This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa File: f99da527-b425-3438-91d1-aa255a3de285.roa (raw, json) Hash identifier: ULCRveFmeOtPyXP4odq03yCYQYK26ZpzJ+AHMybvigc= Subject key identifier: 20:8C:8E:31:B8:41:45:96:8E:0A:DD:6D:72:27:12:3D:C9:5A:C5:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A70CF98EA3E9F6C6C93400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.243.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:0c:f9:8e:a3:e9:f6:c6:c9:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1eff4c7d-5480-4b78-9deb-3951f1a8bfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:2a:0c:0a:9b:87:20:b7:71:02:12:90:0c: db:1e:cf:14:4e:b4:a4:4b:93:1a:7a:83:45:7d:a0: 8b:d8:7a:e3:53:28:2e:37:1e:c3:95:b0:7a:9f:cd: 4e:0e:db:dc:77:80:2f:3a:55:0e:9f:94:52:25:69: e2:20:96:2c:b6:47:8c:6a:86:04:f8:a1:c0:8f:de: 5e:a9:79:e9:e2:a5:d9:a9:58:fa:62:f8:3d:41:d0: 43:3d:3d:0f:7f:63:a1:b0:4c:fd:d7:bf:f4:2d:3a: b4:23:0f:e4:be:86:23:ec:d9:f5:75:07:4a:2c:52: c9:ad:cb:85:3f:6c:70:69:1f:5a:39:74:61:98:42: c8:a3:5c:2c:b8:97:51:4d:c7:18:6f:de:4d:85:15: 44:0a:59:a0:d1:96:c4:5b:15:b7:2a:54:9a:34:2a: a8:b4:6a:b6:b0:4c:e8:cc:07:d9:aa:78:da:f8:6e: 42:74:6b:5e:2c:7b:5f:59:f6:bf:0c:f2:eb:4b:11: 57:49:dd:77:72:b1:5e:ac:5d:31:7c:7b:04:f8:c1: db:bd:fc:2e:b8:0d:c0:98:11:60:78:77:99:d4:af: 88:aa:ab:a8:b6:d2:06:3f:e3:c6:cb:2c:3f:43:a6: 4f:ea:39:51:42:d1:96:a9:c1:c9:6f:67:a1:78:b2: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:8E:31:B8:41:45:96:8E:0A:DD:6D:72:27:12:3D:C9:5A:C5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:cb:50:de:36:a0:53:7f:b3:b7:1a:b9:25:96:84:ae:cc:d5: 5f:6c:bc:24:bc:ad:d7:e1:6d:c2:51:9c:d0:2d:81:b7:e6:fb: c9:b2:98:00:76:51:3e:6f:99:5a:6a:93:1b:53:52:d7:24:0f: 27:bf:82:72:d7:e5:64:1c:a4:33:0d:43:65:46:7c:2a:90:ca: 88:86:44:a2:4c:01:c1:2c:30:80:b4:c6:31:2f:fb:1e:a0:a0: b4:3e:39:66:cb:2e:23:06:62:72:15:f4:a5:72:ed:79:93:4c: f5:85:14:1b:dd:fc:2f:93:3a:ff:24:3d:f2:79:90:7d:9f:80: ba:0b:d6:9d:ee:ce:98:ad:23:b4:b2:47:b5:03:a1:20:be:7a: f9:3d:f1:7a:7d:81:4d:46:cc:f9:b1:d8:d8:df:9f:17:39:ba: df:d7:86:65:53:49:23:ed:33:17:ac:60:a5:a7:b9:69:08:49: dc:ab:65:a8:60:bc:db:dd:f8:af:74:82:f1:eb:d2:4a:6f:53: d7:b8:8d:f4:e5:f7:c0:24:2d:7d:bc:df:83:6b:54:8d:41:ce: 5b:66:cb:d3:3c:4e:7a:09:8e:df:73:55:02:15:02:d7:b0:2a: b8:e2:d1:a9:25:dd:26:64:f3:6b:a3:35:b7:8a:34:6b:c0:99: 2b:17:b8:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpwz5jqPp9sbJNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWVmZjRjN2QtNTQ4MC00Yjc4LTlkZWItMzk1MWYxYThiZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrIqDAqbhyC3cQISkAzbHs8UTrSkS5MaeoNF faCL2HrjUyguNx7DlbB6n81ODtvcd4AvOlUOn5RSJWniIJYstkeMaoYE+KHAj95e qXnp4qXZqVj6Yvg9QdBDPT0Pf2OhsEz917/0LTq0Iw/kvoYj7Nn1dQdKLFLJrcuF P2xwaR9aOXRhmELIo1wsuJdRTccYb95NhRVEClmg0ZbEWxW3KlSaNCqotGq2sEzo zAfZqnja+G5CdGteLHtfWfa/DPLrSxFXSd13crFerF0xfHsE+MHbvfwuuA3AmBFg eHeZ1K+IqquottIGP+PGyyw/Q6ZP6jlRQtGWqcHJb2eheLJJkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCMjjG4QUWWjgrdbXInEj3JWsVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjk5ZGE1MjctYjQyNS0z NDM4LTkxZDEtYWEyNTVhM2RlMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILLUN42oFN/s7cauSWWhK7M1V9svCS8rdfhbcJRnNAtgbfm+8mymAB2 UT5vmVpqkxtTUtckDye/gnLX5WQcpDMNQ2VGfCqQyoiGRKJMAcEsMIC0xjEv+x6g oLQ+OWbLLiMGYnIV9KVy7XmTTPWFFBvd/C+TOv8kPfJ5kH2fgLoL1p3uzpitI7Sy R7UDoSC+evk98Xp9gU1GzPmx2Njfnxc5ut/XhmVTSSPtMxesYKWnuWkISdyrZahg vNvd+K90gvHr0kpvU9e4jfTl98AkLX2834NrVI1Bzltmy9M8TnoJjt9zVQIVAtew Krji0akl3SZk82ujNbeKNGvAmSsXuLM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:54:14 2026 by rpki-client