This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2588d34d-fa49-3f3b-bfdc-0fffc757e8eb.roa File: 2588d34d-fa49-3f3b-bfdc-0fffc757e8eb.roa (raw, json) Hash identifier: R2lcFXJgI/9DeVBb0wATH4muR9hozT5wQ68+oti8Am0= Subject key identifier: 76:A8:B1:73:F9:6D:C5:1F:59:9E:CB:BA:17:0E:92:7C:D3:04:23:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A772763FC2ECEB7F5969F0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2588d34d-fa49-3f3b-bfdc-0fffc757e8eb.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:72:76:3f:c2:ec:eb:7f:59:69:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=8484d5e9-d729-45ae-b3d8-a1f576c3b6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:18:38:59:ee:9f:83:dd:95:ff:ba:78:ed: 82:bd:91:63:b7:13:50:db:1f:13:0b:62:a4:43:94: bf:c2:8e:ba:22:b2:18:3a:7b:b7:39:32:b2:51:ed: b7:bb:16:5a:cb:37:4e:3d:f0:fe:61:73:4d:e9:be: 79:5d:87:65:05:7a:d9:8c:50:99:1a:1e:ec:21:b6: 96:9b:c2:e9:4a:f1:fb:89:76:bb:2c:3c:d4:f6:37: 69:63:3e:20:1f:50:b2:1e:6b:e6:27:c1:93:63:dd: f0:25:36:20:7e:03:89:ac:5d:90:c5:ed:f7:6a:55: 08:67:90:3e:71:97:9b:c3:5b:9c:4d:29:cf:aa:23: dc:be:dd:7f:93:51:26:ec:ea:74:8b:ef:d9:96:63: f1:9b:99:39:6b:11:9c:d7:c1:10:f5:33:b9:86:5d: 22:22:1b:9f:ef:96:3b:89:aa:79:9e:41:0f:ef:46: 6f:c2:e8:c8:8b:89:14:2c:76:83:c2:28:7a:d4:33: ad:8f:a4:ca:15:67:f1:37:0d:e5:84:a0:b7:4e:01: c5:d6:da:ab:50:a3:fe:3a:d3:46:b5:3a:dc:1e:72: 26:44:b4:79:6c:7b:c9:2e:d1:b1:33:7c:6d:8c:57: f0:86:74:c0:10:cc:b5:16:be:47:c3:81:30:88:b3: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A8:B1:73:F9:6D:C5:1F:59:9E:CB:BA:17:0E:92:7C:D3:04:23:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2588d34d-fa49-3f3b-bfdc-0fffc757e8eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:91:a5:ce:d1:f2:39:47:05:6f:0a:bb:05:94:c6:08:af:43: 75:55:f1:1a:33:98:7f:c1:64:b0:50:ec:d8:67:bd:f5:3e:2d: 36:97:a4:75:d0:62:42:11:cb:9c:8c:27:99:a3:e0:d8:ff:b7: 71:b5:c0:25:fb:87:d9:77:74:1f:30:82:0a:fa:22:bb:29:07: 75:dd:99:a4:c5:d1:99:06:1c:fb:f7:b1:df:33:7e:3c:46:29: 21:10:b6:6e:0c:2b:03:7c:98:ec:55:db:a9:cc:f7:3e:7d:08: 9d:8a:17:1a:27:15:53:25:c0:87:dc:71:23:56:c2:9b:20:96: ac:55:c1:a1:64:66:06:d6:ff:c1:c5:f6:24:36:19:dc:09:74: 30:a7:62:b0:58:78:a2:17:95:20:02:41:32:ac:12:2d:81:b6: c9:9c:f0:2a:e2:1f:c4:ba:6b:4c:ae:5c:80:02:76:9a:93:c1: e6:38:76:68:38:8a:eb:15:c3:9f:33:10:48:7f:f5:c7:5e:11: 0b:72:f4:37:25:1a:15:88:4a:64:3d:ad:77:b3:af:18:86:e2: 98:d8:0d:b0:73:93:57:b7:cb:1d:4b:66:0d:1f:81:2c:a6:d0: be:77:02:12:14:1d:e6:15:aa:4e:a1:d0:c2:59:dd:d6:07:26: bd:fc:44:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp3J2P8Ls639ZafAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ODQ4NGQ1ZTktZDcyOS00NWFlLWIzZDgtYTFmNTc2YzNiNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2cYOFnun4Pdlf+6eO2CvZFjtxNQ2x8TC2Kk Q5S/wo66IrIYOnu3OTKyUe23uxZayzdOPfD+YXNN6b55XYdlBXrZjFCZGh7sIbaW m8LpSvH7iXa7LDzU9jdpYz4gH1CyHmvmJ8GTY93wJTYgfgOJrF2Qxe33alUIZ5A+ cZebw1ucTSnPqiPcvt1/k1Em7Op0i+/ZlmPxm5k5axGc18EQ9TO5hl0iIhuf75Y7 iap5nkEP70ZvwujIi4kULHaDwih61DOtj6TKFWfxNw3lhKC3TgHF1tqrUKP+OtNG tTrcHnImRLR5bHvJLtGxM3xtjFfwhnTAEMy1Fr5Hw4EwiLN1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaosXP5bcUfWZ7LuhcOknzTBCOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjU4OGQzNGQtZmE0OS0z ZjNiLWJmZGMtMGZmZmM3NTdlOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyRpc7R8jlHBW8KuwWUxgivQ3VV8RozmH/BZLBQ7NhnvfU+LTaXpHXQ YkIRy5yMJ5mj4Nj/t3G1wCX7h9l3dB8wggr6IrspB3XdmaTF0ZkGHPv3sd8zfjxG KSEQtm4MKwN8mOxV26nM9z59CJ2KFxonFVMlwIfccSNWwpsglqxVwaFkZgbW/8HF 9iQ2GdwJdDCnYrBYeKIXlSACQTKsEi2Btsmc8CriH8S6a0yuXIACdpqTweY4dmg4 iusVw58zEEh/9cdeEQty9DclGhWISmQ9rXezrxiG4pjYDbBzk1e3yx1LZg0fgSym 0L53AhIUHeYVqk6h0MJZ3dYHJr38ROc= -----END CERTIFICATE-----Generated at Sun Jan 25 15:56:42 2026 by rpki-client