This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa File: d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa (raw, json) Hash identifier: vuSfLGgQmnDM7/1KhwqvFxat9ZHT3UwRVQ9UP8aVGeI= Subject key identifier: 17:93:1E:E0:57:CA:A6:4C:56:A0:FE:E9:16:36:1F:E1:82:ED:9F:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7ABC38904CDCF03C30280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 99.198.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:ab:c3:89:04:cd:cf:03:c3:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c3f1a65b-e87e-4f5d-a40a-941871eb81ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:9c:ac:54:78:57:66:a5:e0:d7:8e:65:69: 6d:bb:0b:ea:71:e8:b9:03:5e:ca:d6:87:e3:08:06: 72:6c:f4:40:74:e3:66:82:3c:0c:c1:fe:90:1d:f4: d2:61:c5:77:24:4f:c0:0c:17:77:f2:3f:f4:2e:ed: 6e:8b:da:77:5e:96:a5:e7:e8:e3:70:6e:72:c0:48: 70:9b:50:a2:16:19:ef:26:58:40:f1:ec:c9:23:ff: 92:28:1f:78:ef:58:d9:f1:b1:c7:8a:5c:22:6f:c5: 35:2a:a5:66:71:56:a7:e8:e2:37:24:06:71:2e:09: 1d:cf:9b:1b:3a:29:60:9b:fc:39:a7:b7:7b:bb:81: 5b:41:1d:3d:de:48:4e:76:3e:ae:34:c6:c0:6b:dc: 1a:4c:b0:a9:68:aa:a6:72:bb:67:59:39:3f:b6:a1: b9:f6:3b:cb:0f:5f:d4:2d:e3:3f:20:8c:b9:c8:77: 11:c8:c1:be:18:b0:e8:20:14:f4:a3:be:21:c7:b5: ed:6c:7c:93:50:3b:d1:11:bf:f9:e6:c4:d8:e3:83: fc:cc:10:df:21:bb:19:b3:0a:1b:7a:7e:8d:94:ca: f8:4f:65:1f:5b:df:f8:2e:e6:97:76:a0:b5:49:36: 16:33:2e:cf:a1:e2:0b:bb:1c:e6:03:3c:51:02:69: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:93:1E:E0:57:CA:A6:4C:56:A0:FE:E9:16:36:1F:E1:82:ED:9F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8d:18:bf:00:04:10:60:db:7e:b9:af:d7:2e:25:92:56:02: 91:db:b9:a4:43:b8:77:84:e7:82:42:84:66:d6:5e:ff:93:3f: e2:c2:09:09:54:77:cb:fe:3d:ce:e2:ea:39:54:54:c8:a6:35: 90:36:24:82:37:04:ad:f9:09:29:ac:c3:84:b0:99:eb:21:1f: 9b:ad:7e:85:92:3e:fa:26:f7:1b:cf:2a:3c:80:69:d6:b7:93: cb:80:54:d3:9d:d6:30:99:fa:d9:a4:7d:6c:90:ae:da:f2:20: 6f:4b:ed:fb:8f:09:c7:b0:be:87:cf:6f:c7:72:39:9e:54:f9: f2:9a:49:b1:fb:c6:df:a5:59:ea:2b:42:d7:2a:79:18:74:f6: 41:3b:30:f8:32:f8:7f:cb:6b:a8:13:1a:68:3b:e3:7d:50:b9: 9e:28:8e:83:f7:82:9e:d2:f9:ed:5a:a7:ea:3b:3f:76:c9:12: b6:39:9c:b3:fa:a9:91:db:0f:d9:9a:3d:f9:e2:40:b5:bc:c3: ab:01:69:4b:f7:34:e0:08:bd:d0:40:44:b6:f0:bc:b1:de:7a: 38:ee:e3:c7:99:7c:77:14:d2:c8:f8:3c:68:72:47:25:29:1e: 92:77:f1:43:fb:0b:e5:67:48:0c:90:7b:a9:eb:f8:53:ca:e3: 19:4f:3f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp6vDiQTNzwPDAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzNmMWE2NWItZTg3ZS00ZjVkLWE0MGEtOTQxODcxZWI4MWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OKcrFR4V2al4NeOZWltuwvqcei5A17K1ofj CAZybPRAdONmgjwMwf6QHfTSYcV3JE/ADBd38j/0Lu1ui9p3Xpal5+jjcG5ywEhw m1CiFhnvJlhA8ezJI/+SKB9471jZ8bHHilwib8U1KqVmcVan6OI3JAZxLgkdz5sb Oilgm/w5p7d7u4FbQR093khOdj6uNMbAa9waTLCpaKqmcrtnWTk/tqG59jvLD1/U LeM/IIy5yHcRyMG+GLDoIBT0o74hx7XtbHyTUDvREb/55sTY44P8zBDfIbsZswob en6NlMr4T2UfW9/4LuaXdqC1STYWMy7PoeILuxzmAzxRAmkqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeTHuBXyqZMVqD+6RY2H+GC7Z/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDFlMGNjZjEtYmNiOC0z ZDRhLTgwMmYtNzUyMzZlNjY1ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqNGL8ABBBg2365r9cuJZJWApHbuaRDuHeE54JChGbWXv+TP+LCCQlU d8v+Pc7i6jlUVMimNZA2JII3BK35CSmsw4SwmeshH5utfoWSPvom9xvPKjyAada3 k8uAVNOd1jCZ+tmkfWyQrtryIG9L7fuPCcewvofPb8dyOZ5U+fKaSbH7xt+lWeor QtcqeRh09kE7MPgy+H/La6gTGmg7431QuZ4ojoP3gp7S+e1ap+o7P3bJErY5nLP6 qZHbD9maPfniQLW8w6sBaUv3NOAIvdBARLbwvLHeejju48eZfHcU0sj4PGhyRyUp HpJ38UP7C+VnSAyQe6nr+FPK4xlPP5c= -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:23 2025 by rpki-client