This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e78a2e-b144-3c16-9be0-412566ca95da.roa File: a5e78a2e-b144-3c16-9be0-412566ca95da.roa (raw, json) Hash identifier: P62Ehr5Tw7v1T2+xU9Pbel5M8P5W60pRPoz1QHLSb7Y= Subject key identifier: 25:F1:4A:CC:AA:43:67:29:42:DD:A6:13:04:6C:EA:4D:39:4A:48:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B80FCC7531C568DBFA300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e78a2e-b144-3c16-9be0-412566ca95da.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 68.35.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:80:fc:c7:53:1c:56:8d:bf:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=0da4ad1c-5136-46bd-81c0-8b1858183b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:32:93:7c:37:42:6e:14:e0:97:00:dc:9d: 5f:0d:ea:8f:ba:12:9c:50:c8:c8:85:33:d0:b0:6a: b9:24:45:91:a3:82:83:bd:ea:da:7a:90:db:11:79: 78:23:df:d0:98:6f:13:56:81:7b:c1:8f:4b:fd:12: 35:5a:c3:a5:2b:59:06:55:38:d3:e6:c2:80:39:39: bd:55:76:f3:cf:d5:f8:91:22:87:d1:7c:74:b3:e3: 1d:83:e5:dd:c3:5c:cf:82:ca:28:a9:b7:8b:f0:f7: 99:a1:43:ed:15:cb:ba:e6:8d:a7:56:99:8c:1a:2e: 8b:11:bb:46:5b:ff:df:57:5a:bb:5f:5f:12:80:66: 4e:ac:fb:86:f9:c6:ad:90:5b:43:33:14:d3:57:d9: db:8a:42:b8:15:16:a5:b5:a3:09:31:c2:86:c6:ce: 87:6a:f6:96:7c:cd:72:29:0b:88:42:89:64:a7:65: 83:c2:be:c3:33:81:c8:59:a2:f3:20:33:ee:61:ad: 87:1d:ff:ec:ef:f7:12:25:9a:fb:7d:c2:b5:a3:15: 2c:32:88:07:d9:03:73:27:a9:fd:da:1a:ed:e3:6f: 0e:03:a5:07:51:59:43:70:04:1a:15:a1:90:61:b1: 8a:5f:fd:87:c9:e4:33:a1:3e:82:f8:f9:d7:1d:44: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F1:4A:CC:AA:43:67:29:42:DD:A6:13:04:6C:EA:4D:39:4A:48:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e78a2e-b144-3c16-9be0-412566ca95da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:df:c2:1c:99:d9:b1:ba:2a:65:54:68:0b:49:0b:24:25: 49:9b:bb:5e:d9:e5:9b:db:6f:0e:80:83:56:e3:92:18:bd:a3: 1f:19:1e:26:1a:5a:8e:f3:88:1f:47:24:06:19:3f:78:80:e2: 38:fd:c7:09:6a:2d:27:f9:46:e3:ab:82:0b:43:bb:ed:71:39: 92:56:a7:3d:34:6f:e5:7b:84:bf:d3:64:a5:63:ff:c0:99:ab: a6:f0:ae:0b:9e:22:84:da:9c:49:28:76:bc:f5:35:ef:cd:6d: 00:d1:a9:67:81:1e:d6:7d:db:a1:ec:04:4c:2c:02:42:59:55: 1d:27:09:4d:52:a5:65:5c:a9:7f:64:d5:37:8b:e3:4e:ff:7b: 2d:87:70:ea:4e:5f:3e:cf:b6:78:72:71:8c:6a:83:6a:46:43: aa:13:59:cb:8d:30:e9:76:b1:72:50:c9:df:67:74:92:67:30: 5f:ea:f7:94:8c:8f:1c:70:3c:29:da:10:4e:01:c7:46:fe:ae: 45:0c:76:91:d2:3c:39:d3:02:24:96:48:53:b4:96:6f:84:3a: b3:ce:e1:7c:2d:05:de:d7:73:f0:17:a9:12:28:7b:ca:81:61: 70:14:e0:a0:db:84:4c:6c:0e:9e:d7:6e:cb:18:17:32:2f:19: ab:24:32:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC4D8x1McVo2/owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MGRhNGFkMWMtNTEzNi00NmJkLTgxYzAtOGIxODU4MTgzYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLQyk3w3Qm4U4JcA3J1fDeqPuhKcUMjIhTPQ sGq5JEWRo4KDveraepDbEXl4I9/QmG8TVoF7wY9L/RI1WsOlK1kGVTjT5sKAOTm9 VXbzz9X4kSKH0Xx0s+Mdg+Xdw1zPgsooqbeL8PeZoUPtFcu65o2nVpmMGi6LEbtG W//fV1q7X18SgGZOrPuG+catkFtDMxTTV9nbikK4FRaltaMJMcKGxs6HavaWfM1y KQuIQolkp2WDwr7DM4HIWaLzIDPuYa2HHf/s7/cSJZr7fcK1oxUsMogH2QNzJ6n9 2hrt428OA6UHUVlDcAQaFaGQYbGKX/2HyeQzoT6C+PnXHUSAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXxSsyqQ2cpQt2mEwRs6k05SkhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVlNzhhMmUtYjE0NC0z YzE2LTliZTAtNDEyNTY2Y2E5NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXM38IcmdmxuiplVGgLSQskJUmbu17Z5Zvbbw6Ag1bjkhi9ox8ZHiYa Wo7ziB9HJAYZP3iA4jj9xwlqLSf5RuOrggtDu+1xOZJWpz00b+V7hL/TZKVj/8CZ q6bwrgueIoTanEkodrz1Ne/NbQDRqWeBHtZ926HsBEwsAkJZVR0nCU1SpWVcqX9k 1TeL407/ey2HcOpOXz7PtnhycYxqg2pGQ6oTWcuNMOl2sXJQyd9ndJJnMF/q95SM jxxwPCnaEE4Bx0b+rkUMdpHSPDnTAiSWSFO0lm+EOrPO4XwtBd7Xc/AXqRIoe8qB YXAU4KDbhExsDp7XbssYFzIvGaskMjg= -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:50 2025 by rpki-client