This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa File: 2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa (raw, json) Hash identifier: Q+8wRqwXIXY5UXqMh7m3ZAB0EeEgacXCpIQPfpBkaM8= Subject key identifier: 62:2D:D0:CE:AF:5F:52:E9:AF:C1:75:E6:EF:AB:73:A5:0E:F3:A7:DA Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584C1A60C6DD1236355CF12C9940 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 398420 IP address blocks: 208.89.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:c6:dd:12:36:35:5c:f1:2c:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=cfbcbaaa-310f-4b0c-8940-468b569d2527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:07:f7:48:0c:16:b6:b3:35:5c:6b:4f:66:61: c5:27:2d:72:c9:4e:a3:05:b2:80:e9:46:bc:e4:53: c1:50:3d:c3:6a:0e:4b:95:c8:e0:3c:fd:0b:ec:8d: a7:f6:60:ff:98:ee:e3:d3:8f:92:f4:f7:11:01:89: ef:9d:db:9a:67:db:61:60:a4:1e:cb:1b:ec:a1:40: 80:dd:fa:49:b6:17:40:82:84:9b:b1:83:11:29:df: fa:15:5e:72:89:63:10:f4:85:96:b8:71:80:39:3e: 0c:06:82:7f:a9:4b:7c:14:38:bf:e4:7f:ac:68:6f: 93:01:d9:3d:c1:ea:14:7c:d2:82:ad:b3:79:65:8e: 37:bf:c7:d6:c3:be:1d:13:7c:df:d4:1a:a4:61:25: 88:17:8e:24:77:f4:e5:db:14:d6:00:aa:f3:d2:b4: c8:7b:98:65:96:a0:b6:cf:09:cf:8c:f6:6d:c2:76: 2c:08:55:95:57:d6:74:21:e0:55:ef:67:95:87:ee: 14:d8:7e:10:e5:54:f7:cd:d5:ac:ed:fc:26:fb:11: d3:44:20:91:f6:ee:d0:97:0e:95:dc:b4:da:85:0a: ce:27:3e:e3:b3:f1:b1:04:84:2e:2a:5d:1e:75:62: 2c:5e:43:1b:e1:35:43:6f:ad:da:b2:f6:1d:56:4f: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:D0:CE:AF:5F:52:E9:AF:C1:75:E6:EF:AB:73:A5:0E:F3:A7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:69:05:df:01:ea:01:d6:dd:39:63:3c:7e:b0:e3:ac:e8:30: 56:26:70:e5:b1:b5:42:8e:fd:47:b3:9b:9e:9b:30:df:8b:70: 85:d5:aa:27:8b:07:0f:82:58:c9:67:5f:fd:ea:c1:d7:95:01: 17:b3:17:d1:6e:b3:9b:76:4e:cd:6f:89:16:95:57:69:67:e4: 0c:74:1a:18:40:90:09:04:53:37:34:17:8b:2d:3a:e9:f2:74: 3b:ae:1e:df:74:61:e8:b8:0f:5d:6a:14:b8:c3:7f:c2:0c:c4: f0:c1:7f:c7:32:14:73:c3:1c:54:9a:d6:f2:18:92:6e:97:f6: f4:d9:b6:9b:52:96:e1:26:3c:01:f4:c7:07:50:a7:c7:ba:ec: ba:12:48:b9:67:89:1c:1e:da:ef:be:a1:19:eb:dd:02:ec:64: 32:75:d7:29:5a:4d:51:75:83:d1:6d:35:8c:d4:1d:e6:66:78: 9b:42:c9:18:e2:5a:34:a2:01:8f:32:20:ef:94:84:2b:b2:99: 3d:a1:37:13:0c:ef:98:c7:28:37:07:12:9e:e8:fc:69:2b:e2: 3b:68:d7:92:6c:72:d5:ea:fc:94:fe:59:6c:1c:11:b1:59:08: d3:7e:43:66:d6:23:05:f5:0a:ce:f1:e2:bc:c3:4a:b6:43:0e: 9b:6c:36:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYMbdEjY1XPEsmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk Y2ZiY2JhYWEtMzEwZi00YjBjLTg5NDAtNDY4YjU2OWQyNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwf3SAwWtrM1XGtPZmHFJy1yyU6jBbKA6Ua8 5FPBUD3Dag5LlcjgPP0L7I2n9mD/mO7j04+S9PcRAYnvnduaZ9thYKQeyxvsoUCA 3fpJthdAgoSbsYMRKd/6FV5yiWMQ9IWWuHGAOT4MBoJ/qUt8FDi/5H+saG+TAdk9 weoUfNKCrbN5ZY43v8fWw74dE3zf1BqkYSWIF44kd/Tl2xTWAKrz0rTIe5hllqC2 zwnPjPZtwnYsCFWVV9Z0IeBV72eVh+4U2H4Q5VT3zdWs7fwm+xHTRCCR9u7Qlw6V 3LTahQrOJz7js/GxBIQuKl0edWIsXkMb4TVDb63asvYdVk+6SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIt0M6vX1Lpr8F15u+rc6UO86faMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjMzM2I3ZDgtM2ZiZS0z ODc1LWFkNzQtODE1NzlkNmY1ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxpBd8B6gHW3TljPH6w46zoMFYmcOWxtUKO/Uezm56bMN+LcIXVqieL Bw+CWMlnX/3qwdeVARezF9Fus5t2Ts1viRaVV2ln5Ax0GhhAkAkEUzc0F4stOuny dDuuHt90Yei4D11qFLjDf8IMxPDBf8cyFHPDHFSa1vIYkm6X9vTZtptSluEmPAH0 xwdQp8e67LoSSLlniRwe2u++oRnr3QLsZDJ11ylaTVF1g9FtNYzUHeZmeJtCyRji WjSiAY8yIO+UhCuymT2hNxMM75jHKDcHEp7o/Gkr4jto15JsctXq/JT+WWwcEbFZ CNN+Q2bWIwX1Cs7x4rzDSrZDDptsNvI= -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:38 2025 by rpki-client