This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa File: c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa (raw, json) Hash identifier: TiCeX+8rOXHKZV1OfZtwXhziHhWMvTJ3geMsvINfrk4= Subject key identifier: 8D:71:E4:EC:3A:E2:95:B3:9B:2A:18:18:43:CA:96:0B:2A:E7:B2:22 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7040582701CCD125D2900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.242.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:04:05:82:70:1c:cd:12:5d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=db79b586-b3e5-4f05-8f38-3de607464726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:2e:b1:ca:12:63:3c:85:87:37:ba:b5:6b: 5f:b1:d0:fe:a8:27:96:e5:a3:cc:56:97:c8:d4:9f: 29:a6:f0:9e:65:d3:36:97:e7:08:a2:7b:c8:d7:d4: 35:b0:aa:5b:7d:2b:c0:d5:2a:53:76:05:d1:57:e3: a4:e5:f9:48:18:d1:8b:b0:79:fd:bf:43:40:45:fe: 42:6c:ad:9f:bf:58:dc:bc:a2:c9:b8:fb:16:3b:dd: de:9e:48:ee:42:dc:22:69:46:6f:e4:98:a5:e7:ac: 5a:36:b9:83:65:7b:8a:22:0e:36:c1:75:3e:f7:96: e9:74:68:31:9f:2b:43:db:56:5b:e5:f4:27:0d:41: 17:b9:b0:76:e3:03:e2:4a:c6:a0:f2:49:21:a4:a0: 2e:e7:de:35:91:4a:99:6c:cc:e4:bf:84:38:71:b8: 36:fa:b0:54:11:55:6a:6f:93:be:91:da:81:68:4d: a7:e7:5a:3d:7a:bb:8f:23:1f:78:40:fd:55:42:32: 38:35:d0:b3:44:2d:4a:bf:de:43:1f:86:7a:47:0a: 1f:68:c2:b1:08:6b:98:4b:8a:64:61:21:8d:1e:d0: 31:65:68:37:8c:87:98:30:21:ae:e8:74:94:53:d0: a0:d8:c0:bc:b4:1f:e6:b2:ea:81:cd:26:42:3f:d5: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:71:E4:EC:3A:E2:95:B3:9B:2A:18:18:43:CA:96:0B:2A:E7:B2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e6:bb:a9:8c:ab:ed:27:de:e1:64:d7:53:38:3a:f3:26:b3: 22:77:d9:61:48:d6:1a:8f:ee:e5:40:cb:5e:74:95:50:30:33: 90:13:d7:94:ab:75:63:bb:e9:1f:53:b5:71:2d:0e:3d:80:f3: 42:51:4b:c8:71:bf:41:f7:c3:36:b0:09:78:ac:dd:50:70:b0: c9:4a:e5:14:44:b8:dc:89:01:45:30:86:e4:39:70:d8:81:ef: 42:19:2c:e0:5d:e2:d3:95:9e:05:d1:5e:c1:8e:0c:d4:a8:26: 58:a3:90:1c:b9:8a:e0:1a:59:ab:e7:b2:8d:63:b8:91:d6:3e: 5d:64:db:74:e2:de:43:34:66:3e:a2:6e:f4:66:d2:84:a7:35: 35:ad:6a:32:d7:5b:7e:9b:0e:4d:d0:b3:d3:47:e7:95:49:6b: 55:ed:3c:fb:d2:bf:8c:df:80:7b:88:14:7a:2e:0c:af:9b:54: 6a:a9:d5:e9:54:7d:49:4d:78:c4:2e:e8:81:02:31:9e:a1:57: ae:c8:8a:c4:70:5c:ae:6e:a4:72:22:70:ba:11:b8:a4:dd:3b: ef:e3:67:12:c4:10:e9:1f:b8:90:81:03:a9:a8:e0:c3:64:09: 82:d5:94:77:2b:df:3f:e8:a5:7c:b2:49:96:29:ba:de:d8:35: 4f:e3:1c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpwQFgnAczRJdKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZGI3OWI1ODYtYjNlNS00ZjA1LThmMzgtM2RlNjA3NDY0NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MuscoSYzyFhze6tWtfsdD+qCeW5aPMVpfI 1J8ppvCeZdM2l+cIonvI19Q1sKpbfSvA1SpTdgXRV+Ok5flIGNGLsHn9v0NARf5C bK2fv1jcvKLJuPsWO93enkjuQtwiaUZv5Jil56xaNrmDZXuKIg42wXU+95bpdGgx nytD21Zb5fQnDUEXubB24wPiSsag8kkhpKAu5941kUqZbMzkv4Q4cbg2+rBUEVVq b5O+kdqBaE2n51o9eruPIx94QP1VQjI4NdCzRC1Kv95DH4Z6RwofaMKxCGuYS4pk YSGNHtAxZWg3jIeYMCGu6HSUU9Cg2MC8tB/msuqBzSZCP9VOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1x5Ow64pWzmyoYGEPKlgsq57IiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM4NDVjNmYtNTJkNC0z NGU1LWE2YTYtN2RkODg4YTRkMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfmu6mMq+0n3uFk11M4OvMmsyJ32WFI1hqP7uVAy150lVAwM5AT15Sr dWO76R9TtXEtDj2A80JRS8hxv0H3wzawCXis3VBwsMlK5RREuNyJAUUwhuQ5cNiB 70IZLOBd4tOVngXRXsGODNSoJlijkBy5iuAaWavnso1juJHWPl1k23Ti3kM0Zj6i bvRm0oSnNTWtajLXW36bDk3Qs9NH55VJa1XtPPvSv4zfgHuIFHouDK+bVGqp1elU fUlNeMQu6IECMZ6hV67IisRwXK5upHIicLoRuKTdO+/jZxLEEOkfuJCBA6mo4MNk CYLVlHcr3z/opXyySZYput7YNU/jHPM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:21 2026 by rpki-client