This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json) Hash identifier: xBuifcRJBqm/iW+rRp2AvOBoLumZTDIDB+PXmA47Cpw= Subject key identifier: 96:A4:6C:6F:F4:66:D3:F8:B3:F3:50:8E:D1:86:81:45:33:07:43:28 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584BEC5093FDEBD4C9FA2FE2E280 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 394285 IP address blocks: 68.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:93:fd:eb:d4:c9:fa:2f:e2:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=c1998a22-76f6-439f-89d3-903f24ca2b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:55:f0:cc:93:fe:e8:61:c4:22:95:45:30: 63:bb:af:f8:8c:de:eb:ce:3b:36:68:e7:bb:45:e2: 8d:52:67:56:72:81:fb:a4:d4:05:19:c2:16:2b:d0: eb:63:ea:76:d3:ab:33:b9:bd:14:4b:2b:fb:04:cd: 52:b3:8e:f7:91:02:a4:91:66:c1:89:86:37:b2:8e: 62:cd:0e:e2:67:15:7d:8a:da:65:a5:74:a8:be:9f: 84:90:1a:1a:ef:c5:65:6a:8d:be:fd:10:cf:3d:6d: 52:86:7f:1e:e6:b7:9d:4a:90:c7:34:e5:97:66:67: b7:59:21:20:c8:4b:a9:19:31:35:e7:95:3b:c6:8d: d4:4a:06:9e:96:be:ab:8f:98:40:51:5a:37:4e:2f: a2:40:ee:65:4f:9e:5d:35:ea:1e:59:3d:b4:5d:e8: b4:2e:3e:2e:cc:4e:3b:be:12:a9:b5:60:8e:fa:cf: 72:65:ec:07:a3:c2:29:f4:25:e9:a2:bd:3a:3b:56: 60:db:fc:52:3f:8f:2b:1f:16:9f:8f:be:c5:75:72: 87:11:67:6d:67:6e:f8:aa:dc:5e:9f:98:56:92:d8: a1:a9:3f:4f:cf:fe:d5:94:07:c9:f2:39:84:46:07: b6:51:50:57:97:dc:81:09:ea:5c:55:de:63:3e:b5: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A4:6C:6F:F4:66:D3:F8:B3:F3:50:8E:D1:86:81:45:33:07:43:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:65:35:cc:08:cd:75:37:d0:c9:c7:45:86:bc:6b:b4:e8:d1: 8c:53:4c:c9:93:d9:fd:4a:87:ea:7f:5c:7a:ca:41:b7:25:2b: 98:f7:88:bc:40:8c:a8:d4:91:87:d1:fc:82:cf:b9:06:40:e4: b5:c9:60:91:46:f3:22:32:f1:a2:5c:b6:30:4d:3e:82:d7:4c: 80:f3:b5:42:be:ca:d2:ef:71:35:38:68:8a:c8:09:32:98:dc: 37:66:f9:0c:e4:f2:62:a7:af:de:e8:c7:f0:39:7e:ea:7a:d5: 01:b6:9a:62:a3:59:3c:d0:cf:a0:ad:be:71:21:b6:45:59:9b: dc:cb:a1:35:2d:7c:dc:60:4b:62:89:d9:df:bc:cb:5a:6d:a6: 6c:18:81:51:86:30:6e:dc:f4:2a:60:4f:15:d9:a8:60:39:de: 6e:1e:c5:14:cc:57:49:17:a8:1d:7c:d8:7a:e9:03:b9:cf:36: 97:43:61:d6:31:99:16:97:fa:19:12:a3:f2:06:be:d5:40:81: 4c:06:0b:f6:4c:d3:74:20:8a:b4:e0:52:e7:47:5d:82:d3:6d: 05:e8:24:96:72:1d:71:ba:d1:ad:cf:f5:c6:ea:48:e9:49:47: 49:0a:c5:d3:7b:2e:a7:cb:42:f5:ea:ff:a8:11:93:aa:29:52: 38:aa:9f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUJP969TJ+i/i4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk YzE5OThhMjItNzZmNi00MzlmLTg5ZDMtOTAzZjI0Y2EyYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wRV8MyT/uhhxCKVRTBju6/4jN7rzjs2aOe7 ReKNUmdWcoH7pNQFGcIWK9DrY+p206szub0USyv7BM1Ss473kQKkkWbBiYY3so5i zQ7iZxV9itplpXSovp+EkBoa78Vlao2+/RDPPW1Shn8e5redSpDHNOWXZme3WSEg yEupGTE155U7xo3USgaelr6rj5hAUVo3Ti+iQO5lT55dNeoeWT20Xei0Lj4uzE47 vhKptWCO+s9yZewHo8Ip9CXpor06O1Zg2/xSP48rHxafj77FdXKHEWdtZ274qtxe n5hWktihqT9Pz/7VlAfJ8jmERge2UVBXl9yBCepcVd5jPrWquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJakbG/0ZtP4s/NQjtGGgUUzB0MoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMDlhYWYyY2QtM2E2OS0z MjFmLTlkYTEtZjgzZDcyZDlhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABlNcwIzXU30MnHRYa8a7To0YxTTMmT2f1Kh+p/XHrKQbclK5j3iLxA jKjUkYfR/ILPuQZA5LXJYJFG8yIy8aJctjBNPoLXTIDztUK+ytLvcTU4aIrICTKY 3Ddm+Qzk8mKnr97ox/A5fup61QG2mmKjWTzQz6CtvnEhtkVZm9zLoTUtfNxgS2KJ 2d+8y1ptpmwYgVGGMG7c9CpgTxXZqGA53m4exRTMV0kXqB182HrpA7nPNpdDYdYx mRaX+hkSo/IGvtVAgUwGC/ZM03QgirTgUudHXYLTbQXoJJZyHXG60a3P9cbqSOlJ R0kKxdN7LqfLQvXq/6gRk6opUjiqnxU= -----END CERTIFICATE-----Generated at Fri Dec 19 00:28:36 2025 by rpki-client