This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa File: a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa (raw, json) Hash identifier: d4BppsgyoNj7yEIQFMRv81G4XZAhJJvV20Yw2Wagl74= Subject key identifier: D0:4A:A1:FE:F8:BB:F1:DB:E7:76:3D:67:F7:BF:62:52:37:E9:AB:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E90F867132EBA301BABC7C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 22909 IP address blocks: 68.52.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:90:f8:67:13:2e:ba:30:1b:ab:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=caf4c37f-097e-4951-a65c-b23a3ab7c563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:83:f0:22:ad:6e:41:1b:4c:4a:31:e3:ba: 35:93:40:86:f3:8a:6c:d5:b7:95:44:cb:60:b9:4b: 91:bc:77:c6:c3:3c:3d:8b:d5:03:76:46:34:9c:02: 6f:b9:98:0d:89:16:aa:9b:2d:77:ee:9e:e3:5b:b3: 61:e0:bd:70:6f:ae:c2:2a:6d:20:bd:2d:aa:6e:d7: 78:08:f5:d7:4d:11:70:ec:87:b2:85:83:65:f4:96: 73:26:00:57:a4:a1:4e:91:1d:5d:7c:b5:72:b5:41: b5:5b:54:6f:5d:9f:45:dc:55:b3:a4:39:f0:ef:12: 83:17:c8:16:ab:9f:ae:41:47:0c:2c:76:5b:f5:da: 85:96:bc:89:d5:7b:46:2a:8e:71:0c:78:72:68:4b: 75:13:9b:67:d7:64:e5:8e:e4:87:96:f1:36:39:77: 33:ae:1a:04:d3:3a:81:7c:18:01:72:65:c3:7b:08: 8f:7c:05:4f:f6:85:5e:22:9e:dd:f4:87:69:11:95: a3:04:a4:57:5f:35:dc:d1:6f:1f:4c:6c:a8:e2:3b: 45:83:4d:d2:f4:9f:be:a9:23:18:4a:5c:b8:9e:26: c7:df:81:29:54:69:7a:9c:da:14:dd:ec:89:c4:35: 03:b2:f4:ff:a1:c0:56:be:87:87:46:d0:1a:00:1c: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4A:A1:FE:F8:BB:F1:DB:E7:76:3D:67:F7:BF:62:52:37:E9:AB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7a:8f:17:51:35:fa:27:1e:82:28:ad:21:fa:b1:01:c2:f4: 4b:51:a7:f8:48:18:94:27:4d:70:5f:63:bf:a6:4e:e8:37:e1: 44:55:59:5a:b2:aa:3e:78:d3:dc:45:56:3f:38:f7:f5:7f:ae: 9a:34:c3:08:34:4c:88:2a:37:b1:d6:e6:0c:41:89:3b:d1:87: 6e:92:06:4b:82:aa:47:58:82:dd:4d:71:3f:ba:43:96:e0:20: 51:27:b1:99:bf:6e:51:2c:35:17:27:83:f7:ff:f3:d9:22:51: 08:a3:85:66:c1:50:c0:5e:bc:45:53:c8:00:9b:59:ed:c7:37: a6:38:f2:a7:1d:aa:61:96:ce:2c:17:4a:fc:0a:d0:b6:a0:be: 9d:10:2e:6c:6e:23:1e:f5:d1:f3:fa:ba:38:5d:2c:37:2d:3b: 27:a8:b2:20:67:62:48:4f:9e:26:0a:8e:75:d5:2c:5f:5d:9a: aa:e8:d5:7c:95:a7:fc:f4:9f:90:0e:b5:d0:ff:84:53:59:3f: ca:e1:e1:84:f1:40:10:c4:81:79:a1:b2:8c:d1:17:2e:34:45: 16:0a:0e:2a:2d:70:0b:f0:3c:1f:6f:be:92:38:ce:98:c2:94: 3a:43:3e:5c:13:79:e3:04:b1:6c:e1:74:65:36:d0:6b:e3:e6: 5e:1f:bb:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekPhnEy66MBurx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk Y2FmNGMzN2YtMDk3ZS00OTUxLWE2NWMtYjIzYTNhYjdjNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIyD8CKtbkEbTEox47o1k0CG84ps1beVRMtg uUuRvHfGwzw9i9UDdkY0nAJvuZgNiRaqmy137p7jW7Nh4L1wb67CKm0gvS2qbtd4 CPXXTRFw7IeyhYNl9JZzJgBXpKFOkR1dfLVytUG1W1RvXZ9F3FWzpDnw7xKDF8gW q5+uQUcMLHZb9dqFlryJ1XtGKo5xDHhyaEt1E5tn12TljuSHlvE2OXczrhoE0zqB fBgBcmXDewiPfAVP9oVeIp7d9IdpEZWjBKRXXzXc0W8fTGyo4jtFg03S9J++qSMY Sly4nibH34EpVGl6nNoU3eyJxDUDsvT/ocBWvoeHRtAaABxLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBKof74u/Hb53Y9Z/e/YlI36asaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA0ZTNiMWEtODY3MC0z MzQ0LWE1YTEtMmNlYTVkOTM2NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh6jxdRNfonHoIorSH6sQHC9EtRp/hIGJQnTXBfY7+mTug34URVWVqy qj5409xFVj849/V/rpo0wwg0TIgqN7HW5gxBiTvRh26SBkuCqkdYgt1NcT+6Q5bg IFEnsZm/blEsNRcng/f/89kiUQijhWbBUMBevEVTyACbWe3HN6Y48qcdqmGWziwX SvwK0Lagvp0QLmxuIx710fP6ujhdLDctOyeosiBnYkhPniYKjnXVLF9dmqro1XyV p/z0n5AOtdD/hFNZP8rh4YTxQBDEgXmhsozRFy40RRYKDiotcAvwPB9vvpI4zpjC lDpDPlwTeeMEsWzhdGU20Gvj5l4fuyA= -----END CERTIFICATE-----Generated at Fri Dec 19 10:27:36 2025 by rpki-client