This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa File: 0304701b-f7af-3dfb-8187-c57bac2f5c32.roa (raw, json) Hash identifier: DdNd6Xp2TagWriGLlcgvUce1DXkPFRyyEoTgxbxOX1E= Subject key identifier: 7B:EE:E0:88:1A:55:FE:3E:F7:76:31:26:5C:69:CB:D4:0D:92:0A:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A77539BA9253D0A95B4F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:75:39:ba:92:53:d0:a9:5b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=b5ee4471-e1e5-45b9-8c12-ab0b4e502ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:c6:fa:e7:63:51:6c:a0:de:bb:9e:fb:93: 9c:88:41:81:04:e0:12:37:5d:f3:85:5c:30:9e:97: e3:92:1e:e1:a9:68:95:8f:e6:cb:bf:4b:d0:e4:25: c6:c8:91:84:a6:09:77:48:3c:88:8a:99:11:c1:7e: 3c:52:e9:81:01:9a:63:c9:d0:84:56:16:1d:6d:62: 67:e1:68:1e:ff:be:35:42:b8:67:4b:00:c2:53:e9: 5d:a0:24:67:56:71:50:de:b7:fa:24:29:51:67:55: 84:ea:b7:da:e7:e5:fb:5a:c3:de:1b:65:89:f9:27: 46:2e:46:26:f3:c4:34:b0:49:a7:34:1f:52:f1:b8: c3:be:5d:dc:46:62:50:4a:2e:5a:38:26:c4:43:2c: d3:de:f4:8e:14:6e:a5:fa:d4:4a:81:07:79:e9:4e: d9:4f:42:96:c7:d7:25:78:49:19:ab:7c:ce:f8:58: d7:5b:7b:11:7a:15:1c:e8:15:22:23:c9:10:8d:76: 9d:52:6a:44:fe:c6:5d:d3:a8:df:fb:63:ea:be:3c: db:c9:69:ba:84:ff:ea:34:dd:1c:62:b6:93:e4:a4: ed:b9:51:b3:8e:69:91:82:9a:b9:d3:ab:24:1a:58: 3d:66:72:c6:e2:85:a1:d5:71:64:9d:c7:23:b8:f0: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EE:E0:88:1A:55:FE:3E:F7:76:31:26:5C:69:CB:D4:0D:92:0A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3b:ec:e7:6c:12:c5:07:66:20:d5:d7:bb:42:06:7f:76:3d: b4:ad:7e:47:cc:01:76:0a:cd:c0:66:5c:85:83:99:10:ed:c0: 6e:13:6f:20:e3:76:61:7f:3e:9d:7b:56:20:16:c2:bf:f6:74: 90:57:5a:1e:72:f0:14:ec:d7:21:3d:31:58:81:ea:54:d9:7a: 0b:d7:02:7d:3c:f5:2c:83:dd:7a:12:15:d4:40:65:8d:79:97: 6d:24:b7:db:94:2e:b0:c7:b3:1b:c3:3c:af:5f:f8:1d:01:f2: 02:f5:06:1d:ce:61:7d:b0:af:dc:ac:ad:6c:e9:0a:e9:35:19: 01:65:1a:3f:89:b0:4b:1a:a8:ba:a5:f1:a5:11:01:c0:1a:b9: e0:ef:b6:30:5b:4a:52:93:f4:f1:d9:58:ab:17:e4:a8:84:dc: bf:9d:3c:9c:4c:84:68:3c:a5:67:8c:bd:29:b8:1b:bf:d8:13: f9:3f:10:ff:d8:22:08:2b:ec:55:e2:3f:55:eb:81:12:21:b8: ef:d0:20:13:a1:ef:cb:0f:1c:f6:35:02:31:36:c6:1a:50:45: 85:ab:ee:c7:8e:27:12:2d:87:a3:89:b3:46:51:1b:0d:eb:cc: 80:f4:19:55:b2:9d:07:de:76:5f:33:89:a7:ca:49:e9:05:df: ff:aa:0c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp3U5upJT0KlbT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YjVlZTQ0NzEtZTFlNS00NWI5LThjMTItYWIwYjRlNTAyZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAjG+udjUWyg3rue+5OciEGBBOASN13zhVww npfjkh7hqWiVj+bLv0vQ5CXGyJGEpgl3SDyIipkRwX48UumBAZpjydCEVhYdbWJn 4Wge/741QrhnSwDCU+ldoCRnVnFQ3rf6JClRZ1WE6rfa5+X7WsPeG2WJ+SdGLkYm 88Q0sEmnNB9S8bjDvl3cRmJQSi5aOCbEQyzT3vSOFG6l+tRKgQd56U7ZT0KWx9cl eEkZq3zO+FjXW3sRehUc6BUiI8kQjXadUmpE/sZd06jf+2PqvjzbyWm6hP/qNN0c YraT5KTtuVGzjmmRgpq506skGlg9ZnLG4oWh1XFknccjuPAr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvu4IgaVf4+93YxJlxpy9QNkgo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDMwNDcwMWItZjdhZi0z ZGZiLTgxODctYzU3YmFjMmY1YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw77OdsEsUHZiDV17tCBn92PbStfkfMAXYKzcBmXIWDmRDtwG4TbyDj dmF/Pp17ViAWwr/2dJBXWh5y8BTs1yE9MViB6lTZegvXAn089SyD3XoSFdRAZY15 l20kt9uULrDHsxvDPK9f+B0B8gL1Bh3OYX2wr9ysrWzpCuk1GQFlGj+JsEsaqLql 8aURAcAaueDvtjBbSlKT9PHZWKsX5KiE3L+dPJxMhGg8pWeMvSm4G7/YE/k/EP/Y Iggr7FXiP1XrgRIhuO/QIBOh78sPHPY1AjE2xhpQRYWr7seOJxIth6OJs0ZRGw3r zID0GVWynQfedl8ziafKSekF3/+qDNU= -----END CERTIFICATE-----Generated at Tue Jan 27 02:54:59 2026 by rpki-client