This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061/33ce2e4c-f68b-373e-83a5-301a8c527aee.roa File: 33ce2e4c-f68b-373e-83a5-301a8c527aee.roa (raw, json) Hash identifier: z1UdFImdzDtUR96WfOHBjwqLeptsYT75K4RpEsil8fY= Subject key identifier: C4:52:85:98:F8:D0:FE:76:58:86:44:ED:32:E5:49:F1:9B:05:BD:24 Certificate issuer: /CN=381c54a3-2b36-438a-8dad-287909a0a061 Certificate serial: 010D0C9F4328584C14CB6427EB2EDC1985EC8C40 Authority key identifier: F6:26:77:11:97:8A:0D:06:2F:03:16:AF:8A:8D:E2:B6:DE:80:07:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061/33ce2e4c-f68b-373e-83a5-301a8c527aee.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 396855 IP address blocks: 23.136.16.0/24 maxlen: 24 2602:fdd4::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061/381c54a3-2b36-438a-8dad-287909a0a061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061/381c54a3-2b36-438a-8dad-287909a0a061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:64:27:eb:2e:dc:19:85:ec:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381c54a3-2b36-438a-8dad-287909a0a061 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=afe71c2f-2c1a-4079-b21d-43d453665ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:97:65:dd:db:54:10:00:df:b1:f1:b3:0e: 35:d8:61:e7:18:b7:a8:a6:cb:ae:89:f1:97:bf:23: e5:66:f4:12:a4:0c:87:62:7d:23:49:80:dc:3b:ad: 20:16:a0:f4:ae:97:47:96:e4:cd:84:fd:66:e9:c7: f2:5f:3a:00:2d:49:06:f3:3e:ff:19:64:08:9c:e2: 70:8b:d4:db:10:6b:e7:a5:07:55:66:d2:35:89:9a: a1:9b:02:77:96:4c:d5:02:ee:ce:bb:03:e4:55:6f: 25:59:9f:fa:53:d2:ec:0d:29:46:a4:21:32:c1:8e: 25:1b:b9:9a:14:22:17:ab:58:42:26:48:4a:9d:3c: 4b:16:21:d6:e3:71:9b:ba:01:07:24:00:9b:94:a1: f1:6c:6d:b8:57:16:4e:13:79:30:7b:40:c1:86:5b: 0c:93:c2:18:01:6e:d2:d1:80:aa:cd:d6:83:9c:2e: 9d:d4:d7:8b:a1:10:8b:ac:f1:00:39:0b:22:21:47: 7e:27:f6:b8:83:e6:23:21:69:95:3e:cd:de:49:5b: f9:66:eb:cc:a3:80:63:3f:8f:68:5d:c4:2f:2e:21: f6:14:d5:15:de:be:fb:15:8c:40:ea:6e:e1:12:b0: c1:92:a0:14:c8:1b:43:37:eb:ec:30:46:5c:56:72: 1a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:85:98:F8:D0:FE:76:58:86:44:ED:32:E5:49:F1:9B:05:BD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061/33ce2e4c-f68b-373e-83a5-301a8c527aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061/381c54a3-2b36-438a-8dad-287909a0a061.crl X509v3 Authority Key Identifier: keyid:F6:26:77:11:97:8A:0D:06:2F:03:16:AF:8A:8D:E2:B6:DE:80:07:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/381c54a3-2b36-438a-8dad-287909a0a061.cer sbgp-ipAddrBlock: critical IPv4: 23.136.16.0/24 IPv6: 