This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: nBwRKzdUlzwAtOXNSknzDntaMY4sRtE/4d4qWY2ebog= Subject key identifier: D4:65:05:0D:FF:8C:EC:59:6F:7C:06:4D:C7:25:3B:32:AF:AE:06:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A6C217C7B3EBB0B8B90F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:c2:17:c7:b3:eb:b0:b8:b9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=2c1ccbb7-0cdd-4dda-95ca-e1a623759b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2d:12:d1:70:73:9d:19:39:37:95:9d:1d:27: a1:b6:d9:8f:95:8d:c4:03:77:3f:ed:03:37:49:c3: a5:e4:3a:fa:17:2b:6d:8e:40:54:24:e9:da:c6:2d: 54:26:29:6b:d2:93:f2:67:b7:61:55:04:ed:49:dc: 14:6a:7f:7d:8d:68:13:16:9c:8b:92:19:23:61:19: f0:f1:e3:4a:ff:13:d7:6e:9b:87:c5:26:09:21:d0: 24:d9:87:56:d4:10:d7:82:fe:47:1c:c2:91:04:e2: 6c:45:23:f5:2e:b9:43:ce:b1:49:58:22:96:b9:4c: be:8a:59:38:c3:8e:ff:3b:dc:e9:0c:7b:af:38:85: a0:d1:72:7e:89:74:bc:a2:b5:5a:9c:a6:63:70:b2: 0d:2f:11:e2:b8:ce:c2:d5:1c:04:1f:ba:ca:19:ad: dd:88:85:63:ab:a7:4b:12:ec:f4:6a:40:7e:06:c1: cb:e1:20:8b:ea:17:23:d9:93:bd:36:fa:2a:38:ae: ad:16:43:79:b5:65:df:f9:c6:eb:4b:48:13:76:2a: b4:86:af:99:52:d9:5e:7f:11:3b:43:f2:3c:f5:46: e4:38:b0:01:fb:f5:a9:21:db:d1:90:e7:02:02:a9: 69:4f:35:c3:bf:66:ea:82:0e:bb:47:60:d7:dc:f1: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:05:0D:FF:8C:EC:59:6F:7C:06:4D:C7:25:3B:32:AF:AE:06:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:f4:68:30:fa:a6:1b:7b:c5:94:5b:b2:51:aa:3e:5b:ec:2e: 73:97:95:b5:09:63:e0:2d:a7:f2:6c:7b:ec:24:85:15:37:2f: 23:90:e3:5e:90:af:f5:3d:0d:f9:1c:70:71:a8:b8:fe:c9:ac: ee:0a:f3:92:86:b2:e9:76:95:50:53:3c:5e:bb:f1:9e:78:c2: ed:72:eb:e4:9a:33:c8:dd:86:68:30:4b:5b:13:dc:8c:9a:2e: 78:d1:ab:11:59:3d:ab:43:54:a7:3f:52:ff:b8:90:7b:51:ac: 6e:44:e6:8c:0e:33:65:2a:e7:56:af:09:e7:e5:72:24:cd:a4: bd:7a:be:72:b5:c8:20:f4:61:f8:58:9f:d1:1b:0d:93:ba:db: 30:b5:13:2d:67:f3:ea:96:92:d4:b0:df:1e:ae:bf:c0:6a:36: 26:53:6a:eb:9f:34:16:11:40:7b:f9:c6:bd:36:b0:34:1c:8d: 83:de:dc:da:25:9a:f1:ea:70:df:ba:15:7f:16:fe:72:ad:ef: 71:ce:60:16:58:b3:a9:eb:cc:71:55:13:f5:cf:26:70:6c:ec: 15:b3:ff:64:96:ed:f0:dd:7f:0f:7f:7c:dc:2b:27:26:ce:d1: 76:fc:6f:6e:2c:fc:5f:8a:f4:2a:f6:54:5a:71:f6:36:92:c0: 5e:f0:8f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpsIXx7PrsLi5D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MmMxY2NiYjctMGNkZC00ZGRhLTk1Y2EtZTFhNjIzNzU5YjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC0S0XBznRk5N5WdHSehttmPlY3EA3c/7QM3 ScOl5Dr6FyttjkBUJOnaxi1UJilr0pPyZ7dhVQTtSdwUan99jWgTFpyLkhkjYRnw 8eNK/xPXbpuHxSYJIdAk2YdW1BDXgv5HHMKRBOJsRSP1LrlDzrFJWCKWuUy+ilk4 w47/O9zpDHuvOIWg0XJ+iXS8orVanKZjcLINLxHiuM7C1RwEH7rKGa3diIVjq6dL Euz0akB+BsHL4SCL6hcj2ZO9NvoqOK6tFkN5tWXf+cbrS0gTdiq0hq+ZUtlefxE7 Q/I89UbkOLAB+/WpIdvRkOcCAqlpTzXDv2bqgg67R2DX3PEUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRlBQ3/jOxZb3wGTcclOzKvrgYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAML0aDD6pht7xZRbslGqPlvsLnOXlbUJY+Atp/Jse+wkhRU3LyOQ416Q r/U9DfkccHGouP7JrO4K85KGsul2lVBTPF678Z54wu1y6+SaM8jdhmgwS1sT3Iya LnjRqxFZPatDVKc/Uv+4kHtRrG5E5owOM2Uq51avCeflciTNpL16vnK1yCD0YfhY n9EbDZO62zC1Ey1n8+qWktSw3x6uv8BqNiZTauufNBYRQHv5xr02sDQcjYPe3Nol mvHqcN+6FX8W/nKt73HOYBZYs6nrzHFVE/XPJnBs7BWz/2SW7fDdfw9/fNwrJybO 0Xb8b24s/F+K9Cr2VFpx9jaSwF7wjzk= -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:02 2026 by rpki-client