This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa File: 33bcd53a-1310-3cd5-91f3-46979f980f8e.roa (raw, json) Hash identifier: N+Uai9swhZZd72Vw9pDnP3Rp1G7t3TgAeGuuwZQukSU= Subject key identifier: 56:AB:18:D0:87:C6:FC:05:BE:ED:D6:1B:0F:C8:BA:7B:9C:83:8B:9E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC08457545F4775B4842E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 401783 IP address blocks: 209.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:08:45:75:45:f4:77:5b:48:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2b1ab108-3b25-4a03-a39c-82ccb5548c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:70:35:bf:01:46:ce:02:de:e9:9b:6d:b1: 08:20:03:57:3a:ab:df:af:87:f5:c9:6d:c5:30:1e: da:9b:e8:90:89:0b:e6:77:f4:59:c9:52:e9:fa:81: 43:c4:7f:d7:e3:11:c2:a1:fb:96:fb:ef:21:09:5a: 69:ec:6b:29:a9:57:98:80:1d:e6:47:61:4a:fd:46: d9:3e:44:14:64:ce:2f:ba:b7:1e:50:2d:17:94:e5: f9:8e:1d:15:a4:87:4c:9b:14:00:1f:44:3d:4f:47: a2:ce:23:ab:83:9b:82:95:01:79:bc:7b:e0:1d:79: 05:6f:48:59:49:87:f9:ca:66:b5:fc:33:e2:65:71: ce:8f:88:9f:f6:c7:4d:f5:7b:43:79:c8:26:1e:68: 3a:82:88:5d:e3:88:e8:17:d4:10:a7:07:b4:51:c1: 4e:e2:84:73:4a:d0:0b:a2:98:c2:3e:0a:66:b9:7f: 54:9d:ac:ec:eb:f2:1f:c1:ca:9d:03:97:ff:39:c5: b2:31:aa:6f:55:b0:ca:7c:a5:80:35:57:cd:f2:24: 5e:da:10:85:bb:f2:5f:93:54:b1:37:d3:0f:90:10: e4:34:23:98:a8:05:08:3d:a4:02:32:17:2d:c9:50: c3:0d:80:e1:3c:0f:57:78:22:48:74:6a:c5:08:60: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AB:18:D0:87:C6:FC:05:BE:ED:D6:1B:0F:C8:BA:7B:9C:83:8B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33bcd53a-1310-3cd5-91f3-46979f980f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:40:51:1b:a3:c7:fc:03:29:de:ff:b7:b8:6e:22:da:41:b0: a2:05:9c:fc:82:46:50:a8:fd:82:8c:4d:37:7a:0f:44:ea:34: 6e:b1:a8:78:11:b6:c2:a7:32:45:76:ba:73:1e:e1:e1:5f:04: a8:4d:1e:a9:4d:20:ab:f7:68:91:da:55:bb:22:53:92:94:9d: 45:0c:8b:83:5f:78:f2:cd:a7:ad:d5:43:82:2b:43:4f:03:35: 0e:8a:e7:0d:7e:6d:24:8c:40:a3:5d:86:28:ec:d2:67:7b:bd: 89:5f:82:99:37:4c:64:26:3b:d5:35:e7:dd:22:8a:bc:ec:cc: 28:e2:cd:bd:93:94:28:e5:c1:59:9d:4e:2a:ed:c0:ff:7d:84: d6:6d:5a:cc:2b:42:77:e2:72:a5:26:9f:cd:55:ae:dd:e3:fa: ea:83:28:b0:59:cf:97:d9:31:8e:d0:44:67:be:e4:62:02:4a: 17:e4:cb:cb:10:cd:98:ea:ec:cf:81:49:ea:c0:8d:c9:e6:0b: a7:7b:95:02:e8:cc:30:86:4b:65:e0:30:f4:0e:2c:80:02:d6: 93:e1:ab:96:d5:c5:b3:62:66:f6:14:bb:62:10:35:61:7d:9b: 77:53:53:6d:f1:b2:0e:10:62:b4:96:2e:b7:1f:c3:bc:33:30: d5:b4:40:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AhFdUX0d1tIQuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmIxYWIxMDgtM2IyNS00YTAzLWEzOWMtODJjY2I1NTQ4YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8xwNb8BRs4C3umbbbEIIANXOqvfr4f1yW3F MB7am+iQiQvmd/RZyVLp+oFDxH/X4xHCofuW++8hCVpp7GspqVeYgB3mR2FK/UbZ PkQUZM4vurceUC0XlOX5jh0VpIdMmxQAH0Q9T0eiziOrg5uClQF5vHvgHXkFb0hZ SYf5yma1/DPiZXHOj4if9sdN9XtDecgmHmg6gohd44joF9QQpwe0UcFO4oRzStAL opjCPgpmuX9Unazs6/IfwcqdA5f/OcWyMapvVbDKfKWANVfN8iRe2hCFu/Jfk1Sx N9MPkBDkNCOYqAUIPaQCMhctyVDDDYDhPA9XeCJIdGrFCGB4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFarGNCHxvwFvu3WGw/Iunucg4ueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiY2Q1M2EtMTMxMC0z Y2Q1LTkxZjMtNDY5NzlmOTgwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNAURujx/wDKd7/t7huItpBsKIFnPyCRlCo/YKMTTd6D0TqNG6xqHgR tsKnMkV2unMe4eFfBKhNHqlNIKv3aJHaVbsiU5KUnUUMi4NfePLNp63VQ4IrQ08D NQ6K5w1+bSSMQKNdhijs0md7vYlfgpk3TGQmO9U1590iirzszCjizb2TlCjlwVmd TirtwP99hNZtWswrQnficqUmn81Vrt3j+uqDKLBZz5fZMY7QRGe+5GICShfky8sQ zZjq7M+BSerAjcnmC6d7lQLozDCGS2XgMPQOLIAC1pPhq5bVxbNiZvYUu2IQNWF9 m3dTU23xsg4QYrSWLrcfw7wzMNW0QDQ= -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:35 2025 by rpki-client