This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67702581-8956-3939-bfa1-f7f596459e08.roa File: 67702581-8956-3939-bfa1-f7f596459e08.roa (raw, json) Hash identifier: JCfdSR4uk554jdS7L0yJOSykWbMLxK77efC+nHYvOoM= Subject key identifier: 5C:D9:CB:6B:93:A1:07:CA:D9:D7:62:F2:E3:67:18:3D:97:F9:6B:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A6ACF9EC83016FAAF00340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67702581-8956-3939-bfa1-f7f596459e08.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 40311 IP address blocks: 198.45.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:ac:f9:ec:83:01:6f:aa:f0:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=477091bf-e9a6-43e6-ba95-3e6147eb9788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:e5:49:93:d2:1f:7a:25:79:61:76:b1:e9: 7f:7f:20:d1:26:54:42:13:ce:8e:f9:c5:de:8d:7e: 74:de:3e:b6:c4:7f:19:a9:e7:63:c2:54:67:81:75: 2c:0e:f8:77:e5:6e:ce:21:e0:b6:1d:08:be:11:ee: 2d:d4:63:63:45:92:11:07:12:d8:1b:06:c6:8a:43: 87:cc:48:03:a5:f8:ad:dc:8c:77:c7:d2:53:78:cb: e8:49:eb:51:23:0c:d8:dd:02:1f:74:0d:55:96:29: 94:32:e9:5a:3e:0e:7c:4f:72:3e:29:a7:f5:fa:6a: e0:42:36:45:12:4a:28:62:46:09:89:85:e4:02:92: e0:5a:6f:6d:49:04:e8:4a:05:ad:81:3d:d5:75:c0: c7:5a:42:16:9e:61:03:ff:63:80:0a:64:ed:20:9c: d7:07:a2:84:f5:45:5e:58:92:51:34:6d:8b:74:40: bd:c7:b7:49:2c:15:21:b8:3d:b1:38:e1:0c:99:45: f4:30:d8:63:ef:aa:af:a7:cb:ab:96:5e:4d:08:05: d1:d1:42:87:17:2d:94:7a:70:1b:42:3f:0a:f0:29: 31:9b:04:a2:c6:ac:cb:17:27:16:00:c3:29:27:dd: e1:ac:32:f9:76:1c:79:9e:57:9c:93:d1:df:5f:9f: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:CB:6B:93:A1:07:CA:D9:D7:62:F2:E3:67:18:3D:97:F9:6B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67702581-8956-3939-bfa1-f7f596459e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:a2:0f:ee:2d:52:55:83:2f:ab:90:2a:63:45:72:e0:05: 64:25:66:4b:c0:bf:e8:02:1f:ad:ea:20:35:aa:09:17:ef:3a: 0d:35:62:41:c2:a1:d9:2b:66:55:1e:11:69:ba:d9:2c:0b:30: 7f:1a:11:91:68:7f:68:4a:2c:bb:36:a6:8e:06:50:b8:75:e3: e7:33:4f:e0:c9:a9:b0:2e:39:9e:8c:c3:5d:41:c0:7d:aa:d2: 59:0e:91:11:c1:37:0e:bc:b4:6b:fd:73:d1:31:58:e5:b3:25: 85:bb:f7:29:b0:b2:72:41:de:75:0a:ec:a0:a6:82:a8:bb:f8: 1d:d5:da:e6:a4:7e:62:97:3f:98:df:bf:d0:e9:bb:0a:5e:08: f3:c1:81:0e:57:50:b7:24:aa:a4:6b:12:96:99:d6:16:4d:f0: dd:65:e4:b0:83:e7:5b:93:18:86:45:65:fd:d3:46:d7:dd:f8: c3:94:15:67:60:bf:7a:a3:14:de:22:0f:42:aa:fb:9c:f4:58: 50:62:42:cc:1b:a1:28:a3:e4:af:0c:97:c6:0e:fa:6d:64:9d: e7:a5:bc:d9:71:84:0f:b6:51:c5:31:0c:cd:b4:d4:dc:d1:9b: cc:4c:e1:eb:1f:68:27:f8:3b:fb:f8:38:de:6a:cf:8d:dd:a8: e0:1f:56:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpqz57IMBb6rwA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NDc3MDkxYmYtZTlhNi00M2U2LWJhOTUtM2U2MTQ3ZWI5Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjnlSZPSH3oleWF2sel/fyDRJlRCE86O+cXe jX503j62xH8ZqedjwlRngXUsDvh35W7OIeC2HQi+Ee4t1GNjRZIRBxLYGwbGikOH zEgDpfit3Ix3x9JTeMvoSetRIwzY3QIfdA1VlimUMulaPg58T3I+Kaf1+mrgQjZF EkooYkYJiYXkApLgWm9tSQToSgWtgT3VdcDHWkIWnmED/2OACmTtIJzXB6KE9UVe WJJRNG2LdEC9x7dJLBUhuD2xOOEMmUX0MNhj76qvp8urll5NCAXR0UKHFy2UenAb Qj8K8CkxmwSixqzLFycWAMMpJ93hrDL5dhx5nleck9HfX58CiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzZy2uToQfK2ddi8uNnGD2X+WtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjc3MDI1ODEtODk1Ni0z OTM5LWJmYTEtZjdmNTk2NDU5ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxi34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYog/uLVJVgy+rkCpjRXLgBWQlZkvAv+gCH63qIDWqCRfvOg01YkHC odkrZlUeEWm62SwLMH8aEZFof2hKLLs2po4GULh14+czT+DJqbAuOZ6Mw11BwH2q 0lkOkRHBNw68tGv9c9ExWOWzJYW79ymwsnJB3nUK7KCmgqi7+B3V2uakfmKXP5jf v9DpuwpeCPPBgQ5XULckqqRrEpaZ1hZN8N1l5LCD51uTGIZFZf3TRtfd+MOUFWdg v3qjFN4iD0Kq+5z0WFBiQswboSij5K8Ml8YO+m1kneelvNlxhA+2UcUxDM201NzR m8xM4esfaCf4O/v4ON5qz43dqOAfVvk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:48 2026 by rpki-client