This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa File: aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa (raw, json) Hash identifier: h9b0Yh5xcHjzOSIIOiCqsxfTqNzWnGSFPB7K9CdgtXw= Subject key identifier: 48:90:02:92:36:01:95:49:EE:58:EE:00:0B:DA:4B:DB:D1:91:C2:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A77398DAAAF59139B34900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:73:98:da:aa:f5:91:39:b3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=80cd79c7-0718-498f-be98-d274d0c7bba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:c7:e1:f7:fd:36:ac:7d:71:57:91:ca:dc: 28:d2:fc:cd:2d:85:5c:7f:03:1b:ae:6e:60:da:fb: b0:44:57:b1:2f:45:65:46:d8:3f:7d:1e:37:e9:08: f9:c4:7f:40:57:09:b2:91:80:91:67:b6:14:f4:bd: 84:33:7d:a2:c4:bf:8a:bc:df:9f:e4:39:10:64:97: 83:b2:fa:45:b0:91:b1:2d:ca:47:a1:f7:e2:d9:a2: 7f:19:18:28:88:83:fd:66:8d:71:d7:86:28:ca:8e: 5c:5b:db:94:29:f9:68:8b:33:d0:7e:bd:db:df:5f: 18:61:a9:d9:ac:ce:48:12:1f:72:22:81:bf:63:f6: b8:53:0f:3f:64:0e:b6:4f:1f:fe:7d:e1:d6:17:8f: 65:ff:5c:f5:37:99:ec:e7:e9:2b:1d:ad:bd:f9:63: c9:d8:2b:5f:e5:17:b3:ab:1f:c3:aa:29:26:99:dc: 8d:71:b2:d4:8e:ad:b1:5f:db:5d:bb:11:72:84:8c: 72:0b:d5:10:f1:68:88:3e:8d:f4:19:7e:53:21:b1: 04:36:71:52:65:1d:45:54:a9:bc:1a:33:1e:c3:a2: 60:40:92:3e:75:6c:e2:a3:5b:df:8a:ff:49:c5:d9: b7:ec:3e:a7:50:6d:d6:60:be:48:62:7b:e7:b1:92: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:90:02:92:36:01:95:49:EE:58:EE:00:0B:DA:4B:DB:D1:91:C2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:15:25:1b:3a:d6:31:b7:5e:b7:f7:07:5f:16:8c:e3:67:d5: 0a:3d:af:41:c4:f2:8c:a9:48:23:64:5a:4e:a0:e7:3e:79:fc: 44:e7:e7:1a:23:48:df:79:a4:f0:28:82:d3:8c:ac:ad:3f:f6: 81:f6:8d:18:02:2b:5f:a7:67:9c:bf:8f:7b:42:66:b5:48:2d: 40:26:45:dd:9c:b0:e9:e1:8a:c8:b2:0f:56:eb:58:a6:a2:8d: 47:d8:f4:1f:a2:61:0f:ac:d8:58:d7:b4:74:15:bd:71:01:20: a0:b9:0f:81:5b:ae:63:bf:cc:2c:c1:64:a0:cf:07:55:2d:c1: 70:d4:a2:0a:a9:4c:46:42:8c:0f:e0:c5:e1:30:66:c8:43:42: 63:f0:88:5c:0e:94:ec:6a:b9:44:2b:ec:2f:12:4a:2d:5a:63: c2:20:92:2a:01:33:de:a2:ac:bf:d3:16:d5:b0:c3:05:2d:f9: 7e:ef:93:99:51:24:f1:fc:53:98:45:03:28:00:15:42:10:7f: 4e:62:98:16:78:2e:92:9f:d7:ca:89:c4:b4:fb:47:d7:5e:66: 4a:6e:fa:9c:d3:28:0b:ed:9c:24:5d:c5:91:7f:2b:76:87:42: a7:01:e7:4a:ba:4b:6f:0b:bc:05:c2:b7:b2:18:94:3b:f2:82: de:62:b7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp3OY2qr1kTmzSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ODBjZDc5YzctMDcxOC00OThmLWJlOTgtZDI3NGQwYzdiYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0unH4ff9Nqx9cVeRytwo0vzNLYVcfwMbrm5g 2vuwRFexL0VlRtg/fR436Qj5xH9AVwmykYCRZ7YU9L2EM32ixL+KvN+f5DkQZJeD svpFsJGxLcpHoffi2aJ/GRgoiIP9Zo1x14Yoyo5cW9uUKfloizPQfr3b318YYanZ rM5IEh9yIoG/Y/a4Uw8/ZA62Tx/+feHWF49l/1z1N5ns5+krHa29+WPJ2Ctf5Rez qx/DqikmmdyNcbLUjq2xX9tduxFyhIxyC9UQ8WiIPo30GX5TIbEENnFSZR1FVKm8 GjMew6JgQJI+dWzio1vfiv9Jxdm37D6nUG3WYL5IYnvnsZLbzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiQApI2AZVJ7ljuAAvaS9vRkcLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE4YjlhNTctNWI2MC0z NGJiLWI5MWUtOGMyYTk5YWMwY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQVJRs61jG3Xrf3B18WjONn1Qo9r0HE8oypSCNkWk6g5z55/ETn5xoj SN95pPAogtOMrK0/9oH2jRgCK1+nZ5y/j3tCZrVILUAmRd2csOnhisiyD1brWKai jUfY9B+iYQ+s2FjXtHQVvXEBIKC5D4FbrmO/zCzBZKDPB1UtwXDUogqpTEZCjA/g xeEwZshDQmPwiFwOlOxquUQr7C8SSi1aY8IgkioBM96irL/TFtWwwwUt+X7vk5lR JPH8U5hFAygAFUIQf05imBZ4LpKf18qJxLT7R9deZkpu+pzTKAvtnCRdxZF/K3aH QqcB50q6S28LvAXCt7IYlDvygt5itx0= -----END CERTIFICATE-----Generated at Wed Dec 24 18:08:46 2025 by rpki-client