This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3531ffe-605f-35af-9ff5-c15d70405a20.roa File: a3531ffe-605f-35af-9ff5-c15d70405a20.roa (raw, json) Hash identifier: aDl+IYO5SXDxnxxAHDmZeAedSa9e7N8sZyFBWFqv7Ng= Subject key identifier: 71:2A:5D:CC:BB:89:FC:F9:41:DD:FA:61:AD:8D:93:F1:98:AA:CE:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A7B9A13305A1E9BA4B6440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3531ffe-605f-35af-9ff5-c15d70405a20.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 172.242.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:b9:a1:33:05:a1:e9:ba:4b:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=ff2449ce-c443-48c8-82ab-f29f3aae0348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:33:28:a3:c6:33:6f:1a:49:7c:1c:b6:58:f5: 2b:49:b1:2f:d4:f1:49:a1:fb:dd:9f:59:4e:93:98: 91:a2:23:36:ce:d2:12:16:3e:db:cc:ed:2f:e9:a6: e4:ce:aa:ca:6f:56:fe:1e:50:4d:d2:f5:9a:d2:f8: e2:0c:f8:ee:50:35:db:46:96:d9:c9:4b:22:39:92: f4:9a:b8:c8:7b:ed:b8:59:6c:2c:a7:7e:bb:34:e9: 87:93:cf:de:2c:fb:e7:aa:95:21:bc:e9:9f:6a:e3: 76:47:8a:da:e0:9f:2d:af:45:ff:e7:0f:f3:34:25: b6:39:0e:74:64:e3:a5:11:7a:78:99:9e:a5:d8:86: 50:b4:d7:aa:42:a5:d7:12:ea:88:2d:46:38:48:a6: d0:03:75:36:bc:dc:07:ff:d8:e8:d2:cb:76:7c:e4: b7:19:5a:62:24:25:f8:a3:b0:e1:af:12:3f:fc:36: ea:da:11:fe:cb:df:18:d4:68:d0:ac:1d:04:86:dc: 8c:f2:4f:ce:b9:c5:03:7a:89:bf:52:26:01:cf:fe: 8e:bb:eb:67:fb:89:c1:c2:7e:5f:3a:18:2c:80:d7: a2:9a:eb:2d:fe:ae:99:5b:a6:a2:10:07:48:26:2c: e5:47:f2:90:56:4b:7e:1b:ac:e9:3e:24:b5:35:bc: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2A:5D:CC:BB:89:FC:F9:41:DD:FA:61:AD:8D:93:F1:98:AA:CE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3531ffe-605f-35af-9ff5-c15d70405a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:83:73:e8:9f:5c:51:3a:65:38:5d:07:20:26:02:ba:f2:54: f0:68:18:05:2f:51:49:6f:7d:67:08:a2:59:64:22:72:16:5c: e6:ab:22:b5:ba:dc:02:ad:6e:6c:1e:7a:93:16:0e:ce:39:68: d2:8e:44:a6:9f:c1:68:36:ca:db:d1:da:54:df:3b:dd:3d:3a: c5:27:1b:88:fd:f5:02:f5:4c:eb:4e:5b:d6:79:29:f6:c2:9d: ce:67:f6:e7:a6:7b:0f:06:6b:fa:38:58:2b:85:a5:ce:54:5e: c1:bc:ba:b8:7e:4a:c4:fb:db:53:3b:db:c3:7b:14:98:fb:7f: 10:c7:db:46:24:be:57:36:27:f1:ef:31:3b:37:37:52:dd:88: a3:45:70:b0:ec:ed:d9:80:fa:a4:41:e9:e9:67:ee:70:e9:8b: 03:02:dc:09:8b:53:c8:05:85:65:bb:c2:13:61:04:fd:8f:37: ab:88:98:f9:8c:9a:97:2f:e0:78:f1:ed:0f:ab:c6:dc:87:47: 26:f9:0a:36:07:a8:f8:08:40:43:14:fa:d3:0f:74:d2:aa:ab: 35:83:8f:ff:fe:32:a3:72:d9:a0:a1:2e:3e:14:92:2c:e6:4c: 30:77:96:12:d4:88:ae:2c:28:ac:91:59:50:a8:37:3b:c1:41: 9f:a3:60:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp7mhMwWh6bpLZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZmYyNDQ5Y2UtYzQ0My00OGM4LTgyYWItZjI5ZjNhYWUwMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zMoo8YzbxpJfBy2WPUrSbEv1PFJofvdn1lO k5iRoiM2ztISFj7bzO0v6abkzqrKb1b+HlBN0vWa0vjiDPjuUDXbRpbZyUsiOZL0 mrjIe+24WWwsp367NOmHk8/eLPvnqpUhvOmfauN2R4ra4J8tr0X/5w/zNCW2OQ50 ZOOlEXp4mZ6l2IZQtNeqQqXXEuqILUY4SKbQA3U2vNwH/9jo0st2fOS3GVpiJCX4 o7DhrxI//Dbq2hH+y98Y1GjQrB0EhtyM8k/OucUDeom/UiYBz/6Ou+tn+4nBwn5f OhgsgNeimust/q6ZW6aiEAdIJizlR/KQVkt+G6zpPiS1NbzxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEqXcy7ifz5Qd36Ya2Nk/GYqs74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTM1MzFmZmUtNjA1Zi0z NWFmLTlmZjUtYzE1ZDcwNDA1YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGDc+ifXFE6ZThdByAmArryVPBoGAUvUUlvfWcIollkInIWXOarIrW6 3AKtbmweepMWDs45aNKORKafwWg2ytvR2lTfO909OsUnG4j99QL1TOtOW9Z5KfbC nc5n9uemew8Ga/o4WCuFpc5UXsG8urh+SsT721M728N7FJj7fxDH20Ykvlc2J/Hv MTs3N1LdiKNFcLDs7dmA+qRB6eln7nDpiwMC3AmLU8gFhWW7whNhBP2PN6uImPmM mpcv4Hjx7Q+rxtyHRyb5CjYHqPgIQEMU+tMPdNKqqzWDj//+MqNy2aChLj4Ukizm TDB3lhLUiK4sKKyRWVCoNzvBQZ+jYNY= -----END CERTIFICATE-----Generated at Tue Jan 27 04:33:00 2026 by rpki-client