This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa
File: 40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa (raw, json)
Hash identifier: eGA9ZR7gpAtPcog0kCooQNMK2QqJXBkXdgIkRb4/Co8=
Subject key identifier: 2B:86:91:EB:7C:A3:5C:A7:84:46:8F:4F:B8:91:E7:10:FD:DA:8B:B5
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C470BD8D71F7793B26F0A2AC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 23473
IP address blocks: 153.33.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:d8:d7:1f:77:93:b2:6f:0a:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=e0fda132-f421-4ce3-85b3-ecfb068a6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c4:d0:a5:b2:33:2e:a6:bc:b7:2e:c5:3c:
28:86:d5:53:45:a6:ad:b6:8f:e3:96:ad:3f:4d:bb:
72:f3:7f:08:cf:ae:bc:b7:03:33:5c:13:b7:25:26:
b8:2f:56:81:14:ae:da:63:be:7d:ba:a8:70:e5:a5:
b5:89:63:dd:fe:62:ab:e0:68:33:10:41:b0:cf:49:
b5:d9:e0:b5:56:8a:b2:e5:e4:59:55:eb:6c:bb:34:
82:22:f2:7c:c7:67:fa:7a:c4:5a:6e:d1:4d:1b:99:
04:5a:83:a3:78:7b:a8:7d:cc:db:70:eb:15:b6:9a:
f0:63:1d:1e:aa:8c:e7:7d:49:fd:e6:27:ec:9b:84:
ce:a9:b5:d4:f2:65:8f:46:83:b5:da:ac:99:f4:c9:
0e:fb:54:48:73:da:f2:97:c0:3c:74:bb:b4:a3:4b:
c9:58:ec:22:fc:aa:1d:51:be:8c:bf:79:99:d8:b6:
3e:fc:04:45:1d:82:3c:19:a3:b6:94:34:65:9b:8d:
ac:0b:6d:91:57:a2:8a:0e:87:6c:c6:80:ea:0e:1b:
85:d2:a6:a9:b6:aa:d3:db:95:c9:a4:de:88:5d:46:
07:ca:0d:88:32:0e:ef:ea:82:03:19:41:d8:d5:48:
6a:58:b6:5f:7a:e3:70:19:6e:91:9d:ea:20:69:55:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:91:EB:7C:A3:5C:A7:84:46:8F:4F:B8:91:E7:10:FD:DA:8B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a1:a2:0c:48:38:61:1f:6f:0c:02:d4:1d:d2:8b:5a:57:ac:
ea:bf:62:2a:71:b7:46:fd:cf:b0:25:88:a4:02:a0:4f:5d:e3:
e1:95:ed:88:0a:67:b9:b0:d9:73:92:f0:7a:d0:c8:ea:30:86:
2c:d0:99:53:a7:49:c8:44:32:26:96:13:f0:0b:35:12:50:b5:
5f:b9:9b:77:53:48:da:b7:a8:a5:d4:db:61:10:89:c5:96:4c:
f5:01:f0:65:b8:a5:aa:3a:31:fe:09:31:3a:c1:71:fe:c4:c5:
51:6e:5c:7e:01:0d:a1:da:61:ca:91:05:88:38:47:14:32:8d:
bf:ea:3a:a2:82:07:ec:2b:a2:09:f0:b2:a5:0d:eb:2a:c2:34:
98:e3:2b:d9:2e:c6:db:0e:8c:9c:74:58:95:84:e5:1b:44:ff:
85:b7:54:e5:ba:34:ca:25:08:65:bb:02:41:b2:47:5d:f3:51:
40:67:50:01:28:b9:b8:e3:2b:32:ae:6a:f3:b5:a8:64:35:d6:
38:23:63:1c:c0:f2:a3:60:77:89:f7:d4:ad:48:0e:89:f5:8c:
83:f2:90:a0:f8:59:d1:ac:b0:74:f0:90:93:40:52:73:da:52:
be:8b:fa:35:1f:10:16:a1:00:c3:33:49:9d:09:ef:36:87:34:
66:f6:bf:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC9jXH3eTsm8KKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk
ZTBmZGExMzItZjQyMS00Y2UzLTg1YjMtZWNmYjA2OGE2MzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLfE0KWyMy6mvLcuxTwohtVTRaatto/jlq0/
Tbty838Iz668twMzXBO3JSa4L1aBFK7aY759uqhw5aW1iWPd/mKr4GgzEEGwz0m1
2eC1Voqy5eRZVetsuzSCIvJ8x2f6esRabtFNG5kEWoOjeHuofczbcOsVtprwYx0e
qoznfUn95ifsm4TOqbXU8mWPRoO12qyZ9MkO+1RIc9ryl8A8dLu0o0vJWOwi/Kod
Ub6Mv3mZ2LY+/ARFHYI8GaO2lDRlm42sC22RV6KKDodsxoDqDhuF0qaptqrT25XJ
pN6IXUYHyg2IMg7v6oIDGUHY1UhqWLZfeuNwGW6RneogaVWT0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuGket8o1ynhEaPT7iR5xD92ou1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDA0NzRjYmItZGQ1ZC0z
ZDQ0LWE0YmEtYTkzMzVjNWE5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6hogxIOGEfbwwC1B3Si1pXrOq/Yipxt0b9z7AliKQCoE9d4+GV7YgK
Z7mw2XOS8HrQyOowhizQmVOnSchEMiaWE/ALNRJQtV+5m3dTSNq3qKXU22EQicWW
TPUB8GW4pao6Mf4JMTrBcf7ExVFuXH4BDaHaYcqRBYg4RxQyjb/qOqKCB+wrognw
sqUN6yrCNJjjK9kuxtsOjJx0WJWE5RtE/4W3VOW6NMolCGW7AkGyR13zUUBnUAEo
ubjjKzKuavO1qGQ11jgjYxzA8qNgd4n31K1IDon1jIPykKD4WdGssHTwkJNAUnPa
Ur6L+jUfEBahAMMzSZ0J7zaHNGb2v6U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:09 2026 by rpki-client