This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa File: 321d34a2-ba6d-30ec-8987-e388030f57a3.roa (raw, json) Hash identifier: pFGEaVv+BP/DAXvm0EcWo8+nmlW95r0TW5igtDqcocY= Subject key identifier: 01:52:15:A9:18:59:3F:49:A5:59:37:51:40:F3:FB:2F:67:B9:F3:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A70E020F233F64C6CB7E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.243.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:0e:02:0f:23:3f:64:c6:cb:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=aa89e53a-c897-43f9-970d-a5138b291f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:72:57:73:3b:4e:a5:d6:28:53:8e:65:8d:2c: cd:25:f8:13:ca:ed:07:18:69:b8:c9:b7:21:0a:2c: 62:a0:49:9d:2e:b2:d0:a9:3b:c5:58:6f:6e:db:09: 1f:45:1c:38:fa:27:f5:c3:fb:0a:b2:17:83:5f:f7: 3a:18:57:45:0b:4a:42:7f:f7:f6:a2:54:8b:15:00: 6e:c3:7b:94:48:a7:1a:51:79:92:a8:d8:73:21:d1: 83:37:64:16:56:de:e0:0b:93:8f:6c:82:18:ff:86: f0:ae:6e:ad:cd:63:c0:e2:06:08:16:93:c6:3f:e7: 8a:0a:82:45:f7:af:07:78:3c:13:e0:a6:16:6e:59: fa:6c:8d:47:24:d0:5e:44:b9:c9:4e:45:95:74:61: ba:82:70:0b:2a:bb:39:4e:eb:49:6d:2d:38:e4:b4: 57:eb:de:13:de:f9:14:b7:40:e0:eb:7f:c2:80:aa: 25:f2:eb:b7:7d:15:20:a6:f9:ad:63:b0:5b:70:f8: 57:13:64:45:f9:0d:63:bf:55:fa:b8:e2:8f:4d:7f: 4d:0b:f1:3e:0d:a3:6d:d5:80:51:85:a2:9d:63:04: b7:93:99:f5:54:3f:43:89:a5:80:2e:42:d8:e4:d0: 6d:62:d0:c1:82:29:e9:b4:b5:b1:e6:e4:14:d0:0d: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:15:A9:18:59:3F:49:A5:59:37:51:40:F3:FB:2F:67:B9:F3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a6:6f:56:60:61:b6:62:97:9d:59:28:29:9b:f7:20:68:16: be:0e:81:bb:a1:7b:0b:86:86:1d:ad:e7:1a:69:6f:fa:5b:15: 6b:2e:c1:52:c2:79:a9:b9:8f:d7:d5:8f:54:fa:29:9b:2d:d3: c7:41:fb:2e:fc:ce:c4:2c:a0:7d:10:aa:26:5b:f6:22:20:5a: 46:c7:18:c1:a0:66:f7:53:80:04:68:cb:f1:e6:1a:04:1e:03: d2:a9:9a:de:6c:95:cd:e4:da:9d:9b:e1:ba:55:b6:3e:f1:3a: d4:75:fc:b9:e2:09:0d:a3:18:3f:cb:ea:c2:91:75:ee:0c:d7: 40:58:2c:51:98:9e:b1:ba:06:bd:22:34:c4:f4:38:db:80:31: 73:2f:d0:44:61:40:37:1d:d6:b6:29:20:6c:8e:a5:68:9b:68: d2:c2:96:cb:7e:41:53:5c:68:86:b9:cb:dc:13:ec:87:7f:11: 6b:0f:b2:7a:e0:2a:e9:eb:49:b6:bb:ab:94:cd:a9:95:5d:9c: de:07:45:22:73:cd:69:27:19:d2:c2:07:53:09:af:11:23:38: ee:6c:03:ca:6d:96:8c:f5:1b:4f:72:de:69:73:f1:01:13:33: f4:30:95:00:ef:43:24:7b:f1:94:3b:30:fc:f5:77:b3:f7:c2: 2b:54:c6:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpw4CDyM/ZMbLfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YWE4OWU1M2EtYzg5Ny00M2Y5LTk3MGQtYTUxMzhiMjkxZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nJXcztOpdYoU45ljSzNJfgTyu0HGGm4ybch CixioEmdLrLQqTvFWG9u2wkfRRw4+if1w/sKsheDX/c6GFdFC0pCf/f2olSLFQBu w3uUSKcaUXmSqNhzIdGDN2QWVt7gC5OPbIIY/4bwrm6tzWPA4gYIFpPGP+eKCoJF 968HeDwT4KYWbln6bI1HJNBeRLnJTkWVdGG6gnALKrs5TutJbS045LRX694T3vkU t0Dg63/CgKol8uu3fRUgpvmtY7BbcPhXE2RF+Q1jv1X6uOKPTX9NC/E+DaNt1YBR haKdYwS3k5n1VD9DiaWALkLY5NBtYtDBginptLWx5uQU0A0qbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFSFakYWT9JpVk3UUDz+y9nufNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIxZDM0YTItYmE2ZC0z MGVjLTg5ODctZTM4ODAzMGY1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKmb1ZgYbZil51ZKCmb9yBoFr4OgbuhewuGhh2t5xppb/pbFWsuwVLC eam5j9fVj1T6KZst08dB+y78zsQsoH0QqiZb9iIgWkbHGMGgZvdTgARoy/HmGgQe A9Kpmt5slc3k2p2b4bpVtj7xOtR1/LniCQ2jGD/L6sKRde4M10BYLFGYnrG6Br0i NMT0ONuAMXMv0ERhQDcd1rYpIGyOpWibaNLClst+QVNcaIa5y9wT7Id/EWsPsnrg KunrSba7q5TNqZVdnN4HRSJzzWknGdLCB1MJrxEjOO5sA8ptloz1G09y3mlz8QET M/QwlQDvQyR78ZQ7MPz1d7P3witUxts= -----END CERTIFICATE-----Generated at Wed Dec 24 10:33:03 2025 by rpki-client