This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa
File: 38432c1c-cf0c-3467-9f51-62e4ba11f084.roa (raw, json)
Hash identifier: CA7QY+KVQVUk6jrxBcQ1FmQrhNBaYqqGusEvk/D3d0o=
Subject key identifier: 27:25:F3:60:2B:AC:C8:55:F2:54:8A:A3:F7:6D:76:A7:B7:05:EF:CF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A6C3FC6B4180A3DC410500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 7155
IP address blocks: 72.173.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:c3:fc:6b:41:80:a3:dc:41:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=150d1607-ad68-4bb4-a478-5b7eabbdccd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:93:24:75:3e:cb:34:1e:4f:4d:33:6b:3b:
6e:4f:91:ea:c4:76:e6:76:33:cb:fb:58:71:0e:12:
d4:28:ad:10:af:b6:b7:73:43:e3:18:17:14:0a:65:
67:82:f0:24:43:76:53:61:33:d3:67:be:1f:3d:b2:
99:4c:38:c6:06:fc:f2:6c:d2:a3:f2:ef:4b:29:f0:
cf:a9:04:b6:6f:28:64:a5:07:e8:04:1d:14:0e:8d:
5a:75:dc:64:bd:02:f7:5c:af:30:5b:ab:a1:04:1e:
7e:d8:6d:ec:38:7f:95:64:ce:df:e3:85:51:c3:dc:
0b:d0:c5:93:93:13:a8:32:89:65:fc:86:be:41:54:
85:bb:dd:c7:75:08:a5:b8:e5:4b:41:b2:e2:d0:51:
bd:a8:86:08:20:a8:a7:6b:41:3c:c9:75:88:92:a9:
52:98:5f:4d:e4:88:6e:05:29:11:b7:5b:c7:4d:8b:
a3:02:2a:28:2d:42:8d:68:a9:c5:64:e5:53:fb:9a:
c9:63:41:ad:95:eb:4c:ba:a4:71:d2:da:ac:97:d2:
6e:db:0b:23:77:9f:f5:aa:e5:28:1d:14:96:60:72:
e3:21:09:14:77:bb:c9:44:cf:77:ab:6b:59:66:73:
68:69:78:87:eb:49:08:0b:e7:a6:1d:90:2d:12:d1:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:F3:60:2B:AC:C8:55:F2:54:8A:A3:F7:6D:76:A7:B7:05:EF:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:97:d3:f6:5e:6d:2e:f7:b9:14:57:eb:6a:50:b2:9c:4e:db:
c9:d4:91:0e:9e:a2:16:85:e0:6a:5d:e5:b8:d6:79:a3:cb:69:
84:5f:bf:fd:2c:03:92:2f:a1:b2:49:0d:95:1d:46:1e:12:ac:
48:be:90:ca:62:7e:7c:a7:99:99:e3:99:49:25:42:43:1f:f4:
ce:a4:38:36:e2:88:c6:f7:e4:c4:5a:dc:66:5f:a2:71:88:6b:
f8:58:65:bd:93:62:60:ac:64:36:8f:01:56:85:b1:c1:fc:2b:
18:64:cb:1e:1b:05:c4:cb:b8:b2:32:ce:9e:cc:89:95:43:5b:
f2:16:7b:ee:bd:6b:54:99:08:d0:a1:46:f7:d4:5a:a6:f1:2c:
f2:8a:97:63:5d:2d:ed:7d:f1:83:ac:5c:8d:41:15:f4:ea:65:
df:30:06:19:b6:fc:fb:43:ae:86:58:91:36:9d:3b:23:f2:d3:
d9:46:22:d7:fe:60:81:c2:15:10:91:87:a2:03:1a:6c:d5:c9:
00:a9:5d:9d:ea:d4:c1:22:2a:f8:c5:fc:63:ec:6f:e7:0f:fc:
e0:d1:09:94:e2:64:71:93:76:d9:af:f9:c0:3b:1d:31:32:ad:
36:2d:ef:35:cd:be:26:bf:c9:23:06:f7:3f:14:ef:9e:58:a8:
03:f2:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:30:07 2026 by rpki-client