This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa File: a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa (raw, json) Hash identifier: U55KG0rRRLLcHkGJexbqOv854tr0QQXj7T2kh6DpHrY= Subject key identifier: 58:46:B0:0A:71:51:65:C5:73:20:01:26:96:C3:D4:29:84:E1:D9:B8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C4F6BC906526921E9C0D3BA80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:c9:06:52:69:21:e9:c0:d3:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=25b14b33-2f8b-453a-aaf1-a8d39422ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:92:15:36:c1:65:b9:8b:2b:23:a0:5a:c1: 52:3c:fe:7d:dc:dc:dc:c1:9d:88:62:72:c1:6a:b3: 38:6b:37:30:0c:30:8b:4a:d0:0a:7c:e4:61:d3:12: b8:cd:20:5e:b1:be:e4:3d:bc:e6:bc:44:85:f8:3e: df:e9:9f:62:a4:7e:d8:f7:68:1e:93:e4:b3:86:46: 7a:e4:71:6b:bc:36:04:d1:cf:4b:d5:13:4c:88:0e: 0d:d3:63:de:f5:f5:dd:ef:6e:11:6d:a9:05:49:33: c3:84:f1:3d:c4:ac:89:13:e0:32:74:39:35:a9:6b: 31:15:38:47:35:cd:8f:ac:63:28:a2:fb:97:db:d9: 32:e1:d8:b5:a4:03:7e:af:b1:0b:ac:b2:c5:86:61: 9e:47:44:38:af:28:eb:95:63:1c:16:3f:43:c3:d3: 1f:d9:d8:c6:15:cf:c7:d3:73:d7:21:fd:74:07:e8: 05:c7:36:b1:c5:e1:75:2b:9a:c8:ee:a6:25:67:5f: e8:9a:35:8b:3c:e6:29:44:ea:c2:e2:19:f3:d9:76: 6e:39:d7:b1:72:96:11:52:47:66:77:ea:40:51:3b: 8b:43:85:50:70:8b:cf:0b:24:ae:fb:6f:22:21:c8: 31:a7:94:d5:f7:a0:1b:8a:fe:fc:ed:5e:dd:45:fa: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:B0:0A:71:51:65:C5:73:20:01:26:96:C3:D4:29:84:E1:D9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:63:3b:7b:d1:07:b3:ec:65:72:0a:e5:4f:4b:04:6b:bf:6b: fb:4c:c6:51:b3:c4:6d:0f:64:58:d1:82:3b:ee:20:3c:f9:1f: ee:7e:da:3b:a1:08:9f:bc:a5:6e:8d:29:3c:8b:d4:08:31:5c: bc:f3:e7:cc:e4:8b:1e:85:65:4e:b5:33:5e:5c:ca:47:87:00: bf:89:51:03:7f:7f:58:03:4d:0c:5a:83:ed:31:1b:9f:b6:51: 90:5b:2e:38:19:f4:dd:05:85:d0:db:fe:37:7f:ed:b0:2d:fc: 84:65:cf:0d:5d:d6:2d:bc:b2:77:1a:73:7d:d6:9f:ed:9a:6c: 4a:33:de:67:a9:b4:30:3c:ff:a6:24:19:63:18:a4:5d:5c:d5: 62:ef:3d:0a:e1:6d:ec:02:3d:8c:0e:e7:41:19:1a:ac:fa:aa: 4d:6f:c3:f3:8b:78:d9:cd:ba:36:b2:f9:6b:f9:d9:80:2d:33: 1b:a7:b1:7e:4d:2f:12:81:c7:ab:8c:e0:f2:d1:d5:34:91:46: 6b:17:f4:8e:c9:d7:0b:27:06:ce:91:a4:30:f1:9c:e7:31:bd: 55:d4:e2:4c:ff:a0:93:e6:5c:46:2d:29:ed:40:07:ec:70:07: 56:98:a9:cd:50:22:54:03:bb:e8:7c:9b:3d:3b:76:cb:4f:bc: 8e:31:56:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa8kGUmkh6cDTuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk MjViMTRiMzMtMmY4Yi00NTNhLWFhZjEtYThkMzk0MjJmZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvuSFTbBZbmLKyOgWsFSPP593NzcwZ2IYnLB arM4azcwDDCLStAKfORh0xK4zSBesb7kPbzmvESF+D7f6Z9ipH7Y92gek+SzhkZ6 5HFrvDYE0c9L1RNMiA4N02Pe9fXd724RbakFSTPDhPE9xKyJE+AydDk1qWsxFThH Nc2PrGMoovuX29ky4di1pAN+r7ELrLLFhmGeR0Q4ryjrlWMcFj9Dw9Mf2djGFc/H 03PXIf10B+gFxzaxxeF1K5rI7qYlZ1/omjWLPOYpROrC4hnz2XZuOdexcpYRUkdm d+pAUTuLQ4VQcIvPCySu+28iIcgxp5TV96Abiv787V7dRfoA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhGsApxUWXFcyABJpbD1CmE4dm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTA1ZTBkYzQtMTNlZC0z ZTE2LWFjNjMtMzAzODZlNTAwNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNjO3vRB7PsZXIK5U9LBGu/a/tMxlGzxG0PZFjRgjvuIDz5H+5+2juh CJ+8pW6NKTyL1AgxXLzz58zkix6FZU61M15cykeHAL+JUQN/f1gDTQxag+0xG5+2 UZBbLjgZ9N0FhdDb/jd/7bAt/IRlzw1d1i28sncac33Wn+2abEoz3meptDA8/6Yk GWMYpF1c1WLvPQrhbewCPYwO50EZGqz6qk1vw/OLeNnNujay+Wv52YAtMxunsX5N LxKBx6uM4PLR1TSRRmsX9I7J1wsnBs6RpDDxnOcxvVXU4kz/oJPmXEYtKe1AB+xw B1aYqc1QIlQDu+h8mz07dstPvI4xVqI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:19:57 2026 by rpki-client