This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa File: 33e98f4a-46f2-39d5-8f60-8120def084e3.roa (raw, json) Hash identifier: 1pTVOJMr0fhTjfB0bSxcsywN4xID8nG2KHw1MIWw21o= Subject key identifier: A2:8F:4D:FB:83:7D:62:F2:27:2A:5B:58:CD:93:3D:6F:41:49:B3:E9 Certificate issuer: /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Certificate serial: 010D0C9F4328584BD54981BF87D38DD474E0D8C0 Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa Signing time: Wed 12 Nov 2025 08:02:59 +0000 ROA not before: Wed 12 Nov 2025 08:02:59 +0000 ROA not after: Tue 10 Feb 2026 08:02:59 +0000 asID: 30381 IP address blocks: 23.145.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:49:81:bf:87:d3:8d:d4:74:e0:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Validity Not Before: Nov 12 08:02:59 2025 GMT Not After : Feb 10 08:02:59 2026 GMT Subject: CN=4122f857-009c-4ca6-9a5d-e4ee996d77d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:2a:d3:2f:e7:0e:a4:2b:c0:23:f7:a4:3a: 59:2c:f5:c7:94:9f:04:c5:c6:a6:09:4d:de:d6:b6: aa:1c:93:e8:b2:4a:6e:94:82:28:b0:4f:6e:30:a0: 90:bf:84:19:d6:3a:06:f3:ff:d5:6f:c3:da:87:04: fa:82:54:38:ad:53:a5:f9:84:7e:3c:00:13:c4:f6: ef:2b:d4:a4:23:4d:97:a2:43:6a:76:80:c3:a2:36: 27:92:0f:66:9c:eb:03:90:8f:ad:f7:11:88:8f:e5: 5c:1e:74:59:2f:59:f5:4a:61:4d:13:96:cd:7a:3c: b5:00:b7:44:f6:a0:b4:ed:a5:e5:f7:bc:1e:e5:8a: e3:52:fe:11:dd:6a:bf:cb:66:83:79:1f:16:41:f2: 36:b8:78:d6:b4:18:c6:d0:42:ac:6d:dd:59:cc:1e: ee:04:3c:0b:b8:8f:38:4c:76:da:dd:68:af:36:c9: b5:9d:91:6e:2f:47:b1:7e:1d:de:da:9b:79:46:54: 94:92:2e:9a:9c:4b:d0:7c:11:c9:c6:16:5c:9e:82: 2d:8c:51:02:70:9e:de:e1:a3:53:ea:51:94:de:7e: 45:ac:78:1b:fc:02:0e:27:de:1b:70:24:3e:cd:04: db:fc:67:d1:b9:b8:36:d0:48:86:41:db:9a:d9:0a: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8F:4D:FB:83:7D:62:F2:27:2A:5B:58:CD:93:3D:6F:41:49:B3:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl X509v3 Authority Key Identifier: keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer sbgp-ipAddrBlock: critical IPv4: 23.145.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f1:ca:b2:78:40:77:b8:6a:f7:ef:f2:40:5e:07:b5:17:8a: 40:60:8a:b4:08:0d:7d:c3:ec:5c:45:0d:4e:56:70:79:99:48: 39:59:16:a0:95:30:f7:96:3c:31:fd:3c:54:e5:f2:f8:30:45: e6:62:23:f8:5d:ad:27:15:50:35:1e:75:61:3f:5e:83:a6:42: 37:5f:e9:69:b6:5e:c2:86:58:b9:b3:08:03:6b:39:af:11:f1: f1:6c:e9:48:b7:26:7f:2e:b2:19:10:ed:10:a1:87:40:19:12: 6c:5d:57:63:06:f2:fe:29:a2:bd:5b:6b:98:5a:e7:93:9e:59: fb:6a:b0:59:5d:35:d4:78:f8:22:3d:71:21:e1:59:01:06:d4: 36:dc:3a:d6:da:40:21:80:a0:c8:dc:75:c2:b4:95:22:aa:54: 97:7f:54:4a:27:30:6c:8a:e5:c5:cb:36:af:f4:f0:6b:5c:e7: 82:93:8f:45:84:9e:9c:e4:9d:d8:04:b0:5d:63:fe:90:fb:72: ba:34:76:01:02:c4:f5:1e:38:b5:ba:4b:2f:cd:85:46:9c:5d: a2:f2:c9:ed:1e:c8:bb:d5:47:77:90:58:fc:ca:9b:54:13:11: 1a:0a:10:6f:cc:46:b3:c2:7f:e5:fb:43:92:41:06:ce:34:82: 05:1c:87:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvVSYG/h9ON1HTg2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmVi MjE0MB4XDTI1MTExMjA4MDI1OVoXDTI2MDIxMDA4MDI1OVowLzEtMCsGA1UEAxMk NDEyMmY4NTctMDA5Yy00Y2E2LTlhNWQtZTRlZTk5NmQ3N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FQq0y/nDqQrwCP3pDpZLPXHlJ8ExcamCU3e 1raqHJPoskpulIIosE9uMKCQv4QZ1joG8//Vb8PahwT6glQ4rVOl+YR+PAATxPbv K9SkI02XokNqdoDDojYnkg9mnOsDkI+t9xGIj+VcHnRZL1n1SmFNE5bNejy1ALdE 9qC07aXl97we5YrjUv4R3Wq/y2aDeR8WQfI2uHjWtBjG0EKsbd1ZzB7uBDwLuI84 THba3WivNsm1nZFuL0exfh3e2pt5RlSUki6anEvQfBHJxhZcnoItjFECcJ7e4aNT 6lGU3n5FrHgb/AIOJ94bcCQ+zQTb/GfRubg20EiGQdua2QpEXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKPTfuDfWLyJypbWM2TPW9BSbPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Zh YWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvMzNlOThmNGEtNDZmMi0z OWQ1LThmNjAtODEyMGRlZjA4NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNmYWFiNGItN2Q0OS00M2I3LTgw ZGQtODRhYjBlYmViMjE0LzljZmFhYjRiLTdkNDktNDNiNy04MGRkLTg0YWIwZWJl YjIxNC5jcmwwHwYDVR0jBBgwFoAUYZ3XubI1BYSlrEpe24EOAMY4JC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFi MGViZWIyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrxyrJ4QHe4avfv8kBeB7UXikBgirQIDX3D7FxFDU5WcHmZSDlZFqCV MPeWPDH9PFTl8vgwReZiI/hdrScVUDUedWE/XoOmQjdf6Wm2XsKGWLmzCANrOa8R 8fFs6Ui3Jn8ushkQ7RChh0AZEmxdV2MG8v4por1ba5ha55OeWftqsFldNdR4+CI9 cSHhWQEG1DbcOtbaQCGAoMjcdcK0lSKqVJd/VEonMGyK5cXLNq/08Gtc54KTj0WE npzkndgEsF1j/pD7cro0dgECxPUeOLW6Sy/NhUacXaLyye0eyLvVR3eQWPzKm1QT ERoKEG/MRrPCf+X7Q5JBBs40ggUch+I= -----END CERTIFICATE-----Generated at Sat Nov 22 21:20:07 2025 by rpki-client