This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa File: cefd100a-876c-3446-9ee7-3985f0ef017d.roa (raw, json) Hash identifier: 32S23U4wIUbVmWOKmXKxwIeyAoL3KOD2X8Mt6buGspA= Subject key identifier: 59:AD:DB:D5:15:79:6B:30:47:C7:4D:14:82:C9:6E:25:37:73:C0:E7 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C470BD764587F2F1527395800 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:d7:64:58:7f:2f:15:27:39:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=e2a4db06-4e6d-4e1d-83eb-960b4b0905bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:6a:e6:0b:92:2c:d1:96:8f:d0:69:a2:c6: d3:d5:56:a6:7e:67:af:65:e5:3e:b1:5f:9c:51:de: 9e:cd:97:ab:29:66:00:89:16:4c:20:c0:4b:fb:49: cf:f1:e3:18:30:b9:ff:2e:18:35:f4:a7:3c:3d:18: 87:8d:2c:fb:33:b0:78:c0:94:2f:62:bc:67:e1:3a: e2:95:42:6d:5e:72:87:0e:a1:4b:ec:1a:80:14:37: fa:d6:f9:7c:ad:48:83:b3:91:5d:b4:d8:d7:b1:ac: c4:e1:6b:d4:c1:7a:e5:f6:50:5b:96:9b:44:20:55: 89:83:be:47:8a:61:8e:a8:1a:c5:a1:5c:3b:59:67: f1:3f:48:55:bd:05:93:7f:a8:f3:c3:c5:95:5e:b3: df:a7:5d:d5:81:09:b8:bf:13:6b:d7:f4:ea:64:a1: d7:1f:70:3a:d6:0f:33:d6:7a:8f:fd:5a:74:ed:cf: 6e:3e:71:42:f5:de:64:8b:08:10:46:ff:ff:2b:67: d2:4f:d2:48:c5:ea:39:e0:98:e3:b8:6f:d6:7d:e5: 76:bd:90:bb:cb:11:e1:f9:cd:9d:30:be:93:d1:9d: 9c:95:d7:9a:09:12:c3:c8:2d:70:94:50:76:6b:ae: 94:04:70:b1:ed:d9:da:44:d6:25:18:d6:e4:ad:84: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AD:DB:D5:15:79:6B:30:47:C7:4D:14:82:C9:6E:25:37:73:C0:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6b:15:4d:2f:a5:ba:31:93:5c:b6:5b:6e:d0:12:1e:28:0e: 08:97:14:ee:d2:51:ac:85:19:fa:a5:c2:a5:e4:73:63:4b:82: f7:9d:fa:53:45:01:5c:8e:b8:7f:9f:70:2a:2a:64:98:12:8c: 19:67:c4:58:13:ef:6b:a6:ea:3d:67:bc:ad:8e:34:de:33:67: 93:df:72:79:a7:67:6a:14:ce:d2:0c:c2:3a:f9:e8:ed:50:cc: 30:87:73:a0:55:ea:32:15:79:ea:cb:21:f1:0a:ad:ab:be:70: 42:1d:37:b4:cd:ff:61:12:64:0b:54:85:c7:ad:ad:8f:ac:6d: 1b:1c:ac:2f:09:34:cb:b1:e5:de:c6:f3:c8:13:06:ec:0e:0c: fa:3b:3c:23:7c:8b:ac:14:cf:ca:a1:17:aa:a0:bf:8e:c8:9d: 1a:0b:fa:30:5c:ee:ce:31:1f:64:60:08:a2:55:55:3d:17:e5: e7:ef:b6:2a:48:69:6c:22:dd:a4:c9:89:a5:58:e5:92:47:fd: ac:d5:cc:f8:09:d7:d8:4d:7b:60:9d:16:f5:c0:f7:1d:30:00: d8:f7:93:c7:7f:a9:09:a7:45:78:54:78:f8:c2:62:02:f9:ad: 5c:43:27:27:b7:9a:b3:0a:fc:6f:5d:0c:52:21:6d:a3:56:31: d5:f1:5b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC9dkWH8vFSc5WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk ZTJhNGRiMDYtNGU2ZC00ZTFkLTgzZWItOTYwYjRiMDkwNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy9q5guSLNGWj9BposbT1VamfmevZeU+sV+c Ud6ezZerKWYAiRZMIMBL+0nP8eMYMLn/Lhg19Kc8PRiHjSz7M7B4wJQvYrxn4Tri lUJtXnKHDqFL7BqAFDf61vl8rUiDs5FdtNjXsazE4WvUwXrl9lBblptEIFWJg75H imGOqBrFoVw7WWfxP0hVvQWTf6jzw8WVXrPfp13VgQm4vxNr1/TqZKHXH3A61g8z 1nqP/Vp07c9uPnFC9d5kiwgQRv//K2fST9JIxeo54JjjuG/WfeV2vZC7yxHh+c2d ML6T0Z2cldeaCRLDyC1wlFB2a66UBHCx7dnaRNYlGNbkrYTbkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmt29UVeWswR8dNFILJbiU3c8DnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2VmZDEwMGEtODc2Yy0z NDQ2LTllZTctMzk4NWYwZWYwMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRrFU0vpboxk1y2W27QEh4oDgiXFO7SUayFGfqlwqXkc2NLgved+lNF AVyOuH+fcCoqZJgSjBlnxFgT72um6j1nvK2ONN4zZ5PfcnmnZ2oUztIMwjr56O1Q zDCHc6BV6jIVeerLIfEKrau+cEIdN7TN/2ESZAtUhcetrY+sbRscrC8JNMux5d7G 88gTBuwODPo7PCN8i6wUz8qhF6qgv47InRoL+jBc7s4xH2RgCKJVVT0X5efvtipI aWwi3aTJiaVY5ZJH/azVzPgJ19hNe2CdFvXA9x0wANj3k8d/qQmnRXhUePjCYgL5 rVxDJye3mrMK/G9dDFIhbaNWMdXxW7w= -----END CERTIFICATE-----Generated at Sun Jan 25 20:16:39 2026 by rpki-client