This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
File: 7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa (raw, json)
Hash identifier: qXy2V+9axxcOVsCVVTHvETcg33X0yjZE5WSBe7nOXek=
Subject key identifier: 98:CE:9D:D4:52:B1:57:CF:10:9A:0C:96:AC:73:72:69:8A:4D:16:57
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A7C20FD7250725DEF72400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 7155
IP address blocks: 172.243.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:c2:0f:d7:25:07:25:de:f7:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=9a2b43da-077b-4694-98e2-e4736512415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:7d:b2:c0:7a:2b:f4:54:1d:a9:f8:19:73:
f3:fa:9d:df:ef:3f:88:0b:5d:9a:ef:de:12:d1:e6:
0c:a1:eb:98:66:8b:d0:65:31:54:6f:fc:65:a3:84:
21:90:4d:6e:73:25:ee:72:9d:99:57:56:00:b8:05:
88:50:a9:50:96:c4:eb:22:a8:27:bc:89:9c:5e:b7:
21:67:49:aa:26:84:b2:a4:c7:30:76:bd:1a:42:40:
1c:6e:fa:78:2e:83:a2:62:93:a7:a3:ab:d6:44:2c:
ac:90:83:2e:7c:2a:dd:16:b8:82:9e:a9:c1:50:ab:
70:8a:81:ca:b2:cf:47:62:e7:03:9e:94:3c:d4:21:
95:d7:a2:28:8c:65:28:74:f7:4d:d6:07:3a:c4:95:
53:a1:ba:9f:97:76:7d:3a:3c:f4:25:db:27:f3:c8:
65:07:0c:78:ff:76:6c:c1:ae:8b:de:8f:3c:02:d5:
eb:81:ca:b5:a0:8d:fa:13:8a:e1:1b:f6:66:e2:a7:
14:8d:29:1c:73:be:9a:b3:c2:c1:0c:c8:46:9d:bf:
2b:55:f3:63:fa:2c:fd:07:90:b8:24:7c:1a:b8:8f:
b7:fc:ef:d7:a7:ce:29:8b:ba:f5:50:e5:1f:9a:f1:
23:0d:25:37:65:0a:f7:59:9a:87:18:c6:56:0a:d9:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:9D:D4:52:B1:57:CF:10:9A:0C:96:AC:73:72:69:8A:4D:16:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:b7:2c:36:dd:d6:a5:55:0d:35:b1:f3:d0:ac:e3:7d:b8:72:
2a:a5:70:91:a2:4c:e0:60:9f:86:e2:8b:74:32:e8:6f:69:10:
f6:a0:13:24:41:d8:e2:63:42:4d:51:19:72:10:8c:19:02:59:
94:f9:f0:96:44:a9:d9:41:bd:a3:63:60:48:cf:be:8a:26:39:
64:94:dc:34:80:4c:fa:27:38:7c:b9:1e:d8:7d:3f:73:81:a0:
39:7f:97:a3:56:a8:13:d1:15:9c:a0:c2:45:f7:4b:1e:21:f1:
b0:a6:72:80:b3:e9:2f:ab:f3:d7:5a:26:82:83:ad:33:79:84:
6a:01:d6:11:2c:cb:21:1c:15:62:7f:8c:7f:b0:a8:f1:44:30:
8a:3a:a7:d3:77:be:c8:af:f9:d7:94:bb:bd:1d:f7:05:75:8f:
ee:14:f7:81:64:97:41:b8:2d:0e:f4:51:43:d7:47:a9:1e:14:
aa:62:3d:a5:02:cf:ef:57:11:ff:cf:3e:9c:e3:de:3c:b5:b3:
fe:50:20:d7:67:a8:d0:17:7d:fb:fb:38:b7:4b:a8:a7:13:11:
58:e1:70:02:0b:98:e2:38:f5:84:5d:2f:be:21:88:ba:cf:b8:
13:9c:58:80:3d:24:cc:24:fa:a2:57:00:23:5a:18:61:cc:48:
86:7f:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:53:55 2026 by rpki-client