This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa File: 49ed5a06-61cd-30da-8170-9d7403ef7745.roa (raw, json) Hash identifier: W5fHZQDAktjynTaGkIZR+LmhdYrvIceWE8I+Yeu9E5Y= Subject key identifier: C1:0A:85:20:1E:1A:1C:01:CC:28:A8:B1:54:F3:AF:E8:D6:5A:56:D1 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584C0140C880BFA78388280EA0E0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22652 IP address blocks: 192.252.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:c8:80:bf:a7:83:88:28:0e:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=9bcd2d05-4f7d-4e99-8ee0-040c5fc039d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:b3:5d:be:14:a4:7c:7d:1e:7a:a1:6b:6c: 20:eb:b3:8e:9f:97:62:f3:3f:ec:33:9c:25:db:9b: 33:94:89:9e:4f:04:42:44:8d:25:a3:c3:78:f5:e5: 58:76:1b:cb:fe:dc:42:9c:cb:d8:c0:f5:e4:5c:38: 3d:f5:83:c7:72:30:d7:5d:cc:01:a8:a7:b5:42:81: 26:64:94:5d:49:24:56:1d:a8:59:02:b3:e0:9b:40: c3:aa:0b:c4:ed:ab:ce:55:e2:f4:8e:ea:c4:e1:fd: c4:76:35:a8:13:48:60:c9:70:1d:9f:d7:5f:95:bc: 7a:07:59:8d:81:b0:b6:4f:bc:fa:53:a9:26:7e:b6: ec:d2:23:8d:65:be:92:b9:d0:de:86:d7:88:8f:c9: 2c:9d:be:40:c6:39:20:3e:b5:77:4f:dc:7f:d7:0f: c9:47:e5:c7:df:ed:09:af:46:1a:64:57:39:02:a6: 25:2b:07:e5:c6:d4:ee:a2:6f:89:1d:74:2a:63:46: 5f:f3:41:57:1e:b5:34:63:b6:77:02:aa:0d:57:31: 66:29:29:17:29:69:81:7b:7c:ce:44:0f:93:db:6b: d7:cf:ac:19:98:e7:82:46:12:78:47:99:eb:9e:9e: 14:b0:2c:6f:3e:23:83:6a:2f:1f:95:22:ca:4c:0a: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:85:20:1E:1A:1C:01:CC:28:A8:B1:54:F3:AF:E8:D6:5A:56:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 192.252.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:74:43:dd:00:b5:8d:e4:d6:90:a9:b9:57:38:c8:eb:b1:59: a9:38:c0:2a:a3:31:0e:3e:be:d7:96:e0:b0:7b:c3:41:a9:51: 96:fe:63:f1:0e:a7:7d:3a:8d:4d:98:d7:06:d3:66:f7:f1:d1: 87:c2:4a:33:77:b6:7c:44:42:f3:ee:ed:72:0d:ce:2b:93:55: 86:a6:f0:3a:30:ec:68:05:84:28:fb:13:87:3c:6c:e8:07:34: 14:3e:16:60:9a:f1:f9:18:9f:04:c8:a4:ad:d1:95:c5:f5:93: f0:d5:f4:7e:33:01:a1:05:21:99:a5:cc:8a:6c:de:2d:91:fe: c0:86:59:42:f9:08:f0:32:91:10:07:79:89:fc:f1:0d:02:8f: 73:38:1f:38:57:2c:8e:fa:37:be:8a:0a:50:bd:cb:cf:c2:f8: 09:bc:4c:40:90:71:11:34:53:30:11:b5:aa:0b:0b:cc:57:6e: 3c:80:50:84:d6:e5:3b:21:d1:a6:d7:d3:62:25:7e:fe:ce:96: 9e:57:3b:51:db:ae:df:3b:4d:e5:31:48:cb:c6:63:19:81:d1: 38:05:a2:7c:7e:12:89:f5:ce:dd:15:d3:9f:68:23:b3:5a:b3: 2c:cf:c7:23:b1:5d:58:14:50:55:01:05:57:30:6f:5f:78:a2: 41:dd:ab:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQMiAv6eDiCgOoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk OWJjZDJkMDUtNGY3ZC00ZTk5LThlZTAtMDQwYzVmYzAzOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRKzXb4UpHx9Hnqha2wg67OOn5di8z/sM5wl 25szlImeTwRCRI0lo8N49eVYdhvL/txCnMvYwPXkXDg99YPHcjDXXcwBqKe1QoEm ZJRdSSRWHahZArPgm0DDqgvE7avOVeL0jurE4f3EdjWoE0hgyXAdn9dflbx6B1mN gbC2T7z6U6kmfrbs0iONZb6SudDehteIj8ksnb5AxjkgPrV3T9x/1w/JR+XH3+0J r0YaZFc5AqYlKwflxtTuom+JHXQqY0Zf80FXHrU0Y7Z3AqoNVzFmKSkXKWmBe3zO RA+T22vXz6wZmOeCRhJ4R5nrnp4UsCxvPiODai8flSLKTAr1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEKhSAeGhwBzCiosVTzr+jWWlbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDllZDVhMDYtNjFjZC0z MGRhLTgxNzAtOWQ3NDAzZWY3NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ0Q90AtY3k1pCpuVc4yOuxWak4wCqjMQ4+vteW4LB7w0GpUZb+Y/EO p306jU2Y1wbTZvfx0YfCSjN3tnxEQvPu7XINziuTVYam8Dow7GgFhCj7E4c8bOgH NBQ+FmCa8fkYnwTIpK3RlcX1k/DV9H4zAaEFIZmlzIps3i2R/sCGWUL5CPAykRAH eYn88Q0Cj3M4HzhXLI76N76KClC9y8/C+Am8TECQcRE0UzARtaoLC8xXbjyAUITW 5Tsh0abX02Ilfv7Olp5XO1Hbrt87TeUxSMvGYxmB0TgFonx+Eon1zt0V059oI7Na syzPxyOxXVgUUFUBBVcwb194okHdq1A= -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:24 2025 by rpki-client