This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa File: 333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa (raw, json) Hash identifier: 1uNa7Cq/K11BcGu9EGvSllaJZ+NAau5dj8Jttr8+PQo= Subject key identifier: B9:D2:B2:62:F3:D4:97:41:50:30:79:CE:60:B4:F5:0C:86:8E:64:E9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584C24268ACB4761AEF1182A7480 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16591 IP address blocks: 136.32.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:8a:cb:47:61:ae:f1:18:2a:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=5716caec-238a-4f39-834e-96275cb25e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:2b:cc:5e:9d:48:4c:35:28:40:e3:6b:63: 81:54:37:8a:7c:54:fb:f1:fb:80:8a:0f:e1:9b:71: a0:6e:5e:fa:49:a8:07:0b:14:3c:d5:b7:9a:07:cd: 9c:1e:19:9c:ba:10:2a:88:1f:70:7c:18:74:5c:33: 23:7c:ec:98:90:fd:a7:ae:89:08:60:42:26:c0:bf: fa:56:28:dd:32:f4:11:f3:a8:2f:62:34:fd:8a:cf: 08:63:76:a4:59:aa:37:8a:a8:f1:8b:d1:04:2e:4f: 54:37:bb:26:c6:95:58:93:b0:f6:8d:78:3f:bd:33: c4:aa:72:d8:62:38:72:3b:8b:0a:8e:d6:cd:a9:08: 19:88:a9:87:87:d5:5b:20:57:fb:4a:09:64:15:ab: f9:c3:d5:1a:7d:d7:55:22:31:a0:bb:22:b4:9e:24: bd:cd:6e:c7:fe:b1:dc:b4:c8:4a:b4:59:e4:d0:e8: 3e:5a:5a:2c:60:05:5a:cb:24:34:f3:00:00:e5:0b: 9f:3c:7c:8e:4b:2b:9d:be:c2:1c:71:31:58:b5:d7: a9:49:6a:42:a2:cc:c5:bd:b3:6d:07:5c:93:70:a7: 69:44:0c:44:ab:bc:eb:82:65:3c:f6:4d:94:db:8c: 05:70:e0:25:6e:54:36:a1:26:4f:b8:75:67:03:35: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:B2:62:F3:D4:97:41:50:30:79:CE:60:B4:F5:0C:86:8E:64:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:16:eb:b8:23:9d:b2:bd:d3:af:0e:17:e4:76:de:d7:ce:b2: 00:90:ce:52:fa:e4:20:c0:07:92:42:28:9b:c0:97:09:9e:85: 7b:8f:42:8b:ed:15:57:a5:bb:b9:fc:e6:c5:60:d1:e5:5c:66: 5e:53:61:f6:38:ca:f9:e2:76:e9:3a:77:27:d5:58:03:ce:ac: 1a:bb:00:11:96:b2:36:55:5b:c2:87:4e:dd:02:61:d0:f9:da: 74:7f:7f:4b:7d:49:f5:06:4a:41:9b:eb:be:b7:fd:d9:c3:a9: 13:87:da:6b:8f:8b:34:25:5b:77:8b:41:a3:e1:df:f2:04:12: 93:22:90:77:34:37:f3:27:43:6f:4d:7a:63:91:e5:f5:74:6d: 00:cc:cd:77:97:ce:5f:d7:7d:8d:36:0d:de:3c:c8:24:73:7d: 88:f3:e7:5c:cd:aa:8f:c2:45:b3:67:24:f7:a4:b0:4f:e2:53: cb:87:26:17:58:aa:ca:a2:4b:0c:5f:58:34:ef:f6:b5:da:1a: df:ab:13:0f:b1:9f:18:71:79:f2:8d:56:75:b0:79:7f:5b:02: e6:bc:0d:33:b6:1b:4c:58:93:a5:c3:88:c5:70:38:4c:ad:bf: 84:6e:f4:6c:b9:7f:a1:db:06:6e:e6:51:6e:11:40:83:7e:e4: 8a:aa:6f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJorLR2Gu8RgqdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk NTcxNmNhZWMtMjM4YS00ZjM5LTgzNGUtOTYyNzVjYjI1ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC8rzF6dSEw1KEDja2OBVDeKfFT78fuAig/h m3Ggbl76SagHCxQ81beaB82cHhmcuhAqiB9wfBh0XDMjfOyYkP2nrokIYEImwL/6 VijdMvQR86gvYjT9is8IY3akWao3iqjxi9EELk9UN7smxpVYk7D2jXg/vTPEqnLY YjhyO4sKjtbNqQgZiKmHh9VbIFf7SglkFav5w9UafddVIjGguyK0niS9zW7H/rHc tMhKtFnk0Og+WlosYAVayyQ08wAA5QufPHyOSyudvsIccTFYtdepSWpCoszFvbNt B1yTcKdpRAxEq7zrgmU89k2U24wFcOAlblQ2oSZPuHVnAzXFPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnSsmLz1JdBUDB5zmC09QyGjmTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzMzY2M4N2EtYmExOS0z ZDAwLTlmNjktM2I3NGY1MjhmOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8W67gjnbK9068OF+R23tfOsgCQzlL65CDAB5JCKJvAlwmehXuPQovt FVelu7n85sVg0eVcZl5TYfY4yvniduk6dyfVWAPOrBq7ABGWsjZVW8KHTt0CYdD5 2nR/f0t9SfUGSkGb6763/dnDqROH2muPizQlW3eLQaPh3/IEEpMikHc0N/MnQ29N emOR5fV0bQDMzXeXzl/XfY02Dd48yCRzfYjz51zNqo/CRbNnJPeksE/iU8uHJhdY qsqiSwxfWDTv9rXaGt+rEw+xnxhxefKNVnWweX9bAua8DTO2G0xYk6XDiMVwOEyt v4Ru9Gy5f6HbBm7mUW4RQIN+5Iqqb7M= -----END CERTIFICATE-----Generated at Sun Dec 14 11:34:39 2025 by rpki-client