This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa File: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (raw, json) Hash identifier: BFsndiHYZnnZMBDJ/DzwcUMnpwFUQCCkwkwY02XyjeQ= Subject key identifier: E4:8E:47:CF:2D:64:CF:BF:56:2D:B2:DC:36:B9:F8:F3:C4:58:B4:67 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584C0C6B5B251F2E7F5811F83FE0 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 35860 IP address blocks: 63.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:5b:25:1f:2e:7f:58:11:f8:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=7e9d7ee0-3a40-4443-a4af-43453ea7b56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:de:e4:81:df:72:55:1b:c4:5d:cd:24:46:fc: 9c:f6:cb:0f:cb:c4:64:18:6b:87:bc:d6:87:c5:28: a4:24:4a:3b:f0:72:9c:35:be:79:2d:b7:70:f3:59: 58:9f:cf:78:61:2d:9f:fa:b2:35:90:86:12:f0:69: 08:14:39:28:4d:2e:b1:bc:41:2c:65:49:ad:74:d3: 0d:9d:0b:1f:c4:e5:19:e7:7a:82:13:03:b8:07:ce: 7a:da:75:12:5c:97:26:67:d0:52:49:a8:79:5a:63: f5:50:87:ba:df:b1:a1:ef:ba:de:bf:d7:db:f7:7e: fd:8c:ce:ad:5f:a5:3d:e1:a6:61:39:00:17:87:5f: d8:0e:d8:f2:f6:a6:d7:71:70:1c:d6:82:6a:68:80: 2c:d1:28:c5:63:bb:38:c7:d2:5e:47:e4:84:d0:a3: a2:fc:2a:67:69:3d:86:8c:4c:3e:35:80:d4:a4:f9: 76:28:78:4b:23:a6:e3:0c:7e:7c:94:ce:b2:af:c5: 1a:f0:fd:af:c0:28:1b:b4:7a:87:21:32:0e:e4:69: e7:ec:78:08:b3:29:c2:93:e5:8f:bc:65:2e:eb:72: 9b:85:45:9b:33:a9:5a:f2:97:ee:28:46:26:4b:59: f6:b1:12:c6:5d:77:e0:e6:63:7d:c1:b4:22:1f:24: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:47:CF:2D:64:CF:BF:56:2D:B2:DC:36:B9:F8:F3:C4:58:B4:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ab:a4:f1:b7:74:ba:99:2a:e8:f5:81:c4:2c:7f:02:cc:89: ff:f9:8c:d3:d6:dd:f3:6e:f9:dc:14:d6:3d:7d:35:67:9b:cb: bd:ec:e1:05:6b:5a:fe:80:7d:d0:67:25:a8:e3:c0:37:7b:92: fa:74:da:71:84:d4:84:60:7e:47:2e:9e:d6:95:7a:12:e7:50: 7d:d8:63:d1:43:3a:45:1a:11:5c:37:5e:6d:1d:b9:a8:8a:ff: d4:d3:c3:1f:7c:b9:30:31:96:f3:e7:a8:84:09:27:d5:eb:46: 1e:5f:e6:1d:92:d2:b0:4e:87:e5:e1:e7:0e:02:4a:7a:17:ba: 21:7d:c9:1d:fc:dd:ad:4c:ea:6f:5c:61:74:c8:f2:67:62:7c: ae:53:ce:d5:f9:ec:ec:6f:ba:cd:5b:6b:97:0b:9b:c8:7f:28: af:9e:8d:0a:66:ad:16:02:91:80:24:f6:6a:27:fc:0b:4c:34: fa:30:cc:93:85:ce:f9:00:7f:2a:9c:50:e7:4d:48:84:02:ba: 97:47:f2:4f:20:aa:82:e3:c3:cf:47:4e:d5:ea:2f:e4:15:9f: b2:2b:f9:0a:41:cf:78:9a:85:2a:94:08:0b:dd:ec:07:37:52: 7a:b0:0a:ea:d4:20:b7:18:96:ae:af:55:b8:60:a8:00:2c:7d: ee:62:bd:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa1slHy5/WBH4P+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk N2U5ZDdlZTAtM2E0MC00NDQzLWE0YWYtNDM0NTNlYTdiNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN7kgd9yVRvEXc0kRvyc9ssPy8RkGGuHvNaH xSikJEo78HKcNb55Lbdw81lYn894YS2f+rI1kIYS8GkIFDkoTS6xvEEsZUmtdNMN nQsfxOUZ53qCEwO4B8562nUSXJcmZ9BSSah5WmP1UIe637Gh77rev9fb9379jM6t X6U94aZhOQAXh1/YDtjy9qbXcXAc1oJqaIAs0SjFY7s4x9JeR+SE0KOi/CpnaT2G jEw+NYDUpPl2KHhLI6bjDH58lM6yr8Ua8P2vwCgbtHqHITIO5Gnn7HgIsynCk+WP vGUu63KbhUWbM6la8pfuKEYmS1n2sRLGXXfg5mN9wbQiHyRrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSOR88tZM+/Vi2y3Da5+PPEWLRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvZmY2NWFmNDEtZWNkMy0z ODk1LWJjY2QtNmYxYjU1NDQ4YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECrpPG3dLqZKuj1gcQsfwLMif/5jNPW3fNu+dwU1j19NWeby73s4QVr Wv6AfdBnJajjwDd7kvp02nGE1IRgfkcuntaVehLnUH3YY9FDOkUaEVw3Xm0duaiK /9TTwx98uTAxlvPnqIQJJ9XrRh5f5h2S0rBOh+Xh5w4CSnoXuiF9yR383a1M6m9c YXTI8mdifK5TztX57Oxvus1ba5cLm8h/KK+ejQpmrRYCkYAk9mon/AtMNPowzJOF zvkAfyqcUOdNSIQCupdH8k8gqoLjw89HTtXqL+QVn7Ir+QpBz3iahSqUCAvd7Ac3 UnqwCurUILcYlq6vVbhgqAAsfe5ivV4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:18:31 2025 by rpki-client