This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa File: c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa (raw, json) Hash identifier: Pm1wPi+D0EMT9VFXDNOEv+BbpOJoEH7oEZNoMW3O64g= Subject key identifier: BE:DE:02:67:67:2D:60:32:BE:0F:B4:F7:BC:CD:56:01:B4:33:A6:63 Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7 Certificate serial: 010D0C9F4328584BF1E5E8CC2A7499C5ED27B6E0 Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 7018 IP address blocks: 170.205.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e8:cc:2a:74:99:c5:ed:27:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=3404b0bb-6bce-4bcf-9609-3932b48cdc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:bc:2d:e8:7c:be:00:3f:17:c8:5a:0a:e0: b9:fd:8b:a1:9a:00:c9:fc:78:fc:3a:1e:f8:73:94: c8:a8:b9:1d:13:d5:9f:d1:7d:ae:58:6e:a2:73:12: 8d:4c:ea:ff:15:88:04:2c:76:c3:b2:23:d4:33:e1: 89:fd:68:83:92:ba:bc:7e:05:97:11:b1:b1:8b:2c: 8c:52:d2:4d:62:e2:0f:dd:3a:83:b7:3b:d0:d6:69: 9a:2d:30:0f:70:bd:d0:9b:f5:38:40:11:4a:ef:96: 0b:a1:e5:f3:3c:14:35:83:f5:51:b2:8a:1a:bb:83: b5:2c:a2:b4:c9:c3:0c:81:46:0e:ad:89:6a:91:74: 60:9c:32:b0:af:12:eb:23:f4:36:97:52:52:2b:ce: a2:8a:ea:90:bf:48:62:2c:1e:3f:2d:a5:4e:a7:db: 38:af:ad:97:6c:f5:1a:95:72:86:c6:b9:17:43:26: cd:5b:42:01:26:82:e1:d4:61:ed:b9:47:91:2e:a8: b9:5e:27:ec:3d:42:b0:39:c1:ae:d7:7c:29:02:d2: 46:5a:00:e8:1b:22:8e:c4:b7:29:5a:7a:9e:b8:58: 94:f6:24:bf:63:26:40:1a:96:5e:ba:dd:0c:e8:eb: 84:98:24:45:7a:da:e0:b8:35:ca:a2:98:23:a5:ab: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:02:67:67:2D:60:32:BE:0F:B4:F7:BC:CD:56:01:B4:33:A6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl X509v3 Authority Key Identifier: keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer sbgp-ipAddrBlock: critical IPv4: 170.205.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a3:e0:c2:e0:f5:0c:26:90:3f:fd:2b:b9:8c:8b:76:69:63: 05:3e:28:9a:24:6a:22:fc:e5:6b:a5:45:7f:63:44:f8:ff:d5: 10:0e:b7:5a:3e:1e:92:e1:2d:98:ef:2d:02:cc:3d:77:9f:d9: 3c:69:6e:d7:b9:cc:2f:a9:02:7d:c5:8c:8c:a9:99:3d:ff:b6: 2b:7b:24:ec:d9:2c:df:e5:c6:e8:1e:51:f0:23:b4:1f:2e:ba: d8:ee:33:72:73:5d:fc:86:df:13:ef:93:9d:13:51:05:a9:8c: 01:51:17:7a:c6:2f:a8:c5:5c:88:62:50:b2:04:7f:2e:ec:e3: 13:6b:d8:c6:10:ac:41:85:71:cd:04:0a:36:9e:5f:c7:9f:64: a7:68:19:09:c1:f9:35:9a:07:70:64:75:90:48:f3:ac:6f:be: b3:64:98:d9:b6:a9:f1:6d:cf:a3:59:64:f7:00:20:1b:de:87: f8:f8:5c:66:51:70:ec:0a:79:84:8f:8b:bc:5b:39:74:c7:bb: 83:1d:24:7a:23:68:50:99:72:5a:94:67:01:6d:f0:aa:e2:a0: d1:e8:c2:38:7e:fd:e5:10:8c:ef:e5:f4:ab:e8:2c:72:31:47: f7:75:ee:c5:a8:d6:91:ae:1b:30:00:0d:32:fe:68:10:f5:83: f7:e7:b4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5ejMKnSZxe0ntuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMwMWM3OTAtYzFmNC00ZmQ3LWE5MzktMWE4ZDI2Njli NWI3MB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk MzQwNGIwYmItNmJjZS00YmNmLTk2MDktMzkzMmI0OGNkYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp828Leh8vgA/F8haCuC5/YuhmgDJ/Hj8Oh74 c5TIqLkdE9Wf0X2uWG6icxKNTOr/FYgELHbDsiPUM+GJ/WiDkrq8fgWXEbGxiyyM UtJNYuIP3TqDtzvQ1mmaLTAPcL3Qm/U4QBFK75YLoeXzPBQ1g/VRsooau4O1LKK0 ycMMgUYOrYlqkXRgnDKwrxLrI/Q2l1JSK86iiuqQv0hiLB4/LaVOp9s4r62XbPUa lXKGxrkXQybNW0IBJoLh1GHtuUeRLqi5XifsPUKwOcGu13wpAtJGWgDoGyKOxLcp WnqeuFiU9iS/YyZAGpZeut0M6OuEmCRFetrguDXKopgjpauC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7eAmdnLWAyvg+097zNVgG0M6ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAx Yzc5MC1jMWY0LTRmZDctYTkzOS0xYThkMjY2OWI1YjcvYzc3Y2Y3YTEtMGE1Zi0z YmNkLWIwMjEtMzdhY2NmNmU2NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDMwMWM3OTAtYzFmNC00ZmQ3LWE5 MzktMWE4ZDI2NjliNWI3L2QzMDFjNzkwLWMxZjQtNGZkNy1hOTM5LTFhOGQyNjY5 YjViNy5jcmwwHwYDVR0jBBgwFoAUNhVcMeA33FGXyNmKpO5YWngWySwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAxYzc5MC1jMWY0LTRmZDctYTkzOS0xYThk MjY2OWI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2j4MLg9QwmkD/9K7mMi3ZpYwU+KJokaiL85WulRX9jRPj/1RAOt1o+ HpLhLZjvLQLMPXef2Txpbte5zC+pAn3FjIypmT3/tit7JOzZLN/lxugeUfAjtB8u utjuM3JzXfyG3xPvk50TUQWpjAFRF3rGL6jFXIhiULIEfy7s4xNr2MYQrEGFcc0E CjaeX8efZKdoGQnB+TWaB3BkdZBI86xvvrNkmNm2qfFtz6NZZPcAIBveh/j4XGZR cOwKeYSPi7xbOXTHu4MdJHojaFCZclqUZwFt8KrioNHowjh+/eUQjO/l9KvoLHIx R/d17sWo1pGuGzAADTL+aBD1g/fntJ4= -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:50 2025 by rpki-client