This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa File: 33db6407-ff15-3683-8991-2de945a25738.roa (raw, json) Hash identifier: lpdusw14FLoG1+ZU/3R/S8O2TekTyh3GGDxPh+h/+/s= Subject key identifier: 6F:41:86:F4:96:45:41:63:87:44:99:DF:36:05:DE:95:A8:3D:C2:F6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C59313E8EDC61AA0B7E812200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 203 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:3e:8e:dc:61:aa:0b:7e:81:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=5784dfcf-9871-4816-9bc1-b1e3475ab608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:05:3a:ce:6e:12:3b:e4:9a:46:9f:f3:7a: 50:0e:08:08:93:54:d3:53:5d:05:34:19:09:8d:36: 59:d6:55:92:15:5c:0e:e9:08:61:85:e9:85:cb:e8: 1b:28:5e:6e:bc:35:8e:5b:20:ca:00:a1:2a:46:65: bf:2e:d6:d3:08:da:44:d2:c0:00:c9:f7:a0:9a:6f: a7:3b:6f:f4:0e:f3:f0:7a:aa:2f:33:f4:d6:58:f1: 39:1d:e8:ff:1c:60:9d:99:4e:67:07:49:77:d6:ea: 0a:d4:4d:ea:bb:1e:62:2d:6b:d2:8c:06:53:f1:21: 7d:6a:84:db:1c:08:1b:d1:1b:31:5c:98:8c:1f:c3: fa:a1:d3:8f:4a:13:23:2e:f5:b5:41:af:bf:e0:b8: 81:28:78:0a:ee:f5:21:46:2d:5e:06:10:eb:47:bb: 85:fc:f9:27:06:10:05:74:13:8c:a1:55:b6:6b:00: b0:84:03:1d:3a:b0:a4:1f:bf:41:74:58:67:e7:89: ca:cf:f6:0d:15:8e:dc:87:dc:de:58:0b:20:ad:f2: 28:74:1a:34:db:65:d0:2a:42:9e:d2:10:b0:79:0c: 68:3d:fb:53:fe:ab:eb:41:b8:7e:44:81:30:1e:f9: ee:25:37:f7:81:2a:02:e5:e7:40:34:a3:59:7d:32: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:86:F4:96:45:41:63:87:44:99:DF:36:05:DE:95:A8:3D:C2:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a6:e9:44:b3:75:0e:c4:f2:5a:14:31:76:13:da:7c:41:c5: 36:3f:e2:bb:2a:4b:4f:f7:e7:b6:1c:9d:9e:f3:10:37:dd:bf: 43:8b:13:0e:d9:e1:14:31:9a:67:a7:6c:22:81:e1:72:ff:5b: 14:82:41:be:08:fd:08:63:96:6b:34:37:4f:21:f8:47:5b:8d: a6:4f:2e:b9:cb:ea:aa:92:fa:10:4d:06:dc:7c:00:07:de:30: ea:99:ea:05:cd:06:95:b0:d1:cc:80:5f:0d:34:e5:20:82:d1: ae:5b:0f:87:82:1b:27:0b:bf:f8:3d:49:b0:5d:b6:26:ab:6f: ca:c5:e3:18:b5:4b:a7:46:11:c3:b2:af:e2:c4:2d:7e:34:a4: d2:2d:cc:f5:16:f2:82:45:41:68:64:3f:32:26:a5:1b:2b:3e: 2e:fa:40:13:29:f1:12:4f:78:d1:82:cb:3a:93:e8:c4:24:36: 87:7e:24:ef:60:5c:cb:c0:f3:b0:a0:61:a5:89:8e:59:68:be: 7b:d1:b4:2b:11:17:72:b8:2c:bb:05:d8:de:8d:e5:7f:f8:bc: f7:4c:15:8e:7e:96:de:d9:29:7a:23:50:20:55:53:8f:ce:48: 38:07:b0:f8:33:fd:01:26:5a:a9:87:8a:3b:4f:0c:18:4e:23: d6:84:5d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMT6O3GGqC36BIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk NTc4NGRmY2YtOTg3MS00ODE2LTliYzEtYjFlMzQ3NWFiNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor8FOs5uEjvkmkaf83pQDggIk1TTU10FNBkJ jTZZ1lWSFVwO6QhhhemFy+gbKF5uvDWOWyDKAKEqRmW/LtbTCNpE0sAAyfegmm+n O2/0DvPweqovM/TWWPE5Hej/HGCdmU5nB0l31uoK1E3qux5iLWvSjAZT8SF9aoTb HAgb0RsxXJiMH8P6odOPShMjLvW1Qa+/4LiBKHgK7vUhRi1eBhDrR7uF/PknBhAF dBOMoVW2awCwhAMdOrCkH79BdFhn54nKz/YNFY7ch9zeWAsgrfIodBo022XQKkKe 0hCweQxoPftT/qvrQbh+RIEwHvnuJTf3gSoC5edANKNZfTJz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9BhvSWRUFjh0SZ3zYF3pWoPcL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzNkYjY0MDctZmYxNS0z NjgzLTg5OTEtMmRlOTQ1YTI1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqm6USzdQ7E8loUMXYT2nxBxTY/4rsqS0/357YcnZ7zEDfdv0OLEw7Z 4RQxmmenbCKB4XL/WxSCQb4I/Qhjlms0N08h+EdbjaZPLrnL6qqS+hBNBtx8AAfe MOqZ6gXNBpWw0cyAXw005SCC0a5bD4eCGycLv/g9SbBdtiarb8rF4xi1S6dGEcOy r+LELX40pNItzPUW8oJFQWhkPzImpRsrPi76QBMp8RJPeNGCyzqT6MQkNod+JO9g XMvA87CgYaWJjllovnvRtCsRF3K4LLsF2N6N5X/4vPdMFY5+lt7ZKXojUCBVU4/O SDgHsPgz/QEmWqmHijtPDBhOI9aEXSQ= -----END CERTIFICATE-----Generated at Thu Jan 22 09:54:25 2026 by rpki-client