This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99d6813a-def8-356b-a420-5b6dea6655a9.roa File: 99d6813a-def8-356b-a420-5b6dea6655a9.roa (raw, json) Hash identifier: TjlEcZa5HylATPu69mdiiQOp1GNSAtXF4wWXXKS5rLY= Subject key identifier: 42:91:F4:F2:96:30:F0:C0:77:2A:DE:6A:76:D9:00:80:F2:22:90:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7C56B9C6C5934B0EC9040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99d6813a-def8-356b-a420-5b6dea6655a9.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.243.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:c5:6b:9c:6c:59:34:b0:ec:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=cb0f3c44-cbcf-4aef-b1d4-49e266d9e8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:72:f0:70:d4:d7:5f:82:80:45:40:ed:de: ed:52:f9:28:c5:eb:86:f1:e3:bc:df:c4:34:9a:4c: 8f:a8:3e:64:a4:01:85:d1:0b:33:04:4f:7a:63:7b: 7c:6c:e5:8b:85:41:04:a2:4b:73:35:8c:16:7b:5c: 71:40:8e:b8:6a:09:c7:b2:ea:e0:01:4f:eb:6c:db: a4:8a:1c:26:5f:6e:02:2e:4c:70:9f:d6:7d:9f:1e: 1c:be:f1:5a:19:c6:9f:b9:df:d8:d5:c8:b0:fd:34: 17:cf:03:1b:d5:3a:f2:f7:70:7a:f8:96:69:13:e1: e7:69:68:80:68:ba:ce:0a:37:a9:40:dd:40:5f:bd: 1f:88:09:b9:51:54:a6:82:c1:6c:ac:31:26:5c:8d: ee:38:1d:9c:d4:6e:f9:bb:49:94:ee:e2:ef:ad:d2: e5:8b:72:58:b1:db:e9:27:89:ed:99:d7:71:a2:44: 73:a9:62:06:a8:91:e9:19:b9:8e:47:a2:15:d9:11: b0:4c:18:e8:36:9e:25:01:d4:84:03:80:28:53:2f: c7:68:79:47:4f:c8:80:9d:0d:eb:3b:b1:03:d0:18: 9b:92:14:8f:89:7a:49:74:b1:a8:99:2a:3a:88:b1: 89:bf:73:6d:98:61:23:80:a9:aa:2c:ba:f2:81:0a: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:F4:F2:96:30:F0:C0:77:2A:DE:6A:76:D9:00:80:F2:22:90:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99d6813a-def8-356b-a420-5b6dea6655a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b4:33:0e:f8:3a:d3:12:e0:39:6b:95:e8:51:56:8c:54:43: 1c:12:db:9d:c3:7e:fe:98:63:da:35:12:16:8f:ea:9b:29:b6: a1:e2:1b:16:9a:8a:c9:c9:d6:0a:0f:1d:25:01:7c:94:42:35: 37:bf:1d:80:ce:b7:0d:4f:8d:d7:9d:f9:fd:39:f8:d0:45:24: ec:05:5c:2f:de:93:d7:a3:c1:9e:b0:a0:86:94:46:86:79:e3: 23:b2:d9:fe:0e:31:67:dd:38:a8:c5:20:4e:a1:f4:bd:62:78: 94:50:2f:19:4a:91:58:53:61:09:4f:fa:8e:50:00:64:f4:66: 17:09:3d:22:2f:65:dc:d3:05:9c:77:4f:5f:8f:3a:e6:f2:fb: a1:ad:c7:b6:a2:3f:32:46:d4:60:10:da:b8:d5:a8:99:0d:8a: e8:0a:23:70:12:f0:31:dc:d6:bb:c1:44:08:c9:14:44:5d:46: 5f:78:c0:25:8a:7c:73:a6:a0:83:d3:ee:7a:37:56:85:70:48: ff:e0:2e:bd:82:50:3f:93:5d:f2:71:56:31:f4:0b:28:17:74: 84:a8:86:96:1b:b3:58:07:2c:4c:15:04:35:82:26:86:55:6b: 04:3a:0d:65:d1:8d:06:d3:df:18:47:60:77:ca:25:e4:75:58: d2:ce:49:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp8VrnGxZNLDskEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Y2IwZjNjNDQtY2JjZi00YWVmLWIxZDQtNDllMjY2ZDllOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjFy8HDU11+CgEVA7d7tUvkoxeuG8eO838Q0 mkyPqD5kpAGF0QszBE96Y3t8bOWLhUEEoktzNYwWe1xxQI64agnHsurgAU/rbNuk ihwmX24CLkxwn9Z9nx4cvvFaGcafud/Y1ciw/TQXzwMb1Try93B6+JZpE+HnaWiA aLrOCjepQN1AX70fiAm5UVSmgsFsrDEmXI3uOB2c1G75u0mU7uLvrdLli3JYsdvp J4ntmddxokRzqWIGqJHpGbmOR6IV2RGwTBjoNp4lAdSEA4AoUy/HaHlHT8iAnQ3r O7ED0BibkhSPiXpJdLGomSo6iLGJv3NtmGEjgKmqLLrygQoO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKR9PKWMPDAdyreanbZAIDyIpAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTlkNjgxM2EtZGVmOC0z NTZiLWE0MjAtNWI2ZGVhNjY1NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq0Mw74OtMS4DlrlehRVoxUQxwS253Dfv6YY9o1EhaP6psptqHiGxaa isnJ1goPHSUBfJRCNTe/HYDOtw1Pjded+f05+NBFJOwFXC/ek9ejwZ6woIaURoZ5 4yOy2f4OMWfdOKjFIE6h9L1ieJRQLxlKkVhTYQlP+o5QAGT0ZhcJPSIvZdzTBZx3 T1+POuby+6Gtx7aiPzJG1GAQ2rjVqJkNiugKI3AS8DHc1rvBRAjJFERdRl94wCWK fHOmoIPT7no3VoVwSP/gLr2CUD+TXfJxVjH0CygXdISohpYbs1gHLEwVBDWCJoZV awQ6DWXRjQbT3xhHYHfKJeR1WNLOSZg= -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:15 2025 by rpki-client