This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2c33ca07-446e-3049-b708-3da4ef6b63f0.roa File: 2c33ca07-446e-3049-b708-3da4ef6b63f0.roa (raw, json) Hash identifier: fI8ZII2tHzMTPTq42CX9m9Eh88JIDRSl+QsNM5l7GGs= Subject key identifier: 47:BD:88:8B:38:D9:53:C2:3B:4C:95:16:30:67:0F:56:8F:30:08:C1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C4F6BCEBE0508F0267A924380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2c33ca07-446e-3049-b708-3da4ef6b63f0.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:ce:be:05:08:f0:26:7a:92:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=a94593a6-adb5-42c3-ac8a-fd7564f3500c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:52:87:8e:5a:d8:be:24:38:57:d3:42:6d: 2f:76:f0:05:28:d6:d1:1f:1b:2b:a9:0a:e7:16:57: 25:b1:06:be:d4:51:0c:92:1b:f6:ff:35:29:3c:1e: 2e:8b:42:87:21:ce:12:0d:b1:a8:9d:a2:92:c5:23: 63:77:1a:9c:7e:41:7d:e2:54:b1:a7:7c:b5:34:4c: 47:73:ec:b1:77:05:21:0e:1b:c7:bf:5b:10:b0:dd: a1:4c:45:83:f1:8f:6a:d9:92:3f:11:76:a1:9b:08: 52:92:dc:4e:55:4e:1a:64:74:1d:00:72:68:82:82: 68:78:d7:83:3b:f5:eb:30:ac:1f:77:46:9e:11:ed: 5e:c4:e0:5c:68:13:b8:98:7e:c1:57:53:f6:f5:b2: 5b:9a:bb:b4:38:e2:c6:44:00:f6:6f:92:1d:01:03: cc:90:cc:f3:f4:2a:88:1e:27:4d:21:33:6d:9f:c5: 67:28:c4:73:7d:18:96:f7:80:53:41:15:3e:d9:f5: ac:82:5a:4d:2e:1d:2f:f1:b5:8d:8f:c8:94:61:72: 96:56:ec:1d:9e:ad:e7:52:05:0a:f5:48:75:e1:fa: 2c:51:da:a4:34:5e:4b:57:83:0b:f3:09:15:c9:39: 84:48:a9:4c:67:ae:c4:f5:71:60:f9:97:9d:f9:dc: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BD:88:8B:38:D9:53:C2:3B:4C:95:16:30:67:0F:56:8F:30:08:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2c33ca07-446e-3049-b708-3da4ef6b63f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3b:c6:88:0e:31:e4:53:b6:26:7d:17:fb:91:d9:c9:e1:af: 75:d7:f7:36:26:1e:a3:2e:4c:ef:6d:75:0a:a2:2f:3c:70:93: 41:4f:0c:9a:a2:07:04:ce:5b:81:1f:09:3f:16:f4:9a:d3:91: 2f:2f:28:88:2e:bc:ea:ad:50:69:ce:90:6c:d1:72:d0:d1:bc: 2b:53:6a:6f:ed:4e:12:97:d7:ef:b2:1c:41:0c:0c:5d:25:9b: 32:18:9d:4b:d6:94:51:4e:cd:24:40:5d:f5:d1:32:65:b2:bc: 0f:58:54:c0:c1:98:30:ad:3a:84:b4:84:d4:4e:24:d0:4d:7e: cd:bd:ad:e9:aa:e3:8a:e6:b2:74:7a:58:fe:4a:5b:d0:3c:2e: 23:e9:04:ce:23:7a:56:19:a8:ab:e0:c2:9f:ea:2c:76:a3:19: 01:cd:4c:25:c6:8c:18:e5:22:68:0a:33:30:3b:5a:25:43:a5: ea:61:71:ae:42:39:d8:d4:7f:1d:d5:62:f6:0c:da:70:fc:b5: 86:b0:94:72:c2:d7:76:3c:66:0d:05:f5:88:9a:54:f6:7e:2b: 65:63:5a:a3:1b:a9:51:91:be:f1:10:95:5b:c0:d9:a1:aa:34: 4e:75:89:bd:33:6f:8a:52:bb:75:0c:01:f5:03:c4:45:ad:3e: a2:12:1c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa86+BQjwJnqSQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk YTk0NTkzYTYtYWRiNS00MmMzLWFjOGEtZmQ3NTY0ZjM1MDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMlSh45a2L4kOFfTQm0vdvAFKNbRHxsrqQrn FlclsQa+1FEMkhv2/zUpPB4ui0KHIc4SDbGonaKSxSNjdxqcfkF94lSxp3y1NExH c+yxdwUhDhvHv1sQsN2hTEWD8Y9q2ZI/EXahmwhSktxOVU4aZHQdAHJogoJoeNeD O/XrMKwfd0aeEe1exOBcaBO4mH7BV1P29bJbmru0OOLGRAD2b5IdAQPMkMzz9CqI HidNITNtn8VnKMRzfRiW94BTQRU+2fWsglpNLh0v8bWNj8iUYXKWVuwdnq3nUgUK 9Uh14fosUdqkNF5LV4ML8wkVyTmESKlMZ67E9XFg+Zed+dyDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe9iIs42VPCO0yVFjBnD1aPMAjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmMzM2NhMDctNDQ2ZS0z MDQ5LWI3MDgtM2RhNGVmNmI2M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC47xogOMeRTtiZ9F/uR2cnhr3XX9zYmHqMuTO9tdQqiLzxwk0FPDJqi BwTOW4EfCT8W9JrTkS8vKIguvOqtUGnOkGzRctDRvCtTam/tThKX1++yHEEMDF0l mzIYnUvWlFFOzSRAXfXRMmWyvA9YVMDBmDCtOoS0hNROJNBNfs29remq44rmsnR6 WP5KW9A8LiPpBM4jelYZqKvgwp/qLHajGQHNTCXGjBjlImgKMzA7WiVDpephca5C OdjUfx3VYvYM2nD8tYawlHLC13Y8Zg0F9YiaVPZ+K2VjWqMbqVGRvvEQlVvA2aGq NE51ib0zb4pSu3UMAfUDxEWtPqISHM8= -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:00 2026 by rpki-client