This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa File: a07f8277-ce17-34be-955c-7cc356301d2e.roa (raw, json) Hash identifier: z8dwBv1vKvJEnJKslfqGilB+JhjvkqfPM3Yv20fSq9Q= Subject key identifier: 26:CB:45:FA:5A:19:7C:2C:32:C6:BB:25:D9:60:0E:C9:CD:65:71:91 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584C26F0E05BA8C154E527F20540 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 16509 IP address blocks: 74.123.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:e0:5b:a8:c1:54:e5:27:f2:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=01da2cc5-5613-429b-bf2c-63668b22e91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:9e:33:dd:aa:c1:5a:be:74:a5:5a:52:c8: 58:4e:89:c3:26:b3:d2:2f:16:c7:42:3f:c6:cc:59: 16:1d:2b:d3:f7:84:e1:43:e3:45:b9:76:b2:87:2c: 26:49:5c:01:39:9b:23:4f:22:10:ea:c8:18:1f:1e: ae:05:0c:28:ec:8a:62:45:58:6b:4f:1f:b5:c4:ef: 17:a7:64:29:87:23:05:5c:82:b4:4e:42:32:21:f7: 7c:e0:bb:e5:81:6d:11:62:22:51:a0:39:68:5b:1f: 93:24:5f:77:c0:66:91:af:cb:79:ec:a0:43:73:09: 81:bc:a8:d8:0b:38:1f:ad:07:70:b0:17:8c:09:78: 84:88:ce:7b:ea:db:39:b6:e6:12:5b:38:0a:d4:45: 34:26:00:6c:6a:57:ca:a8:b9:e4:38:92:b4:e0:bd: 73:35:42:22:89:4a:2d:46:aa:f6:93:50:c8:23:8d: 52:79:82:d3:b2:bd:32:69:7a:cf:e0:97:f4:56:12: b2:10:06:b9:c5:a1:6f:66:5a:7d:26:43:d6:2a:13: 9a:3e:c6:6e:7a:f0:60:3e:35:76:79:c7:6b:68:e1: 51:6f:9a:45:6c:e7:a6:2f:64:5b:81:6f:bf:3c:9e: c8:7c:69:6c:b7:40:6d:c2:31:26:49:9b:db:ff:b5: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CB:45:FA:5A:19:7C:2C:32:C6:BB:25:D9:60:0E:C9:CD:65:71:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 74.123.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ac:c9:47:11:4a:d3:2d:9f:29:df:ca:db:ff:07:91:1d:7c: 1e:dc:fc:13:36:0d:ec:6c:a2:ce:95:ec:eb:43:25:92:0d:b6: a3:fa:b0:4e:eb:be:ba:a4:11:1d:1c:f7:fd:35:71:7c:2a:57: cf:c2:31:9f:42:47:67:99:67:60:ce:d1:19:33:6c:1d:fb:f0: 80:58:d9:85:bf:ca:3f:59:43:2c:29:d7:2c:fc:23:0d:33:aa: a0:83:be:68:f3:08:fd:54:6e:27:3d:d8:f5:07:cc:91:9b:63: ae:81:e7:a0:52:12:31:ab:99:6c:dd:8d:2b:a9:e3:8b:f5:11: c9:48:f6:66:c1:fd:96:8b:8e:56:52:57:be:15:42:36:ac:21: fc:19:b4:bd:be:d3:ea:7a:77:c4:2c:9c:c2:76:42:b9:92:e6: 38:dd:9f:5a:f3:f2:e9:9f:6d:f7:e2:ef:27:a4:0f:bb:e8:33: b9:c0:14:9a:4a:95:12:e9:8b:48:b8:eb:38:33:cb:0d:3f:5d: 7d:7d:c6:53:8a:2b:5b:c4:4b:bf:e7:7c:00:fc:d1:bd:11:0d: 9b:e2:ef:c6:8c:98:2d:77:2d:a2:c3:f1:be:ee:73:fb:b0:b8: 25:c3:e3:50:8c:9a:26:c0:54:6e:65:70:43:49:15:40:35:cd: 89:fd:45:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8OBbqMFU5SfyBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk MDFkYTJjYzUtNTYxMy00MjliLWJmMmMtNjM2NjhiMjJlOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lKeM92qwVq+dKVaUshYTonDJrPSLxbHQj/G zFkWHSvT94ThQ+NFuXayhywmSVwBOZsjTyIQ6sgYHx6uBQwo7IpiRVhrTx+1xO8X p2QphyMFXIK0TkIyIfd84LvlgW0RYiJRoDloWx+TJF93wGaRr8t57KBDcwmBvKjY CzgfrQdwsBeMCXiEiM576ts5tuYSWzgK1EU0JgBsalfKqLnkOJK04L1zNUIiiUot Rqr2k1DII41SeYLTsr0yaXrP4Jf0VhKyEAa5xaFvZlp9JkPWKhOaPsZuevBgPjV2 ecdraOFRb5pFbOemL2RbgW+/PJ7IfGlst0BtwjEmSZvb/7XgVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbLRfpaGXwsMsa7JdlgDsnNZXGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvYTA3ZjgyNzctY2UxNy0z NGJlLTk1NWMtN2NjMzU2MzAxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWsyUcRStMtnynfytv/B5EdfB7c/BM2Dexsos6V7OtDJZINtqP6sE7r vrqkER0c9/01cXwqV8/CMZ9CR2eZZ2DO0RkzbB378IBY2YW/yj9ZQywp1yz8Iw0z qqCDvmjzCP1Ubic92PUHzJGbY66B56BSEjGrmWzdjSup44v1EclI9mbB/ZaLjlZS V74VQjasIfwZtL2+0+p6d8QsnMJ2QrmS5jjdn1rz8umfbffi7yekD7voM7nAFJpK lRLpi0i46zgzyw0/XX19xlOKK1vES7/nfAD80b0RDZvi78aMmC13LaLD8b7uc/uw uCXD41CMmibAVG5lcENJFUA1zYn9Rf4= -----END CERTIFICATE-----Generated at Fri Dec 19 16:42:57 2025 by rpki-client