This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa File: d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa (raw, json) Hash identifier: kUSE1MiYED7624WbHDVglwstHhsiMzPtg/DlVIIgWLk= Subject key identifier: 80:1C:CF:93:AF:4A:8A:42:76:AB:F1:C2:74:8B:DA:3B:99:34:C9:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A704FE5EB448E88716E980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.243.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:04:fe:5e:b4:48:e8:87:16:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b8912c08-6b4b-4bae-92d0-dd9b8eeab064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:a0:3e:af:f3:96:84:75:71:12:ba:de:5d: c3:fa:91:7f:5f:25:3b:ba:c8:b4:77:ae:66:7f:dd: 54:a3:4e:b1:22:8e:50:8c:8c:84:d3:f6:b9:0f:26: 3f:2c:3d:12:e7:a0:33:af:63:c2:92:1f:36:35:ad: bc:b2:43:e4:6b:41:a6:4a:4f:ac:aa:84:d1:6c:bb: ec:77:1b:45:b0:5c:90:ed:84:d2:0c:08:ec:9f:e1: fc:c7:d7:a3:e7:b2:b1:2e:15:c1:df:60:80:c6:26: 75:51:96:0e:67:3a:8b:70:ee:b9:82:73:f0:22:9e: c2:25:36:88:47:b2:de:00:08:f8:81:97:bf:d3:c7: 8f:f8:0a:30:9c:83:df:a0:e6:d6:d1:7b:62:d3:11: 14:2c:3d:68:43:d9:b9:c6:cc:e8:bd:2b:08:97:80: 6b:17:d0:84:b1:c5:46:a6:3a:4c:ea:db:7c:7c:e9: 6d:7c:d6:29:32:6d:ad:2b:25:f1:58:1c:53:45:a5: f1:8d:0c:7c:64:69:c2:a1:4a:d4:c3:7c:cf:3e:4d: 2b:33:b1:80:9d:b6:73:3e:67:0a:2e:58:34:5f:77: 90:8d:88:05:07:06:56:a2:ed:be:ff:50:51:52:9b: ef:dc:a8:68:7a:eb:2a:3e:ee:8b:94:ee:db:0c:e0: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:CF:93:AF:4A:8A:42:76:AB:F1:C2:74:8B:DA:3B:99:34:C9:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f3:94:9c:a7:37:ed:37:4f:20:09:20:c8:81:08:e7:01:0b: 15:83:65:62:33:95:ee:96:13:3a:04:16:c5:f0:a3:fb:4c:f4: 6d:28:f0:29:8a:1d:05:99:1f:82:b9:cd:9c:ac:6e:1e:ba:d6: 39:68:08:ee:0d:66:8a:c2:0b:d8:83:07:ed:25:30:75:83:eb: da:b7:18:44:8f:33:b7:90:c5:8b:3b:33:31:15:df:e5:1c:2e: 1f:f4:ed:a2:3e:e7:e3:74:27:e8:13:a0:ed:2d:d2:4f:53:4e: 96:19:61:cc:59:95:16:ac:80:19:5e:f9:fe:2a:b2:56:29:80: 93:57:f3:22:aa:62:47:85:bd:2f:65:a0:d3:dd:3c:97:dc:89: 8b:72:b0:e5:3c:13:b3:f9:6a:dd:21:56:08:f1:94:79:b8:d1: 8c:e0:b0:64:52:f8:97:37:66:00:c3:39:b9:0d:93:b2:6d:50: 10:93:07:f1:0a:6b:aa:1b:b7:17:f2:73:3d:c3:ee:ff:90:ed: 40:ba:fe:c1:05:28:00:62:4b:c8:1a:63:98:c5:52:64:33:d9: c3:8d:90:b3:b3:24:aa:a4:d7:05:9a:58:78:69:a6:ca:65:b8: 8e:9c:39:b4:8f:b4:5b:03:a5:08:49:78:f0:f0:64:32:84:03: 7b:9c:60:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpwT+XrRI6IcW6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Yjg5MTJjMDgtNmI0Yi00YmFlLTkyZDAtZGQ5YjhlZWFiMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx42gPq/zloR1cRK63l3D+pF/XyU7usi0d65m f91Uo06xIo5QjIyE0/a5DyY/LD0S56Azr2PCkh82Na28skPka0GmSk+sqoTRbLvs dxtFsFyQ7YTSDAjsn+H8x9ej57KxLhXB32CAxiZ1UZYOZzqLcO65gnPwIp7CJTaI R7LeAAj4gZe/08eP+AownIPfoObW0Xti0xEULD1oQ9m5xszovSsIl4BrF9CEscVG pjpM6tt8fOltfNYpMm2tKyXxWBxTRaXxjQx8ZGnCoUrUw3zPPk0rM7GAnbZzPmcK Llg0X3eQjYgFBwZWou2+/1BRUpvv3KhoeusqPu6LlO7bDOD9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAcz5OvSopCdqvxwnSL2juZNMk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDdlNWNmMDctNDhhZS0z M2IxLWI0MGItODU4ZDk2YzI2OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLzlJynN+03TyAJIMiBCOcBCxWDZWIzle6WEzoEFsXwo/tM9G0o8CmK HQWZH4K5zZysbh661jloCO4NZorCC9iDB+0lMHWD69q3GESPM7eQxYs7MzEV3+Uc Lh/07aI+5+N0J+gToO0t0k9TTpYZYcxZlRasgBle+f4qslYpgJNX8yKqYkeFvS9l oNPdPJfciYtysOU8E7P5at0hVgjxlHm40YzgsGRS+Jc3ZgDDObkNk7JtUBCTB/EK a6obtxfycz3D7v+Q7UC6/sEFKABiS8gaY5jFUmQz2cONkLOzJKqk1wWaWHhppspl uI6cObSPtFsDpQhJePDwZDKEA3ucYOw= -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:49 2025 by rpki-client