This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa File: dffb8d64-fd82-302e-ada2-5e3a69317b50.roa (raw, json) Hash identifier: aPqtrtKY+QBh0i+qzLpo61501Ub3i19a10rIUzrdkiU= Subject key identifier: 36:C5:C7:D3:E2:07:E5:3B:3C:AC:7E:BA:40:74:09:6E:32:9A:09:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584C45A731CED386F69A411B2B40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 7155 IP address blocks: 198.45.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:31:ce:d3:86:f6:9a:41:1b:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3762d90b-2f6c-4040-b06d-8c4feb6ec4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:7a:d0:38:52:40:45:db:69:49:49:5a:be: 09:57:1b:ee:21:bf:f7:8b:db:3d:ee:89:dc:09:20: da:55:0d:51:9a:a2:42:04:cc:32:08:dd:9e:ae:ef: ab:2e:87:74:bf:0d:b7:a8:96:f4:2f:46:2e:2b:99: 98:13:f4:73:ff:2e:b0:1d:98:e8:3b:65:37:67:c2: 76:1f:0e:36:e3:55:f9:7e:7f:fa:d6:50:d7:08:f5: 2e:bd:5a:1b:9e:b1:de:be:73:cb:d4:2b:fe:2c:fb: 40:39:90:5c:4f:01:02:b5:16:08:c0:7c:a3:4b:9d: 1f:97:ba:cb:13:77:0e:d5:19:00:90:95:88:12:ee: 0a:b0:07:03:b0:e2:b0:78:7f:09:5e:48:16:fb:28: b5:32:e9:64:33:ce:90:a0:f3:2a:57:42:ae:46:56: c8:02:88:fe:98:0f:cc:0e:7b:69:19:4d:2a:e9:f9: 0f:0d:f0:f9:dc:66:cd:2e:28:21:ee:b9:ce:7f:9c: 03:a8:e1:15:bd:8e:54:af:31:90:8a:db:67:ac:b7: e0:bc:d9:6a:24:44:5c:3e:7d:17:e3:0b:b3:7f:b4: 57:91:42:72:8d:32:54:ee:90:a0:db:5d:83:a9:8e: e1:70:4a:58:f8:72:ff:e5:96:3c:ba:ab:77:24:77: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:C7:D3:E2:07:E5:3B:3C:AC:7E:BA:40:74:09:6E:32:9A:09:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6c:2b:34:fb:4e:e7:87:c7:06:d5:0b:94:5f:14:45:67:40: d7:f4:09:8f:a5:05:97:b8:24:6f:d2:0f:73:16:30:60:ff:bc: 95:2b:63:db:0f:89:77:35:2e:6b:3f:df:e3:cf:84:1b:ef:43: 2d:ab:e0:1e:9b:3a:17:ca:09:44:2c:6d:2b:bf:1f:c6:e6:1c: 44:99:09:ad:45:ce:f8:31:09:01:b3:04:d4:b0:85:91:af:c1: ca:6e:52:30:3b:f7:9a:c5:a6:a4:9e:45:af:58:8f:ff:7c:a2: 1a:c4:c1:cc:a8:ea:43:ea:06:79:4a:ee:66:2e:dc:e4:3e:da: dd:1e:0e:e3:31:9b:b7:ea:a4:03:c0:2d:f6:07:cd:18:ae:12: 5a:52:c0:03:b0:35:50:09:38:8f:dc:6b:95:f8:b4:3d:e6:3c: 80:10:c9:0e:6b:1b:1c:3b:27:b4:fc:ca:9f:b1:09:81:e4:a2: f4:9f:a8:0b:51:7f:93:82:05:4e:11:3a:e2:e3:0b:3e:0f:d9: 2a:1a:41:a8:4f:0c:db:e9:6b:c5:88:3d:74:eb:93:6e:eb:c9: 8d:7f:3c:de:44:48:f0:88:10:8e:94:ed:24:da:bc:64:cc:9d: 03:63:3f:cb:22:9e:1d:bf:e4:f6:9d:c7:83:6e:33:40:98:51: 18:b8:15:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpzHO04b2mkEbK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Mzc2MmQ5MGItMmY2Yy00MDQwLWIwNmQtOGM0ZmViNmVjNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuF60DhSQEXbaUlJWr4JVxvuIb/3i9s97onc CSDaVQ1RmqJCBMwyCN2eru+rLod0vw23qJb0L0YuK5mYE/Rz/y6wHZjoO2U3Z8J2 Hw4241X5fn/61lDXCPUuvVobnrHevnPL1Cv+LPtAOZBcTwECtRYIwHyjS50fl7rL E3cO1RkAkJWIEu4KsAcDsOKweH8JXkgW+yi1MulkM86QoPMqV0KuRlbIAoj+mA/M DntpGU0q6fkPDfD53GbNLigh7rnOf5wDqOEVvY5UrzGQittnrLfgvNlqJERcPn0X 4wuzf7RXkUJyjTJU7pCg212DqY7hcEpY+HL/5ZY8uqt3JHe/kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbFx9PiB+U7PKx+ukB0CW4ymgljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZmYjhkNjQtZmQ4Mi0z MDJlLWFkYTItNWUzYTY5MzE3YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9sKzT7TueHxwbVC5RfFEVnQNf0CY+lBZe4JG/SD3MWMGD/vJUrY9sP iXc1Lms/3+PPhBvvQy2r4B6bOhfKCUQsbSu/H8bmHESZCa1FzvgxCQGzBNSwhZGv wcpuUjA795rFpqSeRa9Yj/98ohrEwcyo6kPqBnlK7mYu3OQ+2t0eDuMxm7fqpAPA LfYHzRiuElpSwAOwNVAJOI/ca5X4tD3mPIAQyQ5rGxw7J7T8yp+xCYHkovSfqAtR f5OCBU4ROuLjCz4P2SoaQahPDNvpa8WIPXTrk27ryY1/PN5ESPCIEI6U7STavGTM nQNjP8sinh2/5Padx4NuM0CYURi4FUQ= -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:26 2026 by rpki-client