This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa File: 21249c04-184a-348a-8117-43a314e9ce2a.roa (raw, json) Hash identifier: V7URFF6e72LK4LpTB6MX1KCExDUmGn+Q4Tzp6ZDnOq0= Subject key identifier: E4:66:C8:3B:EC:A7:AB:8F:CE:8A:FD:F8:94:F9:C2:64:09:41:C7:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7030156A2359D0893CC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.242.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:03:01:56:a2:35:9d:08:93:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=73ee7c53-df94-4d54-9107-c525fa009725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:bb:be:a9:45:52:b1:68:42:d1:19:fa:13: 96:11:1c:d1:67:14:d7:90:7d:b2:57:e3:a4:87:77: 57:a4:11:60:72:73:6a:f5:eb:02:97:0a:27:8b:6d: 13:ff:09:c2:c3:ed:11:a0:d3:18:9b:8b:21:26:22: 1c:29:57:fd:2e:db:44:fe:74:53:9f:75:64:ed:aa: c4:a3:f5:7f:22:7f:b0:fd:f1:10:3e:37:7a:2d:27: fc:24:b0:37:1e:50:f9:1a:a5:7e:6f:49:d8:46:82: bb:60:cf:5a:18:f2:68:0b:48:db:7e:ab:a9:89:3a: bd:10:e0:02:77:f7:fa:75:a3:c3:b7:e7:06:cb:5e: 15:ff:f4:27:a6:d7:26:29:da:ba:0b:a5:6a:59:e8: b4:25:3a:95:61:40:97:76:45:2d:60:09:79:5f:fc: 2d:4a:74:a1:1b:cf:e7:e1:86:ef:a3:60:38:26:f9: 55:7d:8a:e4:b4:00:a8:6c:53:b4:98:44:e4:fa:10: 68:fb:61:f3:d4:b3:fd:02:bc:b6:01:a9:84:63:e9: ec:25:12:b5:23:5a:ad:fa:3c:de:c1:2d:ba:87:6c: bc:3a:41:21:4c:ef:b4:e0:99:43:a3:4c:10:52:5b: ba:8c:78:9a:ae:dd:4f:0a:0f:aa:91:3a:44:60:47: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:C8:3B:EC:A7:AB:8F:CE:8A:FD:F8:94:F9:C2:64:09:41:C7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:89:2a:91:bf:13:30:28:78:41:ac:c2:ab:cb:78:3b:3d:27: 84:52:b2:fa:cd:d2:a0:3f:b1:ce:49:b0:54:99:64:16:1a:8f: 3e:8d:31:4d:14:74:e9:5f:c4:d2:56:4a:ea:ce:f2:a2:d3:f4: 50:dd:5e:b1:46:6a:51:c5:d8:83:3c:e6:0b:13:2a:d0:78:28: eb:24:77:72:54:0e:2d:9f:39:e8:53:49:5a:bf:68:ba:d7:58: 6a:21:4e:94:a7:96:e9:0c:bf:27:bc:e9:04:9d:2a:ac:09:e5: 76:b9:72:8e:ce:5a:e8:93:40:5f:ba:58:90:6d:39:ff:9c:ae: 80:ce:c3:2c:d1:68:9c:b4:91:02:4b:94:46:85:4c:06:64:49: b7:cb:db:4f:8d:69:25:3d:d7:d2:dd:7b:cb:5e:6b:95:51:af: 34:bf:14:f7:9d:b6:f6:7f:55:9d:58:ab:b3:72:93:03:4d:a2: e1:ba:f8:16:6a:11:c2:1a:12:e0:e5:80:0e:0c:5b:49:67:2c: e6:b5:2d:65:4f:c1:3d:88:f2:71:c0:70:92:ca:6c:18:64:fc: 8c:4f:2f:9c:2c:7c:b2:de:7b:53:ad:25:d6:7f:a9:70:15:0a: 21:9f:5e:0d:75:b1:7c:d1:7d:fd:4e:ea:82:5e:f4:7e:6d:c0: 68:7a:a7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpwMBVqI1nQiTzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NzNlZTdjNTMtZGY5NC00ZDU0LTkxMDctYzUyNWZhMDA5NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDq7vqlFUrFoQtEZ+hOWERzRZxTXkH2yV+Ok h3dXpBFgcnNq9esClwoni20T/wnCw+0RoNMYm4shJiIcKVf9LttE/nRTn3Vk7arE o/V/In+w/fEQPjd6LSf8JLA3HlD5GqV+b0nYRoK7YM9aGPJoC0jbfqupiTq9EOAC d/f6daPDt+cGy14V//QnptcmKdq6C6VqWei0JTqVYUCXdkUtYAl5X/wtSnShG8/n 4Ybvo2A4JvlVfYrktACobFO0mETk+hBo+2Hz1LP9Ary2AamEY+nsJRK1I1qt+jze wS26h2y8OkEhTO+04JlDo0wQUlu6jHiart1PCg+qkTpEYEdawQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORmyDvsp6uPzor9+JT5wmQJQccNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjEyNDljMDQtMTg0YS0z NDhhLTgxMTctNDNhMzE0ZTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeJKpG/EzAoeEGswqvLeDs9J4RSsvrN0qA/sc5JsFSZZBYajz6NMU0U dOlfxNJWSurO8qLT9FDdXrFGalHF2IM85gsTKtB4KOskd3JUDi2fOehTSVq/aLrX WGohTpSnlukMvye86QSdKqwJ5Xa5co7OWuiTQF+6WJBtOf+croDOwyzRaJy0kQJL lEaFTAZkSbfL20+NaSU919Lde8tea5VRrzS/FPedtvZ/VZ1Yq7NykwNNouG6+BZq EcIaEuDlgA4MW0lnLOa1LWVPwT2I8nHAcJLKbBhk/IxPL5wsfLLee1OtJdZ/qXAV CiGfXg11sXzRff1O6oJe9H5twGh6p6w= -----END CERTIFICATE-----Generated at Tue Jan 27 02:55:43 2026 by rpki-client