This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa File: b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa (raw, json) Hash identifier: 93cfpVuEqKd2q51SPq6tadpfEIzsk2SiqdGDtCuWSoM= Subject key identifier: 08:69:FF:D8:93:74:CD:02:76:2A:EC:0B:92:7C:0B:F1:FC:2C:0E:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A776CADBEA5BD1DBB3DC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:76:ca:db:ea:5b:d1:db:b3:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=01f9181a-b1ba-43f1-a089-c5c35b7fc732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:dc:33:16:34:ec:dd:48:07:e5:3f:51:9d: bf:da:2f:0e:9b:b9:a0:cb:72:1c:b5:3a:cd:17:03: 73:d6:d6:0c:f7:5d:1f:19:ef:ca:60:0a:44:dc:a2: 9d:e1:32:a5:69:c6:49:9e:b2:22:82:b6:70:30:57: 8a:85:c0:4c:4f:24:14:7d:12:3d:e3:a8:43:58:04: 11:ec:07:fa:10:cd:eb:b4:16:82:aa:11:c5:4e:5a: 9e:c1:89:ae:52:cc:46:4e:56:71:1f:7c:b0:7e:64: 9e:d4:d4:41:7f:a4:d9:ca:02:2e:9d:09:14:5b:4f: 00:3d:4f:d1:bf:77:9d:ab:f2:e0:2b:f8:b1:80:a4: 07:01:c0:99:94:11:67:43:b7:23:76:b9:04:4e:ab: a3:b4:f3:a7:57:db:b5:e2:2a:2e:1d:9b:13:fe:4b: da:76:23:81:2c:60:48:d5:53:c5:5a:94:c2:e7:d4: d7:5a:57:ea:89:13:09:f3:4c:ae:7e:e7:05:2b:f7: 01:99:82:38:93:a1:50:40:e1:42:b5:70:74:dc:21: 7a:3a:8b:ef:d4:fc:3b:d0:25:8c:d6:de:23:f1:d1: 80:4e:27:c5:b9:e5:56:15:3d:87:8e:f3:cd:bb:b2: 81:99:e5:d0:0a:77:cc:7b:3f:e0:d5:04:8d:4f:b9: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:FF:D8:93:74:CD:02:76:2A:EC:0B:92:7C:0B:F1:FC:2C:0E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e2:ec:54:b1:31:a8:37:14:ac:20:83:af:15:f8:5f:6d:8d: 2b:b5:a2:22:af:c5:77:c9:07:8e:5a:5f:72:2f:fa:ab:8a:a5: fb:a7:33:12:9b:b4:43:73:fc:27:b1:80:b7:e9:4a:46:38:ae: 17:e2:b6:90:38:f8:65:0b:72:fc:ef:a8:34:a8:e0:92:85:ae: dc:6c:f0:a8:42:bf:7b:26:1e:a1:dc:5f:54:cb:c0:3f:00:46: 80:81:21:0e:44:7d:fd:09:65:cd:72:99:2e:03:04:3b:18:19: 35:57:32:f6:f3:51:2c:72:eb:b5:53:71:c9:f1:c5:05:45:b9: 3c:ad:43:0f:5b:83:f1:31:44:48:6a:78:81:01:c7:77:e2:30: c1:31:49:42:bb:c8:3e:d4:2c:27:90:0a:48:d6:50:2c:33:6f: b2:4d:1b:fe:7a:0f:21:63:ec:e7:a0:75:d7:91:58:9a:5e:00: ed:16:e9:ca:78:05:11:8b:58:c7:77:bc:d8:ac:e7:f3:6e:4d: 79:bf:96:0e:fe:51:29:4f:4a:0e:d7:b7:65:86:c5:e7:77:df: a7:2d:4d:04:99:bc:f5:66:a4:09:b6:8c:3f:a7:c5:5c:95:fb: db:ce:d2:18:dc:04:6e:2e:52:ad:d2:70:2a:1b:d9:19:ec:62: b0:3d:6d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp3bK2+pb0duz3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MDFmOTE4MWEtYjFiYS00M2YxLWEwODktYzVjMzViN2ZjNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IfcMxY07N1IB+U/UZ2/2i8Om7mgy3IctTrN FwNz1tYM910fGe/KYApE3KKd4TKlacZJnrIigrZwMFeKhcBMTyQUfRI946hDWAQR 7Af6EM3rtBaCqhHFTlqewYmuUsxGTlZxH3ywfmSe1NRBf6TZygIunQkUW08APU/R v3edq/LgK/ixgKQHAcCZlBFnQ7cjdrkETqujtPOnV9u14iouHZsT/kvadiOBLGBI 1VPFWpTC59TXWlfqiRMJ80yufucFK/cBmYI4k6FQQOFCtXB03CF6Oovv1Pw70CWM 1t4j8dGATifFueVWFT2HjvPNu7KBmeXQCnfMez/g1QSNT7lpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhp/9iTdM0CdirsC5J8C/H8LA5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk1ZTIyZDktMDZiMC0z NWE3LWIxNTItN2I0ZjY3NGM4Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7i7FSxMag3FKwgg68V+F9tjSu1oiKvxXfJB45aX3Iv+quKpfunMxKb tENz/CexgLfpSkY4rhfitpA4+GULcvzvqDSo4JKFrtxs8KhCv3smHqHcX1TLwD8A RoCBIQ5Eff0JZc1ymS4DBDsYGTVXMvbzUSxy67VTccnxxQVFuTytQw9bg/ExREhq eIEBx3fiMMExSUK7yD7ULCeQCkjWUCwzb7JNG/56DyFj7OegddeRWJpeAO0W6cp4 BRGLWMd3vNis5/NuTXm/lg7+USlPSg7Xt2WGxed336ctTQSZvPVmpAm2jD+nxVyV +9vO0hjcBG4uUq3ScCob2RnsYrA9bf0= -----END CERTIFICATE-----Generated at Tue Dec 23 03:44:53 2025 by rpki-client