This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa File: 083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa (raw, json) Hash identifier: Q7R2QglmjmZXDS0w0VLUXKgX+znvxeEelbPi6Xjo1A4= Subject key identifier: CF:82:DE:E0:AF:4A:31:0B:A0:3B:47:0C:CB:04:85:51:2E:B7:0D:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A705D59759E6D59A357A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.243.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:05:d5:97:59:e6:d5:9a:35:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=38e7e855-635d-4af7-8535-1a32df94fc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:f0:bd:f5:eb:31:e1:ce:fd:65:ba:c6:26: d3:ce:58:6c:27:41:7d:b7:2b:50:61:80:e5:75:b4: 4e:67:44:6f:55:c5:bd:ba:12:f4:ea:8e:1e:d7:7b: 82:85:45:7b:8a:14:b8:50:7b:b6:fa:76:9d:2c:a1: 4b:73:57:3e:40:fd:d2:d2:d6:22:3d:4d:bb:a9:cd: 9f:bd:3e:50:cd:64:0d:90:c6:e0:4f:16:9a:f5:54: 13:2e:e5:2d:4c:c2:84:65:b7:62:3a:87:8a:3c:58: 6b:44:6f:4b:fd:33:e7:ca:68:d4:d1:86:ec:33:79: c7:4f:96:e1:98:93:de:ff:f4:ee:e1:30:aa:06:0f: c8:92:d8:47:c5:32:d8:b7:97:99:af:c5:d1:c4:3a: a4:d3:d9:ed:64:f6:3d:84:a2:89:09:c3:8a:df:e1: 7f:2d:bd:f9:5f:1b:6f:70:7d:6a:76:d5:89:ff:69: 4a:19:e1:d0:44:e7:ce:f6:86:87:7f:25:ed:e3:2c: 2b:6b:a4:a5:ff:ee:0b:07:91:aa:a3:8e:2d:dd:43: 02:e2:f3:7b:ba:54:08:b4:cf:d1:c3:28:a6:3c:23: d0:05:5b:04:ed:e4:92:f2:d8:3e:5c:95:5d:a1:11: 50:34:b5:4c:b7:11:76:7a:d1:c2:e1:4e:86:51:78: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:82:DE:E0:AF:4A:31:0B:A0:3B:47:0C:CB:04:85:51:2E:B7:0D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:19:33:3c:04:b2:4b:7f:1b:ae:52:4f:54:9b:c3:71:2e:66: b5:3d:5d:6e:bc:88:7d:80:88:e1:37:be:b2:48:9f:48:25:12: bc:aa:f2:51:d7:5d:68:2a:a3:c1:5a:c8:8f:14:80:b6:c8:7f: 5b:00:2f:9a:88:05:16:6e:3d:6c:41:4b:cf:f4:23:56:8b:ca: be:e2:b3:62:f7:42:47:62:4b:a3:de:19:7d:89:f8:74:bf:ad: 1e:31:70:4c:dd:97:b5:e3:d1:a5:87:99:b7:f4:54:0b:ad:6f: 1c:be:d4:a6:66:53:24:37:87:e5:ca:ef:85:c1:1b:7b:ab:aa: 0b:e3:0c:0c:fe:42:bb:44:54:78:2d:cd:ac:91:bd:d5:a2:fd: 6e:6d:52:3a:2b:14:97:37:10:6b:77:aa:9d:f9:61:e1:48:ad: c4:56:1f:25:cc:8e:a2:39:b3:8a:60:41:f8:d3:ab:aa:eb:d4: 32:dd:87:ac:58:ad:96:b2:f6:1e:b2:14:3b:ea:4d:f2:f6:09: b3:06:00:6c:f9:41:ce:88:47:b8:b9:c0:ba:ff:56:4c:c5:30: be:38:fa:eb:5e:e8:a1:9a:f6:92:27:c0:b6:c9:f6:82:8a:53: 3e:79:6f:a0:59:75:2d:10:eb:20:3d:96:42:ab:aa:f0:39:c8: a2:a3:d3:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpwXVl1nm1Zo1eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MzhlN2U4NTUtNjM1ZC00YWY3LTg1MzUtMWEzMmRmOTRmYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM/wvfXrMeHO/WW6xibTzlhsJ0F9tytQYYDl dbROZ0RvVcW9uhL06o4e13uChUV7ihS4UHu2+nadLKFLc1c+QP3S0tYiPU27qc2f vT5QzWQNkMbgTxaa9VQTLuUtTMKEZbdiOoeKPFhrRG9L/TPnymjU0YbsM3nHT5bh mJPe//Tu4TCqBg/IkthHxTLYt5eZr8XRxDqk09ntZPY9hKKJCcOK3+F/Lb35Xxtv cH1qdtWJ/2lKGeHQROfO9oaHfyXt4ywra6Sl/+4LB5Gqo44t3UMC4vN7ulQItM/R wyimPCPQBVsE7eSS8tg+XJVdoRFQNLVMtxF2etHC4U6GUXi4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+C3uCvSjELoDtHDMsEhVEutw3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDgzYzEwZjItMWFkOS0z NDkxLTlhMzUtNGNmMWEwYjI1ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcZMzwEskt/G65ST1Sbw3EuZrU9XW68iH2AiOE3vrJIn0glEryq8lHX XWgqo8FayI8UgLbIf1sAL5qIBRZuPWxBS8/0I1aLyr7is2L3QkdiS6PeGX2J+HS/ rR4xcEzdl7Xj0aWHmbf0VAutbxy+1KZmUyQ3h+XK74XBG3urqgvjDAz+QrtEVHgt zayRvdWi/W5tUjorFJc3EGt3qp35YeFIrcRWHyXMjqI5s4pgQfjTq6rr1DLdh6xY rZay9h6yFDvqTfL2CbMGAGz5Qc6IR7i5wLr/VkzFML44+ute6KGa9pInwLbJ9oKK Uz55b6BZdS0Q6yA9lkKrqvA5yKKj00Y= -----END CERTIFICATE-----Generated at Tue Jan 27 04:29:06 2026 by rpki-client