This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa File: dba58025-2a8f-3dfd-87db-07fd507151e0.roa (raw, json) Hash identifier: BiOImJ/1z5lQ+D0IABpeBGY9Q2yvY+f4rZSgniAsTtc= Subject key identifier: 84:63:0F:ED:88:C1:D1:FE:DE:40:5F:17:29:31:FF:4A:A0:9B:73:42 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C470BD8620A49B5BD07FFBD00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:d8:62:0a:49:b5:bd:07:ff:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=22b0d335-eb22-44f0-baf3-f53a14a524fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:42:2e:32:18:3a:36:d6:05:7a:84:5e:28: 1c:1b:0b:0f:60:c5:c6:17:99:29:40:96:2d:3c:f0: 92:cb:76:73:2e:37:a7:ed:0a:f6:59:1b:ee:e1:8a: 33:7b:77:dc:6e:a1:ad:43:d3:e0:ac:8b:da:a6:10: 2e:6f:47:09:a6:b4:e4:d9:90:52:f0:6b:28:a0:52: f6:b1:0e:e0:72:b6:91:10:f6:dd:7b:f3:03:3a:94: de:9a:d0:87:e7:4d:39:92:09:c6:ec:a0:78:22:15: b9:f7:a8:a7:9e:1e:9e:87:96:75:24:b4:9e:38:d7: 0f:e7:4d:95:6a:d6:a9:a0:7f:7e:b9:ef:08:cc:be: cc:bf:fa:c4:87:25:b3:a6:7a:4d:1a:06:20:e4:8f: 46:5e:c6:c4:cb:d1:b0:03:61:42:b1:aa:45:0f:6c: 8c:71:8b:5b:8b:cc:02:c8:8f:db:20:a1:04:f6:5c: 16:b0:e2:c2:bc:41:a7:a9:c4:e1:e7:bf:6e:c1:67: b6:ff:f6:a4:b5:85:ba:3e:e1:e2:d1:dc:78:4a:ab: 2e:80:43:f0:a7:fc:76:b6:e4:db:9a:5f:ab:55:65: 06:5f:a6:e9:da:89:9a:6a:3a:58:ee:3e:43:ea:8c: 2b:9c:af:3b:29:3c:32:58:f5:66:99:03:0d:61:46: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:63:0F:ED:88:C1:D1:FE:DE:40:5F:17:29:31:FF:4A:A0:9B:73:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:83:16:f4:6e:96:11:43:2c:be:f1:56:a3:a2:d5:30:6d:16: 83:f2:75:da:4d:24:ae:5f:b4:46:1c:4c:1a:d6:29:a8:92:ef: 57:30:ff:51:ed:14:01:21:79:63:35:86:0a:b6:b2:89:8a:4a: 27:e4:e6:9e:21:49:36:66:49:12:aa:94:ce:4b:45:82:2f:50: e8:c5:0d:e6:82:ee:da:d0:8a:45:d6:90:5e:1a:5e:35:ea:22: de:3c:b0:bd:27:8a:ff:94:3a:60:29:18:ec:c3:54:c7:f9:15: 1c:e2:05:c7:ba:5e:2f:8f:71:1f:8f:d8:40:99:25:bf:19:b6: e2:6e:c0:97:9f:b2:c3:dc:cc:5a:b1:e4:c9:8c:61:44:ad:c7: fb:ac:8d:b9:b9:12:ce:1d:87:70:6a:72:ef:4b:84:b7:fc:a4: 27:63:00:0d:f6:69:10:59:6a:28:77:1c:e4:bc:ff:b3:25:52: 10:a2:2c:fc:29:29:69:11:88:f8:eb:4d:40:28:d5:cb:37:4a: bd:1f:a4:34:a0:d1:c1:56:d0:0e:db:02:9f:46:f9:f7:4d:a0: 6f:cc:59:f4:e5:67:ca:2d:0c:69:06:19:7c:ea:8a:ec:88:5d: e3:d5:5f:1a:ae:26:0b:71:f8:6e:70:5c:7b:2f:ba:12:f1:7e: 8d:af:59:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC9hiCkm1vQf/vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk MjJiMGQzMzUtZWIyMi00NGYwLWJhZjMtZjUzYTE0YTUyNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmABCLjIYOjbWBXqEXigcGwsPYMXGF5kpQJYt PPCSy3ZzLjen7Qr2WRvu4Yoze3fcbqGtQ9PgrIvaphAub0cJprTk2ZBS8GsooFL2 sQ7gcraREPbde/MDOpTemtCH5005kgnG7KB4IhW596innh6eh5Z1JLSeONcP502V atapoH9+ue8IzL7Mv/rEhyWzpnpNGgYg5I9GXsbEy9GwA2FCsapFD2yMcYtbi8wC yI/bIKEE9lwWsOLCvEGnqcTh579uwWe2//aktYW6PuHi0dx4SqsugEPwp/x2tuTb ml+rVWUGX6bp2omaajpY7j5D6owrnK87KTwyWPVmmQMNYUacWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRjD+2IwdH+3kBfFykx/0qgm3NCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGJhNTgwMjUtMmE4Zi0z ZGZkLTg3ZGItMDdmZDUwNzE1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaDFvRulhFDLL7xVqOi1TBtFoPyddpNJK5ftEYcTBrWKaiS71cw/1Ht FAEheWM1hgq2somKSifk5p4hSTZmSRKqlM5LRYIvUOjFDeaC7trQikXWkF4aXjXq It48sL0niv+UOmApGOzDVMf5FRziBce6Xi+PcR+P2ECZJb8ZtuJuwJefssPczFqx 5MmMYUStx/usjbm5Es4dh3Bqcu9LhLf8pCdjAA32aRBZaih3HOS8/7MlUhCiLPwp KWkRiPjrTUAo1cs3Sr0fpDSg0cFW0A7bAp9G+fdNoG/MWfTlZ8otDGkGGXzqiuyI XePVXxquJgtx+G5wXHsvuhLxfo2vWXM= -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:32 2026 by rpki-client