This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/720e011b-2a18-38d2-95c1-645632f346d7.roa File: 720e011b-2a18-38d2-95c1-645632f346d7.roa (raw, json) Hash identifier: mVHjSMdjYtUdTJNtbzto4KspS7APSICFbNFyIX/Qdoo= Subject key identifier: 32:A5:E0:B5:1E:4A:07:C2:A3:70:AF:49:57:17:15:04:C5:7E:4F:6F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C4F6BCC3B15D0F17509F28500 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/720e011b-2a18-38d2-95c1-645632f346d7.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:cc:3b:15:d0:f1:75:09:f2:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=85c39432-ca4b-4a7f-9625-f5718286d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:8b:a4:8b:d7:8d:47:08:da:a0:56:bf:84: 76:eb:17:11:cc:8f:8c:8c:cb:e8:86:41:b0:30:4b: d9:26:96:a0:b8:db:cf:58:6a:bf:a5:7c:f6:e7:7e: 98:3b:f8:06:b5:26:5d:cc:74:60:75:a4:58:b6:f7: 5e:26:ab:c4:86:91:a0:a4:c3:b5:c2:87:d2:1d:2f: cb:81:9c:13:ca:3e:c2:fd:c1:20:d2:06:be:7c:f1: 18:9b:89:fa:ef:fa:9b:d3:39:23:5c:de:e1:b3:2d: 55:bc:a7:8e:fa:d8:93:87:52:bc:80:63:9f:13:88: 22:e6:75:44:58:b2:73:30:d2:3a:e2:78:eb:8b:08: 5e:ae:ac:de:b7:2f:3e:e0:cb:4f:62:3f:eb:cc:5b: 88:b8:c1:2a:7c:1f:ea:69:c4:55:31:40:91:8c:25: c7:24:18:14:a5:f7:89:53:b9:4a:e9:e2:79:ee:23: e4:1b:1c:01:ec:14:80:d1:eb:ba:f6:29:a1:be:15: aa:b9:0c:a7:d7:f8:0a:8c:90:2d:65:8e:cb:de:20: 5f:96:97:ae:ab:36:cd:78:1e:61:6c:52:10:47:02: 86:87:ef:a2:0e:7e:ee:3f:e5:43:90:b5:e8:98:80: 85:97:39:ac:17:49:5e:8d:b4:58:1d:09:37:f4:03: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A5:E0:B5:1E:4A:07:C2:A3:70:AF:49:57:17:15:04:C5:7E:4F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/720e011b-2a18-38d2-95c1-645632f346d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a1:b6:67:c1:fc:5a:ce:5b:b0:31:84:51:bd:22:27:61:15: 75:46:37:b8:16:49:f1:c4:a5:22:e0:5f:d5:2b:8d:50:de:a3: be:5a:04:97:2d:cc:d5:5a:ae:9f:16:83:1b:fd:ed:05:66:69: 21:7a:85:38:3c:a5:66:e4:78:d9:f9:d0:92:0e:2c:c8:ff:52: 19:e4:fe:96:96:57:f3:59:ff:56:f4:84:35:49:1c:ec:a6:fe: bc:db:73:4d:49:03:63:77:4b:64:42:5b:d0:9c:b1:4a:c9:f0: bb:17:f3:e1:f4:ec:f3:c8:89:dd:14:d8:ea:c0:40:53:61:5f: 1c:68:28:7d:1e:ac:3c:ff:0a:eb:b3:81:7a:c2:ac:68:b9:f5: 60:85:4d:59:4a:f0:69:04:64:a6:e5:4f:0d:99:c0:38:73:8a: e1:3a:42:dd:7a:99:18:a1:c5:e4:85:b2:74:11:ea:dc:8b:a5: 8e:a6:61:38:08:59:13:a2:a6:67:56:32:9c:dc:ce:26:af:21: ce:a4:a1:6b:2d:50:4b:5f:91:c5:40:5f:77:a9:d4:f9:a9:b9: a6:0f:ff:fb:83:c5:de:68:78:bb:46:8f:9c:60:bd:fe:65:52: 94:3c:a0:86:54:c2:1d:c3:42:2c:c8:e5:2c:f3:21:59:a9:8d: 19:d1:3a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa8w7FdDxdQnyhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk ODVjMzk0MzItY2E0Yi00YTdmLTk2MjUtZjU3MTgyODZkN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOeLpIvXjUcI2qBWv4R26xcRzI+MjMvohkGw MEvZJpaguNvPWGq/pXz2536YO/gGtSZdzHRgdaRYtvdeJqvEhpGgpMO1wofSHS/L gZwTyj7C/cEg0ga+fPEYm4n67/qb0zkjXN7hsy1VvKeO+tiTh1K8gGOfE4gi5nVE WLJzMNI64njriwherqzety8+4MtPYj/rzFuIuMEqfB/qacRVMUCRjCXHJBgUpfeJ U7lK6eJ57iPkGxwB7BSA0eu69imhvhWquQyn1/gKjJAtZY7L3iBflpeuqzbNeB5h bFIQRwKGh++iDn7uP+VDkLXomICFlzmsF0lejbRYHQk39APZawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKl4LUeSgfCo3CvSVcXFQTFfk9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNzIwZTAxMWItMmExOC0z OGQyLTk1YzEtNjQ1NjMyZjM0NmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGShtmfB/FrOW7AxhFG9IidhFXVGN7gWSfHEpSLgX9UrjVDeo75aBJct zNVarp8Wgxv97QVmaSF6hTg8pWbkeNn50JIOLMj/Uhnk/paWV/NZ/1b0hDVJHOym /rzbc01JA2N3S2RCW9CcsUrJ8LsX8+H07PPIid0U2OrAQFNhXxxoKH0erDz/Cuuz gXrCrGi59WCFTVlK8GkEZKblTw2ZwDhziuE6Qt16mRihxeSFsnQR6tyLpY6mYTgI WROipmdWMpzcziavIc6koWstUEtfkcVAX3ep1PmpuaYP//uDxd5oeLtGj5xgvf5l UpQ8oIZUwh3DQizI5SzzIVmpjRnROsk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:15:33 2026 by rpki-client