This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: WlcD1x2LOJLmZELRL8PINZHyKysCI6TeHHBXM07pSvY= Subject key identifier: 17:65:94:54:30:10:AF:D1:67:7E:45:D4:E9:D7:CC:76:82:D1:5B:86 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584C4441079F4616A1C5B4D79180 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:07:9f:46:16:a1:c5:b4:d7:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=63c34115-4f98-4471-b770-17dfc06c8e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:55:79:a3:60:94:30:09:e5:f6:21:0c:48: 5d:c4:b1:28:15:37:62:02:a0:64:b4:46:d9:6f:da: 5c:c5:28:f9:f8:d7:11:e6:46:0a:b9:6c:7c:57:96: 2d:9c:fd:b7:2f:a0:2e:df:1c:62:16:54:f7:1c:87: 6e:6a:90:47:cd:17:2d:27:f3:76:50:b0:4b:0a:d9: 24:2d:4d:ab:f2:51:e7:cc:0c:fe:b1:c7:dc:22:0c: bb:da:db:f0:8b:1e:d6:72:14:ce:34:9f:d6:3d:f2: 09:5b:87:45:a0:ca:5e:b8:8f:d3:54:49:aa:d8:0e: a5:c6:e2:36:73:42:89:f4:a2:01:dd:e9:88:56:d8: b9:c8:24:12:f4:f5:f9:5b:55:d8:be:6b:22:80:00: 0f:e0:60:24:b4:12:79:e6:89:d2:15:7c:87:32:0c: 59:dc:e8:32:a9:e3:d9:b8:b5:e5:39:3b:f6:29:9a: f6:d7:4a:6f:5e:e6:b6:cf:a7:46:10:9d:a1:ca:25: ac:00:6c:37:e3:6f:ab:87:a9:f1:b0:c8:3c:70:bb: e6:7f:38:69:e7:c8:79:81:69:77:07:33:a1:f7:af: b2:0a:bb:89:ac:ce:fe:31:55:2c:23:12:70:43:2d: d6:94:0b:f1:e7:59:58:aa:db:db:f0:b2:dd:fe:7c: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:65:94:54:30:10:AF:D1:67:7E:45:D4:E9:D7:CC:76:82:D1:5B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5a:ee:12:3b:8b:34:f7:98:06:96:84:8b:93:89:b3:49:42: 58:9a:ee:93:8d:30:5d:6a:bc:11:98:69:96:66:c6:5d:89:01: 5b:04:e9:4b:e3:6d:e8:00:59:63:d2:e0:7c:9d:35:1f:2b:2a: 41:e7:19:c0:f2:d8:5f:56:8a:38:e5:26:db:25:34:f2:4c:7c: b4:78:51:96:34:58:87:3b:af:3f:2c:7f:a3:cb:8b:0d:49:d1: b5:94:b4:e0:36:a8:d1:3f:4a:7e:3e:9a:e9:24:8a:e3:07:6f: 27:b2:b0:87:3b:47:2a:15:ec:55:81:19:d3:83:d3:68:c7:7c: 9a:35:37:e9:21:73:3a:dc:33:e2:e6:be:02:14:6f:21:01:4f: 83:c1:a9:96:a7:d1:04:72:68:da:6a:b5:b9:4d:dd:a1:21:a7: 7f:6f:9c:4b:33:0c:97:0e:1f:8e:df:99:50:ef:78:5b:6b:4d: 7b:b5:68:ba:04:ac:75:b0:e2:1f:bc:d6:3e:23:a6:b7:67:69: 6d:ca:fe:ee:ad:4b:4a:af:c9:01:29:a1:96:b8:46:23:90:bb: bd:fc:0a:12:7d:35:f7:13:05:a3:78:a1:c5:38:20:42:8d:b8: 12:23:e7:de:fc:e5:c0:fc:43:14:3d:f7:4f:a1:f6:b9:87:14: a5:40:a9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQQefRhahxbTXkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk NjNjMzQxMTUtNGY5OC00NDcxLWI3NzAtMTdkZmMwNmM4ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsylVeaNglDAJ5fYhDEhdxLEoFTdiAqBktEbZ b9pcxSj5+NcR5kYKuWx8V5YtnP23L6Au3xxiFlT3HIduapBHzRctJ/N2ULBLCtkk LU2r8lHnzAz+scfcIgy72tvwix7WchTONJ/WPfIJW4dFoMpeuI/TVEmq2A6lxuI2 c0KJ9KIB3emIVti5yCQS9PX5W1XYvmsigAAP4GAktBJ55onSFXyHMgxZ3OgyqePZ uLXlOTv2KZr210pvXua2z6dGEJ2hyiWsAGw342+rh6nxsMg8cLvmfzhp58h5gWl3 BzOh96+yCruJrM7+MVUsIxJwQy3WlAvx51lYqtvb8LLd/nwFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdllFQwEK/RZ35F1OnXzHaC0VuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFa7hI7izT3mAaWhIuTibNJQlia7pONMF1qvBGYaZZmxl2JAVsE6Uvj begAWWPS4HydNR8rKkHnGcDy2F9WijjlJtslNPJMfLR4UZY0WIc7rz8sf6PLiw1J 0bWUtOA2qNE/Sn4+mukkiuMHbyeysIc7RyoV7FWBGdOD02jHfJo1N+khczrcM+Lm vgIUbyEBT4PBqZan0QRyaNpqtblN3aEhp39vnEszDJcOH47fmVDveFtrTXu1aLoE rHWw4h+81j4jprdnaW3K/u6tS0qvyQEpoZa4RiOQu738ChJ9NfcTBaN4ocU4IEKN uBIj59785cD8QxQ990+h9rmHFKVAqdE= -----END CERTIFICATE-----Generated at Tue Dec 23 03:50:51 2025 by rpki-client