This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa File: 3329155e-38f7-3fe9-8293-6884349bc139.roa (raw, json) Hash identifier: TyJS1zzWJnhM009eQvT3IAZ1btuwIBgpRv9A0Cu2nhI= Subject key identifier: CD:7D:0C:0A:C4:5E:62:53:D6:A8:BC:AF:D8:29:A6:82:FD:E5:57:8D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BEC5080F4F995593B7B319480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 7029 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:80:f4:f9:95:59:3b:7b:31:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=8872ce2a-c005-4f75-93e6-198aa056d157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:10:ed:8a:24:a1:6f:fa:66:35:52:fa:52: 53:c2:ba:ad:94:0f:eb:1b:1c:ab:19:40:0e:9b:f3: 8c:61:4c:72:28:1b:0d:b4:62:e9:e6:b1:e0:44:8c: b6:c2:ff:33:1f:0d:73:24:ba:18:3a:62:dc:a9:39: 37:19:c6:7b:eb:92:57:e0:80:65:d0:a6:34:d2:2f: 5b:a2:61:8e:b0:0c:ec:a4:66:2e:fc:7a:4a:0e:5a: ed:8c:45:3d:15:da:44:a9:93:d9:e1:8b:f6:3b:f4: 9f:28:e5:69:ca:6d:10:32:53:97:3a:17:ce:61:76: e0:2f:8e:14:88:4a:99:b2:5e:eb:29:7e:42:48:29: 17:d8:6f:83:a7:0e:d8:d5:f1:3f:ba:cf:cc:3c:cf: e6:f4:2e:a9:09:f5:fd:c6:79:35:7d:c2:97:e3:85: 36:74:1c:58:e3:eb:04:cf:3c:61:41:2f:7d:3e:13: 15:42:73:ba:92:db:49:fc:f2:5f:03:17:e6:77:84: 4f:46:1a:e7:4d:17:15:a8:e7:d3:e9:6a:3d:71:95: 1e:d1:11:61:73:df:f2:e1:35:41:23:b7:30:36:90: 93:36:c2:7e:89:39:96:85:f5:c5:c5:ee:d5:69:e6: e8:07:3b:26:17:d8:b1:df:6a:9a:08:31:14:73:b1: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7D:0C:0A:C4:5E:62:53:D6:A8:BC:AF:D8:29:A6:82:FD:E5:57:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2e:e9:a6:53:0a:11:4c:61:af:2d:5e:fe:af:4c:2d:3b:60: 74:25:5a:23:b8:aa:a4:e3:7c:aa:9a:ec:75:d8:7b:db:3b:9d: 71:13:12:9c:df:d2:9a:05:3a:9e:19:30:5f:19:57:c9:43:05: 7a:02:7c:f7:25:c9:84:40:5a:0e:6b:6f:36:ec:79:30:1b:db: c0:84:32:5c:b2:43:87:c2:6e:d4:24:e5:fe:08:b5:ab:4c:37: 38:21:b1:aa:11:0c:23:a3:20:d6:21:e6:52:a8:8b:2b:53:ce: 5d:4a:24:9e:84:46:ee:e6:ac:12:b8:ad:a8:2f:d4:07:38:47: 45:c3:cf:5d:db:c8:19:90:50:c2:0e:1c:7a:99:45:95:f6:92: da:c4:c4:ca:79:00:19:d6:1e:92:82:a3:50:57:be:01:ff:df: be:b0:cc:f2:da:7b:69:f3:fd:91:e4:b7:65:44:a0:40:b0:30: a6:28:9d:22:e1:59:95:60:03:e6:4f:47:82:a1:ac:99:1a:be: 0a:d0:14:42:af:7a:f5:3b:f0:04:d2:c1:2c:71:7b:40:b7:a8: 8b:1e:a6:2a:f2:14:19:24:be:7b:91:3f:42:45:56:3d:57:8c: 10:bf:ff:4c:a7:6a:b9:3b:31:78:6a:71:e1:89:46:1f:91:12: db:4a:fb:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUID0+ZVZO3sxlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk ODg3MmNlMmEtYzAwNS00Zjc1LTkzZTYtMTk4YWEwNTZkMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEwQ7YokoW/6ZjVS+lJTwrqtlA/rGxyrGUAO m/OMYUxyKBsNtGLp5rHgRIy2wv8zHw1zJLoYOmLcqTk3GcZ765JX4IBl0KY00i9b omGOsAzspGYu/HpKDlrtjEU9FdpEqZPZ4Yv2O/SfKOVpym0QMlOXOhfOYXbgL44U iEqZsl7rKX5CSCkX2G+Dpw7Y1fE/us/MPM/m9C6pCfX9xnk1fcKX44U2dBxY4+sE zzxhQS99PhMVQnO6kttJ/PJfAxfmd4RPRhrnTRcVqOfT6Wo9cZUe0RFhc9/y4TVB I7cwNpCTNsJ+iTmWhfXFxe7VaeboBzsmF9ix32qaCDEUc7EwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM19DArEXmJT1qi8r9gppoL95VeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzMyOTE1NWUtMzhmNy0z ZmU5LTgyOTMtNjg4NDM0OWJjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4u6aZTChFMYa8tXv6vTC07YHQlWiO4qqTjfKqa7HXYe9s7nXETEpzf 0poFOp4ZMF8ZV8lDBXoCfPclyYRAWg5rbzbseTAb28CEMlyyQ4fCbtQk5f4ItatM NzghsaoRDCOjINYh5lKoiytTzl1KJJ6ERu7mrBK4ragv1Ac4R0XDz13byBmQUMIO HHqZRZX2ktrExMp5ABnWHpKCo1BXvgH/376wzPLae2nz/ZHkt2VEoECwMKYonSLh WZVgA+ZPR4KhrJkavgrQFEKvevU78ATSwSxxe0C3qIsepiryFBkkvnuRP0JFVj1X jBC//0ynark7MXhqceGJRh+REttK+xk= -----END CERTIFICATE-----Generated at Thu Dec 4 04:26:41 2025 by rpki-client