This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa File: 3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa (raw, json) Hash identifier: kR+NrQz52y6CvA9IEGSCN/4hnoscvr6Sf7UE78whEDI= Subject key identifier: 21:3D:7C:21:6F:C2:62:2D:14:34:E2:C2:54:4B:02:3B:79:C3:29:92 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584C0C129ACDA681FA95F678BE90 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa Signing time: Mon 01 Dec 2025 23:01:49 +0000 ROA not before: Mon 01 Dec 2025 23:01:49 +0000 ROA not after: Sun 01 Mar 2026 23:01:49 +0000 asID: 81 IP address blocks: 152.22.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:12:9a:cd:a6:81:fa:95:f6:78:be:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Dec 1 23:01:49 2025 GMT Not After : Mar 1 23:01:49 2026 GMT Subject: CN=a1bbc67f-7d13-48c0-ab76-26c4e55a0fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:96:2e:5c:6d:17:ac:bf:68:31:77:95:5a: 2d:c1:00:c9:ec:19:e8:58:9c:11:ab:8f:55:41:75: c9:23:f4:fd:79:b6:05:fd:c8:e1:cf:84:ee:a6:d0: 35:3f:ba:7c:dd:85:bf:4d:2f:14:88:59:d1:03:81: 1f:1a:01:cd:b2:b3:e6:0e:eb:73:81:67:02:6c:21: 72:c7:29:bd:b2:88:37:dd:4a:42:c8:e3:ec:e7:d4: 12:93:f7:01:52:2d:46:13:8f:81:f3:18:a7:78:68: 0f:db:db:3b:47:c7:18:df:b5:7e:3f:c6:3f:86:b5: fa:83:d3:31:25:e2:d3:0f:91:5b:72:14:45:57:59: 09:1b:54:c6:22:3c:80:b7:0f:b5:55:6e:60:cf:60: 13:d7:d7:a5:04:fb:ea:1f:b3:e1:2e:3a:1b:7b:fc: 21:82:29:bf:40:5b:f5:d5:67:79:4b:7d:7d:14:56: 1d:41:7d:3c:db:10:78:8f:cd:81:8d:45:b9:42:39: 0d:f9:d2:c3:98:97:86:ca:80:fc:99:ee:cb:c7:7b: 20:b4:fe:eb:67:bd:d0:67:0a:3e:1d:ef:b7:45:b3: 21:35:cf:fc:1e:ce:f8:93:52:18:d2:95:ed:67:ba: b9:9d:92:08:c1:95:f8:4c:29:a9:2b:43:5b:20:b1: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3D:7C:21:6F:C2:62:2D:14:34:E2:C2:54:4B:02:3B:79:C3:29:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ba:64:f0:b4:c2:42:f2:9d:1f:63:83:86:20:36:9c:62:e9: b9:d1:ed:49:31:54:f9:44:32:7b:04:4b:8e:1c:6a:46:23:75: 57:1d:6c:61:63:60:bb:f4:14:50:3b:ae:d0:5a:e0:4c:c3:65: 36:ed:ae:52:f8:e1:67:79:08:9d:76:13:d2:f5:a0:48:3e:dc: 63:5b:7c:08:5d:d5:22:b7:21:ea:fb:59:42:6e:b2:ea:17:b3: 2b:e0:60:0a:d0:c1:a5:d6:7c:53:5c:e7:51:56:7e:16:f2:00: 66:4e:13:02:a4:da:eb:a3:ef:7a:ad:64:05:90:1c:78:d6:fe: 3c:ed:aa:7b:3b:4a:bf:d3:d7:74:55:0a:51:16:1b:71:04:72: b9:c2:30:07:f5:f7:97:d3:6d:43:4d:d4:ae:be:bf:27:0a:10: c1:e8:c3:df:12:ab:d3:23:9e:2e:4a:36:ec:9d:05:b5:a9:0f: 6e:2d:86:71:f4:24:7a:d4:25:4f:98:1a:32:ef:75:ec:52:64: d2:ff:cb:b1:73:f9:57:d0:f5:3b:ff:10:72:c5:cf:43:90:c8: 48:9c:69:58:00:6a:c4:57:51:48:fc:0d:bd:5c:e9:04:57:86: 65:ec:24:8e:e9:9e:83:1f:23:34:ff:98:61:be:24:87:ea:07: e7:bd:9a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMEprNpoH6lfZ4vpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTIwMTIzMDE0OVoXDTI2MDMwMTIzMDE0OVowLzEtMCsGA1UEAxMk YTFiYmM2N2YtN2QxMy00OGMwLWFiNzYtMjZjNGU1NWEwZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6WLlxtF6y/aDF3lVotwQDJ7BnoWJwRq49V QXXJI/T9ebYF/cjhz4TuptA1P7p83YW/TS8UiFnRA4EfGgHNsrPmDutzgWcCbCFy xym9sog33UpCyOPs59QSk/cBUi1GE4+B8xineGgP29s7R8cY37V+P8Y/hrX6g9Mx JeLTD5FbchRFV1kJG1TGIjyAtw+1VW5gz2AT19elBPvqH7PhLjobe/whgim/QFv1 1Wd5S319FFYdQX082xB4j82BjUW5QjkN+dLDmJeGyoD8me7Lx3sgtP7rZ73QZwo+ He+3RbMhNc/8Hs74k1IY0pXtZ7q5nZIIwZX4TCmpK0NbILENYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE9fCFvwmItFDTiwlRLAjt5wymSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2E3ZTZkYzItODEzNi0z Nzk0LWJlNDItYTk0YWUxNGNmMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa6ZPC0wkLynR9jg4YgNpxi6bnR7UkxVPlEMnsES44cakYjdVcdbGFj YLv0FFA7rtBa4EzDZTbtrlL44Wd5CJ12E9L1oEg+3GNbfAhd1SK3Ier7WUJusuoX syvgYArQwaXWfFNc51FWfhbyAGZOEwKk2uuj73qtZAWQHHjW/jztqns7Sr/T13RV ClEWG3EEcrnCMAf195fTbUNN1K6+vycKEMHow98Sq9Mjni5KNuydBbWpD24thnH0 JHrUJU+YGjLvdexSZNL/y7Fz+VfQ9Tv/EHLFz0OQyEicaVgAasRXUUj8Db1c6QRX hmXsJI7pnoMfIzT/mGG+JIfqB+e9mjc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:53 2025 by rpki-client