This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa File: 4dba33f7-3802-33de-a38e-8a950fe6b69a.roa (raw, json) Hash identifier: ejZvc5xADeNGgLyxpyw+6dwc1tAD3X6XJgPA0YiZaoc= Subject key identifier: 0C:85:8A:F9:B4:B0:97:7C:48:3E:85:E5:A4:AD:30:12:34:C8:5F:A5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584C1F19CD652360824CBD852E00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa Signing time: Mon 08 Dec 2025 18:36:41 +0000 ROA not before: Mon 08 Dec 2025 18:36:41 +0000 ROA not after: Sun 08 Mar 2026 17:36:41 +0000 asID: 396246 IP address blocks: 8.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:19:cd:65:23:60:82:4c:bd:85:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 8 18:36:41 2025 GMT Not After : Mar 8 17:36:41 2026 GMT Subject: CN=b770afc8-07bf-48d1-b4da-4c8d6264beb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:6d:c6:42:71:6c:63:b3:1c:35:aa:b1:94: d4:40:3d:20:42:29:03:9c:92:fd:79:fe:c5:fd:f0: a4:1b:e2:fe:6c:ea:ac:0a:94:95:67:ed:b9:4d:25: 4c:b2:a7:ab:d7:de:05:5b:bb:34:a9:a1:81:76:b1: 8d:40:9e:3f:a5:04:bb:63:b0:54:53:ce:8f:62:b5: fb:b0:19:b0:f9:94:ee:7e:fc:ec:83:45:0c:20:58: 17:3d:5a:c1:3d:a1:ab:b8:17:f1:6d:a2:6d:c6:da: 86:a5:b9:30:97:d0:d2:68:18:ca:f9:21:e9:46:23: 92:b5:fc:2b:b2:b0:61:61:ff:7c:9e:a3:9a:1f:8d: 84:69:00:a8:db:f8:2e:ee:af:81:8f:72:33:03:8f: a0:b4:f3:48:22:b5:6e:82:c9:5b:9b:90:eb:5b:6e: be:85:45:a4:b6:a3:d1:f6:67:49:e3:7f:0f:19:f8: 73:4a:2c:af:a5:02:65:7b:ae:fe:37:74:fd:ac:63: 89:10:f2:3d:f5:d6:15:49:28:22:54:17:68:33:5f: da:2b:a5:e3:3b:bc:58:e0:18:b4:44:5d:90:e8:c1: 1c:ea:f4:1c:d7:f9:64:f8:c8:b5:e4:fd:af:17:f2: 9e:6a:f4:9b:69:c3:de:47:d6:7f:9f:9a:4c:d4:71: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:85:8A:F9:B4:B0:97:7C:48:3E:85:E5:A4:AD:30:12:34:C8:5F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1a:dd:10:23:8f:7f:06:e5:e4:53:a5:26:c0:7e:6e:07:83: 31:57:ef:88:fb:e5:6c:a1:1b:d7:f3:51:c8:95:dd:ba:21:7a: a2:81:f8:88:d2:72:a0:26:5d:f8:0a:6b:50:19:0d:91:28:94: c0:0f:50:92:12:73:9f:3b:c9:a0:5d:7d:82:54:a3:97:e7:39: 55:61:42:77:29:92:81:05:51:a9:42:5a:eb:53:3a:5d:18:e2: b5:b9:99:b8:26:74:c9:22:6c:ba:48:1d:72:b6:2d:fe:41:df: 86:24:64:1a:be:4f:68:0b:2b:08:2a:8f:8c:3d:a8:82:68:c4: 45:07:36:d2:d6:ef:eb:13:bc:26:31:29:07:6c:93:8d:d0:35: 42:1f:b2:7d:41:6e:87:67:a8:7e:fb:38:c4:f4:a8:c9:ac:ae: f6:cc:75:ed:60:35:75:7e:21:71:df:df:32:9c:f2:bc:41:3c: 8c:3c:ce:96:54:11:b9:05:60:22:d5:20:a0:38:f5:1a:a8:99: aa:8c:1b:91:d0:58:12:5e:92:96:6c:46:f9:60:20:ef:55:d6: dc:c2:0a:28:1b:af:27:ed:80:a0:f8:9b:c2:63:b8:bc:55:db: 9d:9f:27:b8:7c:ed:4c:00:46:85:a0:90:fa:a7:dc:b8:49:ec: 5a:67:f5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwfGc1lI2CCTL2FLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTIwODE4MzY0MVoXDTI2MDMwODE3MzY0MVowLzEtMCsGA1UEAxMk Yjc3MGFmYzgtMDdiZi00OGQxLWI0ZGEtNGM4ZDYyNjRiZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpFtxkJxbGOzHDWqsZTUQD0gQikDnJL9ef7F /fCkG+L+bOqsCpSVZ+25TSVMsqer194FW7s0qaGBdrGNQJ4/pQS7Y7BUU86PYrX7 sBmw+ZTufvzsg0UMIFgXPVrBPaGruBfxbaJtxtqGpbkwl9DSaBjK+SHpRiOStfwr srBhYf98nqOaH42EaQCo2/gu7q+Bj3IzA4+gtPNIIrVugslbm5DrW26+hUWktqPR 9mdJ438PGfhzSiyvpQJle67+N3T9rGOJEPI99dYVSSgiVBdoM1/aK6XjO7xY4Bi0 RF2Q6MEc6vQc1/lk+Mi15P2vF/KeavSbacPeR9Z/n5pM1HFI9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyFivm0sJd8SD6F5aStMBI0yF+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGRiYTMzZjctMzgwMi0z M2RlLWEzOGUtOGE5NTBmZTZiNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4a3RAjj38G5eRTpSbAfm4HgzFX74j75WyhG9fzUciV3boheqKB+IjS cqAmXfgKa1AZDZEolMAPUJISc587yaBdfYJUo5fnOVVhQncpkoEFUalCWutTOl0Y 4rW5mbgmdMkibLpIHXK2Lf5B34YkZBq+T2gLKwgqj4w9qIJoxEUHNtLW7+sTvCYx KQdsk43QNUIfsn1BbodnqH77OMT0qMmsrvbMde1gNXV+IXHf3zKc8rxBPIw8zpZU EbkFYCLVIKA49RqomaqMG5HQWBJekpZsRvlgIO9V1tzCCigbryftgKD4m8JjuLxV 252fJ7h87UwARoWgkPqn3LhJ7Fpn9ek= -----END CERTIFICATE-----Generated at Wed Dec 10 20:36:06 2025 by rpki-client