This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa File: dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa (raw, json) Hash identifier: /DdgbzGn7ieDmojGLWXI6kS9P5xzNGKG1UACNF177cE= Subject key identifier: 4E:16:4F:C5:83:1A:8D:53:C0:AA:6F:21:4F:58:BE:BC:EA:F3:AD:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7755700A52862AA7D5800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:75:57:00:a5:28:62:aa:7d:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b8f7016c-c79d-4136-a900-d0df69957ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:e0:64:a2:fc:33:eb:a1:26:ad:48:1c:51: 3d:1e:29:7c:06:de:25:b0:c3:89:84:6e:8e:0b:7d: 7b:17:cc:59:40:46:95:69:d4:07:49:63:14:67:1a: d5:1f:43:18:62:77:88:f0:6c:52:56:f1:42:fa:50: ad:69:4c:21:65:78:f0:d6:0f:7b:2e:6b:cd:07:49: 07:78:f4:22:84:87:65:6b:23:db:76:7e:46:d2:c8: 72:df:ea:ed:2c:6c:66:4e:ec:18:c0:60:aa:7d:40: 58:b7:e2:a8:0e:67:d7:12:8f:6d:1a:23:9a:4c:93: 61:2b:45:c4:0d:78:32:20:4a:76:3f:64:ce:b9:fb: f4:83:f8:b7:2f:00:34:c2:09:f0:6d:75:98:06:6b: eb:7a:dc:26:2b:4f:18:e9:09:f3:c8:8e:d1:01:e0: 50:4e:22:1f:fa:be:8c:36:3f:10:b3:55:24:21:eb: 39:31:f7:b7:d7:8c:22:c1:e8:4f:12:94:e5:25:41: a6:db:03:7c:cb:53:50:cd:2a:a2:47:7d:33:71:95: c9:ca:b7:bb:ac:b3:55:1b:05:ed:8a:18:9e:cf:8d: 0f:e9:27:b6:e0:d4:40:98:59:ab:03:94:30:ce:67: bd:72:dd:d9:df:25:18:76:de:04:2a:18:b2:82:cd: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:4F:C5:83:1A:8D:53:C0:AA:6F:21:4F:58:BE:BC:EA:F3:AD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:46:53:1e:33:61:42:81:45:6e:0a:cf:be:5d:04:5e:9f:f9: 27:96:08:bc:50:07:cf:36:52:33:08:dd:13:22:92:7b:1f:a8: 38:5b:f1:63:8f:a5:c2:87:1c:cb:6e:92:55:b9:76:5a:a4:1d: 42:b6:18:1c:9e:ed:b0:cb:21:e0:62:70:d3:68:5b:f5:88:38: 87:b2:9b:52:21:92:07:01:85:4f:b7:ae:d0:53:84:af:00:31: 24:d9:05:d6:48:df:a6:b6:60:ba:ab:cf:a3:ee:29:be:26:d8: a0:1b:79:00:9e:19:51:a9:67:42:13:79:85:31:0b:0b:51:b2: d7:f2:f8:39:23:c6:d2:9d:91:ba:09:88:e6:a6:66:ff:33:7d: 03:9b:54:39:36:63:23:c7:4e:aa:cc:2d:7b:92:1b:7c:f0:16: d7:98:33:20:a9:d8:55:e7:58:de:07:81:18:de:f1:96:8d:67: 1f:3d:c2:ec:2d:83:96:7a:bc:4c:26:60:50:63:29:dc:3e:cd: 53:0d:c5:cd:70:40:bf:4e:4c:e1:e5:0f:51:c0:3b:6e:1f:6d: 31:eb:b4:ec:20:7b:a7:1c:9c:22:32:ef:76:8f:a5:58:32:b2: 41:aa:76:3b:48:e9:1b:4c:f4:e2:33:d3:15:5c:e4:c7:68:43: 12:60:b5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp3VXAKUoYqp9WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YjhmNzAxNmMtYzc5ZC00MTM2LWE5MDAtZDBkZjY5OTU3YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutXgZKL8M+uhJq1IHFE9Hil8Bt4lsMOJhG6O C317F8xZQEaVadQHSWMUZxrVH0MYYneI8GxSVvFC+lCtaUwhZXjw1g97LmvNB0kH ePQihIdlayPbdn5G0shy3+rtLGxmTuwYwGCqfUBYt+KoDmfXEo9tGiOaTJNhK0XE DXgyIEp2P2TOufv0g/i3LwA0wgnwbXWYBmvretwmK08Y6QnzyI7RAeBQTiIf+r6M Nj8Qs1UkIes5Mfe314wiwehPEpTlJUGm2wN8y1NQzSqiR30zcZXJyre7rLNVGwXt ihiez40P6Se24NRAmFmrA5Qwzme9ct3Z3yUYdt4EKhiygs1GmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4WT8WDGo1TwKpvIU9Yvrzq863QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQxZGJhMGUtZjY0MS0z ZTRiLWExNWYtODU2Yjg1MmNmMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtGUx4zYUKBRW4Kz75dBF6f+SeWCLxQB882UjMI3RMiknsfqDhb8WOP pcKHHMtuklW5dlqkHUK2GBye7bDLIeBicNNoW/WIOIeym1IhkgcBhU+3rtBThK8A MSTZBdZI36a2YLqrz6PuKb4m2KAbeQCeGVGpZ0ITeYUxCwtRstfy+DkjxtKdkboJ iOamZv8zfQObVDk2YyPHTqrMLXuSG3zwFteYMyCp2FXnWN4HgRje8ZaNZx89wuwt g5Z6vEwmYFBjKdw+zVMNxc1wQL9OTOHlD1HAO24fbTHrtOwge6ccnCIy73aPpVgy skGqdjtI6RtM9OIz0xVc5MdoQxJgtXM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:29:14 2026 by rpki-client