This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa File: cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa (raw, json) Hash identifier: nynobiqWpwE50xBkhskdTVbEPpUSU08F/exhH0b0XCU= Subject key identifier: 6C:1F:C8:A7:4C:E4:FF:A6:F2:3C:B6:2F:D7:DB:1A:EE:AC:24:86:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A70362583A7E4DE48F0420 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.242.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:03:62:58:3a:7e:4d:e4:8f:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3770f950-d477-4e97-9083-6e0b51184363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:a7:da:3e:51:08:38:b9:02:e8:ff:e3:e2: ac:3d:8b:3e:68:72:bd:9f:24:22:7a:25:9a:9a:a8: fa:a6:fb:f8:5a:5a:7a:d0:bf:86:15:9f:9a:74:1c: 70:48:ad:1b:5d:ab:f9:7a:5f:a1:6d:c2:72:f5:11: cd:fb:73:d7:b9:15:51:22:73:48:cc:42:a1:2d:2a: 16:dd:1e:01:7c:cf:a7:53:1e:f9:76:af:de:15:8b: a8:40:51:c6:69:dc:54:6c:8c:f2:fd:93:4b:4e:34: 67:b2:1e:0d:1b:5c:12:66:fd:d3:4c:d9:75:c0:dc: d0:30:16:4a:c3:e0:06:a6:fc:2c:cd:11:98:b7:63: 0c:d3:9c:5e:17:12:3e:0a:ed:c9:6e:f5:ad:26:b8: ce:b3:ae:66:80:03:9e:eb:9b:d7:7a:6d:6c:21:27: b5:a1:88:c8:4c:bf:a4:be:81:9c:0b:8f:41:c3:db: 0d:1a:6d:1a:48:b8:74:cb:86:2a:93:1d:ec:da:c7: 6d:4c:dc:e2:23:89:45:85:e1:d1:34:45:fc:fa:d1: 50:60:b4:8b:62:74:a2:cd:39:80:07:6d:78:00:72: 28:d0:a6:d9:4b:67:88:c9:d2:ad:c7:31:08:16:bb: 73:5a:5d:86:e0:e4:91:b9:45:7b:60:45:c0:c9:9e: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1F:C8:A7:4C:E4:FF:A6:F2:3C:B6:2F:D7:DB:1A:EE:AC:24:86:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:57:05:2c:2c:e3:a7:80:33:4b:dd:88:08:54:04:cf:e4:d0: b0:a7:19:ec:5f:c0:dd:d7:19:d6:7f:ab:4a:b0:7d:d1:70:da: e2:22:24:22:52:8d:27:2e:31:62:f9:36:c9:b4:4b:28:61:d2: 8f:63:8e:59:59:ef:bb:1a:fa:38:0e:50:1e:fd:f8:ca:33:e3: a1:f7:2d:d9:91:e9:b8:9a:2f:7c:d3:96:02:da:11:94:0b:3b: 07:ea:1f:45:b0:e6:74:fd:ee:f5:cb:5d:dc:0a:ca:e3:9c:1a: 46:05:74:f8:93:07:42:85:52:99:dd:4a:55:54:7b:6f:c7:ad: 16:b8:4e:f4:57:47:4d:e3:26:c5:57:0f:67:02:e1:c5:4b:5d: bb:16:48:bb:7b:89:d5:d3:72:4d:f8:e1:00:ad:c6:61:c1:07: a9:13:b4:0b:51:92:70:46:62:97:59:d5:17:2b:c6:e4:fe:66: cb:89:b6:5a:78:08:ae:7e:42:8f:0b:ed:94:82:0a:1c:71:ef: 60:2c:d9:c1:12:22:55:12:1f:5c:96:23:56:fa:22:ed:19:7a: 7f:5f:36:a2:3b:24:00:c7:39:db:15:e2:a2:a3:6c:e7:35:4d: df:f7:68:36:67:86:77:58:3a:0b:64:d0:e4:4c:df:98:71:dc: 8c:bb:e8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpwNiWDp+TeSPBCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Mzc3MGY5NTAtZDQ3Ny00ZTk3LTkwODMtNmUwYjUxMTg0MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08On2j5RCDi5Auj/4+KsPYs+aHK9nyQieiWa mqj6pvv4Wlp60L+GFZ+adBxwSK0bXav5el+hbcJy9RHN+3PXuRVRInNIzEKhLSoW 3R4BfM+nUx75dq/eFYuoQFHGadxUbIzy/ZNLTjRnsh4NG1wSZv3TTNl1wNzQMBZK w+AGpvwszRGYt2MM05xeFxI+Cu3JbvWtJrjOs65mgAOe65vXem1sISe1oYjITL+k voGcC49Bw9sNGm0aSLh0y4Yqkx3s2sdtTNziI4lFheHRNEX8+tFQYLSLYnSizTmA B214AHIo0KbZS2eIydKtxzEIFrtzWl2G4OSRuUV7YEXAyZ4GLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwfyKdM5P+m8jy2L9fbGu6sJIbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ZlYzU4YjQtODE2Ny0z N2UyLWJlZjEtYzdiNDBhZTFlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxXBSws46eAM0vdiAhUBM/k0LCnGexfwN3XGdZ/q0qwfdFw2uIiJCJS jScuMWL5Nsm0Syhh0o9jjllZ77sa+jgOUB79+Moz46H3LdmR6biaL3zTlgLaEZQL OwfqH0Ww5nT97vXLXdwKyuOcGkYFdPiTB0KFUpndSlVUe2/HrRa4TvRXR03jJsVX D2cC4cVLXbsWSLt7idXTck344QCtxmHBB6kTtAtRknBGYpdZ1RcrxuT+ZsuJtlp4 CK5+Qo8L7ZSCChxx72As2cESIlUSH1yWI1b6Iu0Zen9fNqI7JADHOdsV4qKjbOc1 Td/3aDZnhndYOgtk0ORM35hx3Iy76A0= -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:16 2025 by rpki-client