This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa File: 72a70cba-3e79-3091-9028-5a95c5891014.roa (raw, json) Hash identifier: 1ZF6VMm6a5BMH1XwJZPbvbGgcq3zURU35UuGu6od2lE= Subject key identifier: 2C:E9:37:1A:6F:5B:68:98:31:0C:1B:DC:2D:47:0E:7B:3B:E9:D0:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7A482DA61BE674462A500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 99.197.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:a4:82:da:61:be:67:44:62:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=0c2f44fc-5183-4e03-be42-603291b93e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:d2:b5:a8:2e:cb:fb:80:89:04:8c:da:92: 28:dc:f0:9d:82:b3:d6:88:75:f4:24:ad:f8:57:9e: 6c:ca:aa:0e:02:2d:59:04:5d:0a:88:7f:fa:b2:e3: b1:80:ec:34:93:a6:3a:25:a6:67:9d:39:c1:4d:19: fa:77:ed:0a:f2:b6:3e:08:8e:5b:57:20:ad:b7:59: 1f:6c:90:1d:d6:9a:c4:c0:8a:a2:17:82:92:5b:63: 5a:89:90:5a:20:63:0a:0d:62:c8:04:bc:2c:61:a4: 95:ae:7a:75:f6:e1:84:ad:80:db:bb:ba:48:de:d4: 3a:7a:4e:d7:13:5d:f9:ef:8c:55:eb:7b:70:e2:36: 94:00:94:ef:64:c4:65:db:90:87:3f:d8:12:43:5e: 88:8b:11:d1:e5:67:11:d1:a5:42:83:7b:14:a6:8d: f1:0d:b6:54:49:a4:b0:9a:f7:50:62:12:a9:00:8f: d4:ec:2e:a1:d0:43:77:67:92:b0:6e:39:08:e2:cb: dd:ed:15:b4:a9:62:eb:72:34:82:2e:ec:05:69:45: 3e:a9:cc:60:75:11:5c:fc:7b:50:02:10:65:68:58: 59:67:95:d2:f8:bf:61:c9:d0:31:46:eb:7d:d3:77: 9e:27:4c:0d:f4:f9:80:3d:dc:a3:ba:5d:7e:79:1c: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:37:1A:6F:5B:68:98:31:0C:1B:DC:2D:47:0E:7B:3B:E9:D0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:67:64:aa:14:33:97:2f:67:b0:cb:a4:34:80:e4:65:54:fd: 9d:61:2f:73:f0:34:51:85:86:90:71:b5:42:d7:aa:eb:fa:b9: ba:24:76:10:f8:62:1c:dd:56:10:39:91:55:8f:1f:93:8e:f2: ce:e9:76:ce:62:3f:a0:80:6f:8a:3c:59:3d:a7:66:81:da:d1: f1:5d:52:8b:3c:0a:50:14:33:25:87:90:99:bf:5b:91:75:55: 2a:31:67:3d:72:30:de:24:bf:04:11:eb:86:80:a0:a3:cc:3a: 1c:2a:41:09:5e:ef:7b:1c:59:bd:e0:3e:60:49:88:92:7c:d5: 91:88:8b:83:79:69:34:d8:f4:ad:0c:b6:21:b0:04:91:cd:da: 04:1a:a4:76:e3:f3:fd:76:33:de:2e:79:a9:07:90:60:d0:6e: 6c:3d:2a:51:d9:a2:03:be:a8:7c:45:12:fa:f4:94:47:d8:ed: 15:10:75:a5:f2:3c:a3:48:74:40:82:84:20:52:8b:49:69:f0: 79:ba:71:d8:44:dc:60:bd:6a:4c:c9:4d:d9:57:23:45:78:55: 11:69:d0:43:c3:4d:ef:e8:c8:a4:04:b6:a9:51:6a:98:7d:38: 35:62:fe:80:a8:d4:2c:3d:fa:61:7f:48:04:be:06:7b:d6:79: 2f:a7:37:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp6SC2mG+Z0RipQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MGMyZjQ0ZmMtNTE4My00ZTAzLWJlNDItNjAzMjkxYjkzZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNDStaguy/uAiQSM2pIo3PCdgrPWiHX0JK34 V55syqoOAi1ZBF0KiH/6suOxgOw0k6Y6JaZnnTnBTRn6d+0K8rY+CI5bVyCtt1kf bJAd1prEwIqiF4KSW2NaiZBaIGMKDWLIBLwsYaSVrnp19uGErYDbu7pI3tQ6ek7X E13574xV63tw4jaUAJTvZMRl25CHP9gSQ16IixHR5WcR0aVCg3sUpo3xDbZUSaSw mvdQYhKpAI/U7C6h0EN3Z5KwbjkI4svd7RW0qWLrcjSCLuwFaUU+qcxgdRFc/HtQ AhBlaFhZZ5XS+L9hydAxRut903eeJ0wN9PmAPdyjul1+eRzzAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzpNxpvW2iYMQwb3C1HDns76dCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzJhNzBjYmEtM2U3OS0z MDkxLTkwMjgtNWE5NWM1ODkxMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5nZKoUM5cvZ7DLpDSA5GVU/Z1hL3PwNFGFhpBxtULXquv6ubokdhD4 YhzdVhA5kVWPH5OO8s7pds5iP6CAb4o8WT2nZoHa0fFdUos8ClAUMyWHkJm/W5F1 VSoxZz1yMN4kvwQR64aAoKPMOhwqQQle73scWb3gPmBJiJJ81ZGIi4N5aTTY9K0M tiGwBJHN2gQapHbj8/12M94ueakHkGDQbmw9KlHZogO+qHxFEvr0lEfY7RUQdaXy PKNIdECChCBSi0lp8Hm6cdhE3GC9akzJTdlXI0V4VRFp0EPDTe/oyKQEtqlRaph9 ODVi/oCo1Cw9+mF/SAS+BnvWeS+nN6k= -----END CERTIFICATE-----Generated at Thu Dec 25 07:26:01 2025 by rpki-client