2602:fdd4::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0a:bc:6a:01:7b:f2:47:58:22:24:99:d0:74:8d:bc:6b:23: 76:ea:3c:2a:3b:2e:de:f7:06:e7:ff:2a:f0:af:0c:c1:c6:0c: 0e:46:0e:2f:53:bf:c7:34:f7:be:91:eb:3a:9c:50:a2:6c:97: 75:20:c3:48:ed:af:01:ca:0b:ac:f7:a2:69:54:97:48:a8:75: f7:11:04:5c:f5:4b:73:3f:0b:0a:74:78:ce:7e:4c:7d:1e:fe: 30:cd:fb:5b:6d:c2:ee:f4:2b:95:f1:a1:f6:5f:4b:13:89:e6: 98:0d:a8:66:f1:06:36:64:d9:74:fb:f4:84:26:0b:e2:00:6c: dc:4c:92:c8:c0:51:85:d8:e0:27:b1:22:cb:90:72:a1:54:b5: 01:41:0a:39:01:fa:41:8f:0d:e6:11:c7:f4:83:18:2b:9f:21: 3d:91:92:9c:56:da:04:75:59:8d:9a:1d:37:08:58:dc:90:14: ec:0c:ec:cc:01:d4:0e:1b:f7:7d:c9:8b:ca:dd:f9:7c:b6:b3: 8c:c4:d3:0c:6a:1a:a9:7a:41:cd:4e:22:17:7b:5a:cd:07:d9: b6:b8:cd:48:21:8c:41:f0:e1:6d:b3:d0:78:34:8e:ea:3c:34: 83:a8:8a:18:13:56:50:fd:f0:9e:55:ee:c3:81:10:f0:36:0f: 8e:93:d3:cb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEwUy2Qn6y7cGYXsjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgxYzU0YTMtMmIzNi00MzhhLThkYWQtMjg3OTA5YTBh MDYxMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk YWZlNzFjMmYtMmMxYS00MDc5LWIyMWQtNDNkNDUzNjY1ZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mOXZd3bVBAA37Hxsw412GHnGLeopsuuifGX vyPlZvQSpAyHYn0jSYDcO60gFqD0rpdHluTNhP1m6cfyXzoALUkG8z7/GWQInOJw i9TbEGvnpQdVZtI1iZqhmwJ3lkzVAu7OuwPkVW8lWZ/6U9LsDSlGpCEywY4lG7ma FCIXq1hCJkhKnTxLFiHW43GbugEHJACblKHxbG24VxZOE3kwe0DBhlsMk8IYAW7S 0YCqzdaDnC6d1NeLoRCLrPEAOQsiIUd+J/a4g+YjIWmVPs3eSVv5ZuvMo4BjP49o XcQvLiH2FNUV3r77FYxA6m7hErDBkqAUyBtDN+vsMEZcVnIazQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMRShZj40P52WIZE7TLlSfGbBb0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zODFj NTRhMy0yYjM2LTQzOGEtOGRhZC0yODc5MDlhMGEwNjEvMzNjZTJlNGMtZjY4Yi0z NzNlLTgzYTUtMzAxYThjNTI3YWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzgxYzU0YTMtMmIzNi00MzhhLThk YWQtMjg3OTA5YTBhMDYxLzM4MWM1NGEzLTJiMzYtNDM4YS04ZGFkLTI4NzkwOWEw YTA2MS5jcmwwHwYDVR0jBBgwFoAU9iZ3EZeKDQYvAxavio3itt6AB10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zODFjNTRhMy0yYjM2LTQzOGEtOGRhZC0yODc5 MDlhMGEwNjEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4gQMA4E AgACMAgDBgQmAv3UADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8CrxqAXvyR1giJJnQdI28ayN26jwqOy7e 9wbn/yrwrwzBxgwORg4vU7/HNPe+kes6nFCibJd1IMNI7a8Bygus96JpVJdIqHX3 EQRc9UtzPwsKdHjOfkx9Hv4wzftbbcLu9CuV8aH2X0sTieaYDahm8QY2ZNl0+/SE JgviAGzcTJLIwFGF2OAnsSLLkHKhVLUBQQo5AfpBjw3mEcf0gxgrnyE9kZKcVtoE dVmNmh03CFjckBTsDOzMAdQOG/d9yYvK3fl8trOMxNMMahqpekHNTiIXe1rNB9m2 uM1IIYxB8OFts9B4NI7qPDSDqIoYE1ZQ/fCeVe7DgRDwNg+Ok9PL -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:30 2025 by rpki-client