This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa File: aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa (raw, json) Hash identifier: U1EdCUru0rdnnx5AjrBFFCZt4ycKqCCE6UYACnVn+zU= Subject key identifier: 81:DC:D1:94:1B:40:3E:1E:B3:3D:87:0C:B0:A8:38:C7:4C:B2:01:5D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C245268F4247A3964A89C232B Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa Signing time: Wed 10 Dec 2025 15:29:47 +0000 ROA not before: Wed 10 Dec 2025 15:29:47 +0000 ROA not after: Tue 10 Mar 2026 14:29:47 +0000 asID: 213245 IP address blocks: 209.61.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:52:68:f4:24:7a:39:64:a8:9c:23:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 10 15:29:47 2025 GMT Not After : Mar 10 14:29:47 2026 GMT Subject: CN=26375c71-520a-44e2-9209-ba20489300ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:2c:e9:8a:30:98:84:f1:25:a5:93:1c:3b: 8d:9f:c6:24:ab:4d:4c:4e:3c:38:1c:ec:01:80:4b: 9f:b4:41:f7:82:37:78:5a:8f:40:63:b7:53:39:92: 85:b4:f2:bb:ba:d5:c0:d0:be:2b:27:7d:b6:be:c2: e7:ac:5e:06:89:e0:c7:ed:b4:48:83:df:68:ff:9c: 63:90:07:d5:91:42:49:f0:55:31:c7:dd:3c:db:9f: 76:36:95:23:04:c8:3f:a2:65:d6:0c:d1:13:d9:93: 51:76:3c:43:57:28:98:d8:03:20:69:f0:e8:90:3d: 5e:0e:22:dc:88:68:1a:24:2b:88:6f:39:63:05:43: 9e:b7:ea:77:db:6c:71:0d:2b:f2:db:b6:75:1c:d6: cc:77:84:aa:2d:d3:d1:30:28:4e:1e:cd:76:a2:2f: b9:2b:28:0e:e0:4f:27:f8:26:f9:70:f5:bf:d3:bc: fb:32:09:4e:eb:4c:cc:7a:d9:ed:9e:86:a0:05:cf: ab:33:64:79:a5:ae:f5:4d:71:ae:c7:a9:cc:3d:2e: e9:99:27:3e:70:90:9c:9c:59:41:0c:aa:27:72:3e: b1:51:98:e5:e7:de:51:d2:63:42:96:e6:8b:24:75: c7:e4:ea:57:a7:b6:77:27:a4:7d:71:ba:77:b8:e0: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DC:D1:94:1B:40:3E:1E:B3:3D:87:0C:B0:A8:38:C7:4C:B2:01:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aec4623d-1530-3776-ad7b-cb4fb3a4f302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:74:56:ef:0d:0d:5a:65:8b:1b:74:66:86:a5:d0:4f:6a:07: 2c:69:33:fa:d5:fa:60:4f:d8:75:34:35:5d:c5:ba:b2:66:59: b5:29:86:df:a4:1b:4e:b4:a8:78:ed:99:0c:85:81:24:22:61: 17:e0:a4:76:64:00:22:54:2b:96:6e:c7:37:cc:2d:92:cf:6b: cf:b8:7d:4a:28:f6:5d:a9:b4:4a:90:3a:3f:4f:4e:b6:11:d7: be:83:c0:f0:8f:4a:e8:f5:1d:26:25:bd:89:7b:11:8f:61:fa: 67:3c:d2:5f:67:88:9f:13:e4:13:fc:4d:8a:16:89:b5:d7:9a: be:23:24:7a:99:91:a6:5d:54:05:e6:01:eb:ea:12:c9:e1:f3: 42:3c:6c:cc:41:d4:76:9a:f5:a5:3e:e4:b1:ec:1b:dd:fe:be: 6c:87:cc:ad:08:57:2c:6e:72:15:50:a0:48:7a:d6:55:06:b7: 18:a2:1e:2a:3a:41:4a:7f:16:d3:dc:62:ab:c9:4f:02:cd:13: 47:fd:f1:97:69:b6:f8:93:44:b4:c0:7e:13:ba:e3:7f:89:c8: ee:d1:19:89:1d:dc:4e:1d:9f:8b:24:02:17:bc:93:fb:4b:33: f8:2c:e7:4a:b5:9e:3d:39:36:10:5d:57:bd:0f:86:4b:a7:26: 9d:e7:52:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkUmj0JHo5ZKicIyswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxMDE1Mjk0N1oXDTI2MDMxMDE0Mjk0N1owLzEtMCsGA1UEAxMk MjYzNzVjNzEtNTIwYS00NGUyLTkyMDktYmEyMDQ4OTMwMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4os6YowmITxJaWTHDuNn8Ykq01MTjw4HOwB gEuftEH3gjd4Wo9AY7dTOZKFtPK7utXA0L4rJ322vsLnrF4GieDH7bRIg99o/5xj kAfVkUJJ8FUxx9082592NpUjBMg/omXWDNET2ZNRdjxDVyiY2AMgafDokD1eDiLc iGgaJCuIbzljBUOet+p322xxDSvy27Z1HNbMd4SqLdPRMChOHs12oi+5KygO4E8n +Cb5cPW/07z7MglO60zMetntnoagBc+rM2R5pa71TXGux6nMPS7pmSc+cJCcnFlB DKoncj6xUZjl595R0mNCluaLJHXH5OpXp7Z3J6R9cbp3uOD4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHc0ZQbQD4esz2HDLCoOMdMsgFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWVjNDYyM2QtMTUzMC0z Nzc2LWFkN2ItY2I0ZmIzYTRmMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0T0hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd0Vu8NDVplixt0Zoal0E9qByxpM/rV+mBP2HU0NV3FurJmWbUpht+k G060qHjtmQyFgSQiYRfgpHZkACJUK5ZuxzfMLZLPa8+4fUoo9l2ptEqQOj9PTrYR 176DwPCPSuj1HSYlvYl7EY9h+mc80l9niJ8T5BP8TYoWibXXmr4jJHqZkaZdVAXm AevqEsnh80I8bMxB1Haa9aU+5LHsG93+vmyHzK0IVyxuchVQoEh61lUGtxiiHio6 QUp/FtPcYqvJTwLNE0f98ZdptviTRLTAfhO643+JyO7RGYkd3E4dn4skAhe8k/tL M/gs50q1nj05NhBdV70PhkunJp3nUk8= -----END CERTIFICATE-----Generated at Sun Dec 14 08:36:42 2025 by rpki-client