This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json) Hash identifier: mPmt3X7DCGNbowRRdJbfxQC/OhSdajMEfW1uRhwV1vE= Subject key identifier: E1:7C:3B:33:BB:C5:AE:88:AE:93:01:C5:11:2C:8A:F5:77:E5:E7:58 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584BEF1B37304515766D47CB1BC0 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 13849 IP address blocks: 23.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:37:30:45:15:76:6d:47:cb:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=461f274a-24b3-4421-b211-7b8080211818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:20:79:19:99:65:2e:d7:d7:27:aa:68:78: 03:64:3d:38:19:e7:46:0a:66:2c:c1:1b:b7:b8:bb: 70:f8:fa:60:cb:4c:c0:68:fe:ef:e5:6f:a5:22:b5: ff:d5:85:08:8a:c7:50:93:55:11:67:85:4c:c2:80: fb:c1:71:6d:5e:c0:aa:26:d3:b6:e7:14:0a:db:ae: 38:7b:fe:58:c9:cb:ac:45:4e:28:a7:30:e7:39:26: 58:16:7c:ed:91:75:bd:b5:79:10:91:26:85:d8:c3: 0d:3f:5b:21:d7:a1:ac:df:a9:46:d7:dc:9c:89:64: 4b:10:3d:1d:48:e3:5e:7f:37:c2:91:7e:51:33:05: ba:6f:02:ac:63:c4:44:e6:42:1a:53:da:44:7f:1e: 40:0a:18:c6:34:2a:e5:06:9b:68:27:ab:c8:b5:1d: 91:2a:f5:d0:49:ad:70:33:88:d8:98:9e:d2:cb:38: b0:01:68:43:22:b1:1b:c4:da:a4:37:af:8b:0e:b7: c8:e9:eb:c6:4b:e8:fb:2a:88:e7:fa:d2:1e:93:48: b0:73:8c:7c:e1:32:e6:13:d0:8c:87:5b:a3:98:15: 06:55:c6:a4:f2:d9:96:4c:94:1f:18:52:84:8e:7c: fb:f5:f2:b2:18:d5:ff:9d:e8:4c:f0:e0:bf:51:c3: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7C:3B:33:BB:C5:AE:88:AE:93:01:C5:11:2C:8A:F5:77:E5:E7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 23.133.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:be:08:ff:26:dd:8e:9b:63:cf:30:d3:fd:1b:11:5c:ae:8f: 89:32:a4:8e:62:6a:e3:6e:25:3e:84:8b:ab:04:64:b8:82:28: 5f:70:13:77:09:22:c2:c0:0d:e0:41:a9:75:8e:8e:29:80:af: d1:43:0f:37:02:0e:aa:47:49:0e:d9:70:76:56:4f:bc:35:c0: 64:41:93:5f:bb:cf:fe:3b:7b:a5:79:a6:84:09:f2:08:51:54: ca:7a:bd:33:f7:5d:38:1f:d9:f5:e5:fd:5f:25:3d:b6:f6:26: 65:9a:aa:d5:f2:15:d7:c9:1b:a3:c2:54:bc:39:0a:d0:4d:4c: 05:1f:bf:e9:4f:25:cb:15:9f:d0:5f:fa:04:49:a5:c0:44:1a: 2e:0a:fe:38:65:9f:92:fd:3b:8f:ed:df:d1:a1:1a:b0:0f:8c: 52:48:ab:4f:b8:6a:6a:bf:53:8a:fc:49:29:bc:a7:36:62:b7: af:c2:c6:9b:ce:3c:cd:08:9c:bd:16:9b:8f:2e:dc:47:eb:51: a0:c9:d6:6d:d7:ec:9b:09:00:29:bc:be:ac:09:16:a2:41:88: a6:be:44:77:95:f3:8e:3c:8c:3a:b7:19:f8:d4:bd:a2:c4:41: ae:99:b6:c6:54:60:88:0f:be:2e:36:d8:59:9a:da:cc:09:51: 33:f8:19:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGzcwRRV2bUfLG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk NDYxZjI3NGEtMjRiMy00NDIxLWIyMTEtN2I4MDgwMjExODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUgeRmZZS7X1yeqaHgDZD04GedGCmYswRu3 uLtw+Ppgy0zAaP7v5W+lIrX/1YUIisdQk1URZ4VMwoD7wXFtXsCqJtO25xQK2644 e/5YycusRU4opzDnOSZYFnztkXW9tXkQkSaF2MMNP1sh16Gs36lG19yciWRLED0d SONefzfCkX5RMwW6bwKsY8RE5kIaU9pEfx5AChjGNCrlBptoJ6vItR2RKvXQSa1w M4jYmJ7SyziwAWhDIrEbxNqkN6+LDrfI6evGS+j7Kojn+tIek0iwc4x84TLmE9CM h1ujmBUGVcak8tmWTJQfGFKEjnz79fKyGNX/nehM8OC/UcO4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF8OzO7xa6IrpMBxREsivV35edYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW+CP8m3Y6bY88w0/0bEVyuj4kypI5iauNuJT6Ei6sEZLiCKF9wE3cJ IsLADeBBqXWOjimAr9FDDzcCDqpHSQ7ZcHZWT7w1wGRBk1+7z/47e6V5poQJ8ghR VMp6vTP3XTgf2fXl/V8lPbb2JmWaqtXyFdfJG6PCVLw5CtBNTAUfv+lPJcsVn9Bf +gRJpcBEGi4K/jhln5L9O4/t39GhGrAPjFJIq0+4amq/U4r8SSm8pzZit6/CxpvO PM0InL0Wm48u3EfrUaDJ1m3X7JsJACm8vqwJFqJBiKa+RHeV8448jDq3GfjUvaLE Qa6ZtsZUYIgPvi422Fma2swJUTP4GYI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:44 2025 by rpki-client