This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2def98c3-f620-3771-8da0-1121464da590.roa File: 2def98c3-f620-3771-8da0-1121464da590.roa (raw, json) Hash identifier: SN+/ORPGpy5qUjwHaeQakMTc/EKkfZE3U4S7kOaRjRE= Subject key identifier: F0:14:9D:D6:A3:35:6E:1D:7F:6C:71:D4:EC:FE:F7:45:CD:E1:AD:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7C6D0DA9670BB5845C240 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2def98c3-f620-3771-8da0-1121464da590.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 184.20.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:c6:d0:da:96:70:bb:58:45:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=61a9c4da-7f04-45e2-981b-6dc6782cb6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:5b:49:56:6c:40:16:f0:24:c4:01:7e:af: 51:b9:6f:f6:ec:76:f7:80:18:c0:4a:71:af:c5:89: a5:9e:45:d2:b3:a0:19:25:73:c9:fb:06:33:88:de: ae:68:98:f3:10:98:d1:42:0d:6b:a4:05:7c:8b:de: dd:fc:3e:80:bd:01:85:ef:d6:5a:b5:fa:52:e6:56: 61:ef:f7:22:d7:70:d2:14:dc:7b:d1:3f:91:a8:c3: 49:61:37:33:71:f3:c5:71:fa:5a:e5:c1:0c:e5:b9: 1b:09:28:33:e7:9d:86:8a:3a:1d:ab:db:8a:e4:cb: 42:9f:46:f4:ac:da:dd:77:62:67:f6:b2:32:d5:69: eb:91:19:56:d0:5e:00:51:45:c4:a6:32:f9:1b:e0: e3:66:ca:e9:8f:73:66:bd:19:5d:d7:53:70:54:a4: ab:de:fa:a5:12:aa:f7:07:82:7d:0f:5a:a1:97:1e: 28:12:cc:02:0c:c5:2f:ea:67:bc:14:ea:0c:1c:da: 8a:47:f2:53:9b:c0:f5:c7:12:12:3f:82:be:1b:c7: 64:85:da:e9:c6:a5:8d:3e:3d:80:b3:7f:0a:2d:55: f7:64:f3:f8:7d:df:96:35:06:da:ee:9b:54:3f:b1: 52:47:24:e1:5f:d7:eb:11:f3:09:d6:ee:39:a7:78: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:14:9D:D6:A3:35:6E:1D:7F:6C:71:D4:EC:FE:F7:45:CD:E1:AD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2def98c3-f620-3771-8da0-1121464da590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:88:d1:0e:fe:f4:51:02:0b:e8:cf:76:90:f0:0a:c4:30:28: 94:42:7c:25:28:ce:21:60:e4:d2:9e:e6:93:0f:cf:39:8b:24: 83:db:91:ba:38:8e:f8:8e:96:39:7a:5b:97:b2:a9:eb:8e:de: 86:05:3d:eb:9f:1e:25:b4:b3:ba:83:19:f1:6b:4c:b0:de:73: 2d:11:82:50:0a:5b:ec:0f:18:72:2d:68:ea:0b:91:a1:41:b8: 86:33:90:72:c0:7b:cc:6a:93:a1:be:f7:db:c7:0b:da:c9:d3: d0:fe:2d:b3:df:69:73:66:b9:a6:58:2f:f4:52:c5:1f:5e:88: 98:93:40:0c:e2:26:4d:33:96:f7:65:48:68:0c:28:bb:94:1a: fa:78:10:bc:c7:96:55:44:25:7a:bc:2a:93:64:c4:cd:43:97: 89:73:dc:e0:2e:87:47:f6:cc:fe:80:53:9f:30:cc:c3:65:ad: 68:ec:e0:59:96:4e:fe:4b:11:2b:2e:b8:eb:88:96:cc:89:e8: 4a:30:1c:9e:92:52:3c:14:93:f1:29:a1:d3:7d:8e:ba:75:08: 0a:79:a3:ed:2a:64:a2:cd:09:ee:29:7d:51:db:a7:ab:f5:4b: be:ea:15:6b:4d:1b:56:a5:43:ae:6f:a3:03:4e:15:0f:b0:51: 38:be:04:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp8bQ2pZwu1hFwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjFhOWM0ZGEtN2YwNC00NWUyLTk4MWItNmRjNjc4MmNiNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVbSVZsQBbwJMQBfq9RuW/27Hb3gBjASnGv xYmlnkXSs6AZJXPJ+wYziN6uaJjzEJjRQg1rpAV8i97d/D6AvQGF79ZatfpS5lZh 7/ci13DSFNx70T+RqMNJYTczcfPFcfpa5cEM5bkbCSgz552Gijodq9uK5MtCn0b0 rNrdd2Jn9rIy1WnrkRlW0F4AUUXEpjL5G+DjZsrpj3NmvRld11NwVKSr3vqlEqr3 B4J9D1qhlx4oEswCDMUv6me8FOoMHNqKR/JTm8D1xxISP4K+G8dkhdrpxqWNPj2A s38KLVX3ZPP4fd+WNQba7ptUP7FSRyThX9frEfMJ1u45p3jiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAUndajNW4df2xx1Oz+90XN4a2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRlZjk4YzMtZjYyMC0z NzcxLThkYTAtMTEyMTQ2NGRhNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaI0Q7+9FECC+jPdpDwCsQwKJRCfCUoziFg5NKe5pMPzzmLJIPbkbo4 jviOljl6W5eyqeuO3oYFPeufHiW0s7qDGfFrTLDecy0RglAKW+wPGHItaOoLkaFB uIYzkHLAe8xqk6G+99vHC9rJ09D+LbPfaXNmuaZYL/RSxR9eiJiTQAziJk0zlvdl SGgMKLuUGvp4ELzHllVEJXq8KpNkxM1Dl4lz3OAuh0f2zP6AU58wzMNlrWjs4FmW Tv5LESsuuOuIlsyJ6EowHJ6SUjwUk/EpodN9jrp1CAp5o+0qZKLNCe4pfVHbp6v1 S77qFWtNG1alQ65vowNOFQ+wUTi+BLI= -----END CERTIFICATE-----Generated at Sun Jan 25 14:28:11 2026 by rpki-client