This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: rlKSe2l+oww33cXBFEoJSmWHdGpnKGZaHf5xVnrC4N0= Subject key identifier: 05:D0:6A:D7:77:18:5D:EC:22:C4:9D:94:62:6B:21:06:11:F2:EA:6A Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584C0570B7A757B1EB360FF607C0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:b7:a7:57:b1:eb:36:0f:f6:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=8a9160e8-2aa9-4463-9610-01959e5a62ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:d1:4c:ce:c5:cd:f1:1d:58:67:d6:8f:7f: 85:7f:d7:92:5f:7d:93:f9:87:db:09:8d:59:1c:a6: 0a:cb:54:cf:5f:4e:a2:ec:1a:ca:4d:e5:4a:6d:4c: a2:30:58:ac:e6:33:f2:ff:b5:52:77:e9:29:c7:56: 76:b9:46:01:40:b3:0e:a4:26:9c:37:1a:bf:e7:5d: a0:94:96:2a:3b:e3:93:b3:91:49:00:f6:ff:fa:f3: 85:35:a7:a1:48:67:ef:4c:0a:da:34:d8:36:d1:5d: cd:d5:da:8d:d0:cb:c2:ad:53:3f:0a:23:37:06:f2: 1f:ab:5c:70:e1:23:a8:d7:79:84:8b:f3:e0:57:28: a8:21:ac:ea:15:5d:31:61:34:c2:67:3b:5d:8b:26: ac:83:76:88:b1:80:35:b2:01:a9:75:63:6e:73:34: 1a:09:1a:dc:c1:bc:44:17:9c:3b:8a:df:78:85:37: e8:fc:83:75:d2:af:a4:09:5f:d8:11:db:72:76:58: 49:85:2d:42:b9:a4:01:47:d1:fd:a3:f1:cc:5a:02: 92:a2:4f:17:36:1b:df:e1:71:fa:37:57:59:93:14: 05:6e:1c:f3:12:73:5b:8a:a4:68:71:ec:36:63:df: f1:0e:dd:96:21:cd:b5:2c:9c:62:da:14:13:d4:8d: a6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D0:6A:D7:77:18:5D:EC:22:C4:9D:94:62:6B:21:06:11:F2:EA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0b:eb:67:36:e3:dd:37:8c:b4:ee:03:e8:a9:98:8c:99:b3: 41:58:81:3c:c5:b1:c9:0a:af:75:ec:6f:e2:2c:c8:a5:e3:af: 0b:f0:6a:89:dc:53:35:83:2b:77:5d:e7:67:10:7f:36:f2:43: e1:0e:60:18:4a:37:88:9c:5e:9e:b0:67:91:a6:45:83:4c:1a: 21:7f:6b:67:05:a5:c0:71:c2:77:80:2c:6c:39:cd:19:cb:0b: 37:be:ab:d9:4d:80:77:69:2d:26:22:bd:ab:b4:d8:c9:a9:b0: 05:57:52:ec:53:4a:e2:2a:00:2d:b7:7a:f6:4b:f1:18:af:a6: 01:57:f0:59:b2:fd:18:a0:09:8d:c1:29:3c:17:d6:73:64:3d: 1f:6b:64:29:e3:e4:76:cc:8c:9f:6f:ac:4f:93:a0:8c:a2:44: 13:e4:10:0c:45:1f:36:24:d7:cc:5e:d4:aa:c1:31:7c:0e:0f: dd:0e:8a:93:55:a7:e6:a5:78:60:e4:15:d5:03:60:6e:c6:c2: e9:aa:c7:bc:fa:e8:a6:0a:ff:fb:67:eb:bf:38:8b:09:ff:5f: 46:fe:29:da:df:e6:a4:5d:2c:43:41:3a:3c:e5:7d:07:99:58: f3:07:07:0d:27:db:70:d7:e9:bd:2f:0f:46:b8:78:c0:44:7e: 29:cb:a2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcLenV7HrNg/2B8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk OGE5MTYwZTgtMmFhOS00NDYzLTk2MTAtMDE5NTllNWE2MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5bRTM7FzfEdWGfWj3+Ff9eSX32T+YfbCY1Z HKYKy1TPX06i7BrKTeVKbUyiMFis5jPy/7VSd+kpx1Z2uUYBQLMOpCacNxq/512g lJYqO+OTs5FJAPb/+vOFNaehSGfvTAraNNg20V3N1dqN0MvCrVM/CiM3BvIfq1xw 4SOo13mEi/PgVyioIazqFV0xYTTCZztdiyasg3aIsYA1sgGpdWNuczQaCRrcwbxE F5w7it94hTfo/IN10q+kCV/YEdtydlhJhS1CuaQBR9H9o/HMWgKSok8XNhvf4XH6 N1dZkxQFbhzzEnNbiqRocew2Y9/xDt2WIc21LJxi2hQT1I2mWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXQatd3GF3sIsSdlGJrIQYR8upqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0L62c24903jLTuA+ipmIyZs0FYgTzFsckKr3Xsb+IsyKXjrwvwaonc UzWDK3dd52cQfzbyQ+EOYBhKN4icXp6wZ5GmRYNMGiF/a2cFpcBxwneALGw5zRnL Cze+q9lNgHdpLSYivau02MmpsAVXUuxTSuIqAC23evZL8RivpgFX8Fmy/RigCY3B KTwX1nNkPR9rZCnj5HbMjJ9vrE+ToIyiRBPkEAxFHzYk18xe1KrBMXwOD90OipNV p+aleGDkFdUDYG7Gwumqx7z66KYK//tn6784iwn/X0b+Kdrf5qRdLENBOjzlfQeZ WPMHBw0n23DX6b0vD0a4eMBEfinLovI= -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:26 2025 by rpki-client