e: 03:65:78:74:30:a7:ca:2f:89:1f:e2:5b:dc:f5:09:72:67:e7: ad:b6:02:99:f9:46:d4:b2:f9:76:f3:a2:06:29:b1:c5:f3:4b: 0d:db:78:ed:25:a5:1f:ab:a8:03:da:22:58:64:13:c8:87:66: fb:e9:35:76:51:f6:7b:e0:5c:50:51:8a:00:86:56:6f:80:cb: 4e:10:ab:58:27:db:eb:56:c6:7f:3e:d1:56:96:11:e7:fe:e2: 21:ad:69:93:89:c0:d9:6b:2a:f8:7d:4a:d3:35:67:bd:ae:34: e2:bd:bb:7f:e5:e9:ef:69:42:81:f6:bd:f2:3d:8b:52:dd:ce: 8d:f2:9c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLO+pQoPycsKw3p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk OGQ4MjE3YTctZjY1Yy00MDkzLThjZTQtNTIzZTQwODVhMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ0AT+Wb2+GfhpnZ5IFyP3lQRHBmsAiLtmVu mHyY49q1ZV0rpp6D/6i9Z8kD8kmf250vbrwu/Ja07nbH0clzi6K0MuJcwk1CSpoL 8TQz7145+wt41vK2zDdb43pH5O4PNDJzoxJdFKzxmYZJ6GhXsMrslk/8p2Uilp0k bojxzxfzuJiLdYE4RSp3NJkkhF+YBgf06yCnG2j+qG/Y0ZNnKh1Xm6/cagG16kM3 ouCNS3DPO6vz5lNflRSB4DfTFX/oCFy+Kl6ikesqO8DxS+E4iuEFo40qQPsAQbC/ jdCCRRuZ7vhizLTsY5q/X3+cec1wADklGcXAjEn+/JAVqwsTHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO9cEd3tg8NI5TK6iwOBLEEQaMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvNGEwNzc3YjctNDY4Ni0z NTMwLTg5YzItOGRmYThmMmViMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCYNEe/D5bP5FWJyN6LBOKTsqvDHCEDZnTAZ53khZ8XITMr4Q9Z8vc+ VO6didw7g0FE61BSbLKsS2XO1wXqf1CV9PvH6vMbw3EIeghJkIC3TKriL/s+cIWm ++C4VtKQ+JbpkHhU/mWE/P3scAv3cuJMfPdF3FNhMntPmmJ7PgNleHQwp8oviR/i W9z1CXJn5622Apn5RtSy+XbzogYpscXzSw3beO0lpR+rqAPaIlhkE8iHZvvpNXZR 9nvgXFBRigCGVm+Ay04Qq1gn2+tWxn8+0VaWEef+4iGtaZOJwNlrKvh9StM1Z72u NOK9u3/l6e9pQoH2vfI9i1Ldzo3ynPU= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:49 2026 by rpki-client