This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa File: d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa (raw, json) Hash identifier: YWqWr2et1YFvlF1v0zhDct+DBpUxKoViK0H/Xys2g3Y= Subject key identifier: D0:D1:05:7F:41:E8:84:F3:E2:FD:8C:F5:CF:DA:E4:42:3A:B9:24:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A6BD680EFA29778EA2E7BA Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:bd:68:0e:fa:29:77:8e:a2:e7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=2d43edc5-d37e-4b22-848b-687efd48f8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:fd:8b:53:47:d8:d7:8c:bc:15:d3:52:45: 0e:3f:d9:fc:1a:d0:99:3d:f1:45:7a:27:fe:b0:74: 49:0c:c8:7b:5a:4a:31:45:e1:b3:d0:08:cb:89:f0: 6b:aa:f5:a2:3f:f5:28:a4:39:38:76:66:49:5f:07: 88:70:ca:66:58:47:39:6e:01:99:ec:b3:7f:94:db: 07:fe:0c:0f:31:0c:ad:ab:83:45:0b:1f:75:bd:8a: e6:54:40:82:d8:1a:fe:04:39:9b:8a:1f:db:6e:25: 0f:3f:34:48:44:24:e0:c8:8f:75:25:05:c4:df:62: 60:5b:9c:86:1e:7f:05:54:ba:d1:02:ac:c5:1a:5b: 0b:df:18:44:1c:8a:7b:6c:0e:7c:78:f7:ff:1f:22: 43:3c:0f:ae:0d:fd:96:84:a8:1a:8a:9a:d0:ba:50: f1:4d:42:e9:e0:03:50:04:62:e0:d3:8f:a3:34:19: d8:02:07:9c:70:b3:21:a0:90:72:74:8a:77:27:03: 43:f9:e4:d3:5c:a9:35:20:9f:2a:41:45:1e:55:b9: 11:3a:5b:65:cb:4d:99:32:ce:49:8c:2a:d3:df:0f: ce:a8:f7:d0:f6:98:15:86:c1:02:02:c0:fd:f6:ad: 7a:a4:3c:a2:c4:5d:79:37:01:f9:07:d2:3f:98:94: d1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:05:7F:41:E8:84:F3:E2:FD:8C:F5:CF:DA:E4:42:3A:B9:24:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:87:d1:a1:e8:86:2f:03:0d:0a:ed:f6:e1:d7:02:1c:ba:8d: 38:c6:f8:44:db:52:a8:c1:4f:ac:1e:e2:75:33:70:73:af:ec: 7b:9c:4c:fb:ef:c4:69:54:57:e4:d1:98:6b:3b:f4:44:87:98: ed:b7:c5:19:57:63:e1:96:86:40:82:ce:f7:0b:0c:e7:7f:ba: d7:31:72:da:9b:68:9e:e9:dc:7e:5d:6b:8d:1d:04:85:c2:dc: dc:ab:08:97:34:d8:07:0d:c5:ae:c3:49:9c:13:d3:c8:3f:83: 71:51:cf:cb:8d:8a:d8:12:8f:97:c7:c3:2e:71:8a:b0:0e:93: 06:fa:ec:d2:e2:c5:87:2f:6f:33:8c:f8:6d:43:38:81:a5:e6: ad:ff:48:b7:0b:bd:60:1f:3d:56:63:01:37:a5:22:d1:73:ca: 3c:53:f0:22:74:8d:1b:07:b4:91:cf:eb:47:1b:d3:a7:93:7b: eb:a0:fc:a2:cd:0e:f4:5f:bb:6d:ac:4b:c4:7c:e3:b7:2b:36: c6:fd:3a:4a:73:86:12:ca:45:61:96:6e:cc:7e:82:2c:0a:dc: 08:9a:b5:be:f2:bf:7b:db:22:8f:35:57:44:48:14:6c:77:b6: f9:91:c9:3f:ad:77:68:25:aa:d7:97:30:d8:3b:8f:cc:bb:9e: 77:73:50:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpr1oDvopd46i57owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MmQ0M2VkYzUtZDM3ZS00YjIyLTg0OGItNjg3ZWZkNDhmOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoj9i1NH2NeMvBXTUkUOP9n8GtCZPfFFeif+ sHRJDMh7WkoxReGz0AjLifBrqvWiP/UopDk4dmZJXweIcMpmWEc5bgGZ7LN/lNsH /gwPMQytq4NFCx91vYrmVECC2Br+BDmbih/bbiUPPzRIRCTgyI91JQXE32JgW5yG Hn8FVLrRAqzFGlsL3xhEHIp7bA58ePf/HyJDPA+uDf2WhKgaiprQulDxTULp4ANQ BGLg04+jNBnYAgeccLMhoJBydIp3JwND+eTTXKk1IJ8qQUUeVbkROltly02ZMs5J jCrT3w/OqPfQ9pgVhsECAsD99q16pDyixF15NwH5B9I/mJTRnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDRBX9B6ITz4v2M9c/a5EI6uSQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDUzM2EzZGItNzdmMC0z ZDYwLWI1M2QtZjllNmFiNjFkNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuH0aHohi8DDQrt9uHXAhy6jTjG+ETbUqjBT6we4nUzcHOv7HucTPvv xGlUV+TRmGs79ESHmO23xRlXY+GWhkCCzvcLDOd/utcxctqbaJ7p3H5da40dBIXC 3NyrCJc02AcNxa7DSZwT08g/g3FRz8uNitgSj5fHwy5xirAOkwb67NLixYcvbzOM +G1DOIGl5q3/SLcLvWAfPVZjATelItFzyjxT8CJ0jRsHtJHP60cb06eTe+ug/KLN DvRfu22sS8R847crNsb9OkpzhhLKRWGWbsx+giwK3Aiatb7yv3vbIo81V0RIFGx3 tvmRyT+td2glqteXMNg7j8y7nndzUNU= -----END CERTIFICATE-----Generated at Sun Jan 25 16:00:57 2026 by rpki-client