This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/431a222d-32a8-3178-b26c-8635e5237089.roa File: 431a222d-32a8-3178-b26c-8635e5237089.roa (raw, json) Hash identifier: C1o/2gTRTMlbvSS2p7J7KihPvf9uvnWN2N1FYX2/104= Subject key identifier: 49:44:6F:3C:03:F9:89:47:48:83:84:A5:25:81:D0:CB:1C:54:2A:67 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584C0C129810377A1F5E9DE68400 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/431a222d-32a8-3178-b26c-8635e5237089.roa Signing time: Mon 01 Dec 2025 23:01:48 +0000 ROA not before: Mon 01 Dec 2025 23:01:48 +0000 ROA not after: Sun 01 Mar 2026 23:01:48 +0000 asID: 81 IP address blocks: 152.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:12:98:10:37:7a:1f:5e:9d:e6:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Dec 1 23:01:48 2025 GMT Not After : Mar 1 23:01:48 2026 GMT Subject: CN=9abc1d77-66bd-43c8-ad99-40e7364afc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:a8:be:15:de:74:51:1f:24:b9:39:4b:ba: 73:5b:44:e8:c1:2c:db:d1:47:66:0e:9c:9d:ad:99: 03:df:fd:92:85:3d:b6:cd:56:7f:31:b7:0e:b0:e6: c8:82:07:e7:3b:3e:ce:51:0c:16:be:65:3e:f0:46: d2:a2:0b:ee:18:2f:e1:84:50:b1:87:3d:03:f6:28: 42:1e:4d:ff:c0:e6:88:e9:e5:b6:b1:53:d5:ca:7c: 61:7c:e5:99:33:9f:d4:34:b7:93:0d:9b:b7:84:e4: eb:38:8a:76:b3:c7:08:a9:00:32:93:19:97:48:e5: b3:96:ef:ec:3d:24:51:bd:61:9f:29:4d:2c:a5:90: 4d:45:19:dd:1b:44:d2:48:a4:6b:4a:e7:49:a1:6c: 00:9d:27:1c:d5:80:12:47:dc:dc:84:d6:84:e8:6d: 9a:a7:6c:52:ce:87:64:a5:28:63:20:54:1a:3a:15: 24:10:20:f6:b0:21:dd:57:49:36:ff:de:e3:10:26: 80:da:ba:b4:ae:13:34:07:38:a0:55:d4:14:44:de: fa:4c:98:b5:a6:7e:92:1f:c6:5b:69:d6:c6:cc:dd: 06:59:b3:78:ff:19:be:2d:2e:6f:19:12:d4:e5:f4: 69:aa:95:f2:59:69:db:c0:ad:49:8c:7c:35:8a:ef: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:44:6F:3C:03:F9:89:47:48:83:84:A5:25:81:D0:CB:1C:54:2A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/431a222d-32a8-3178-b26c-8635e5237089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d7:36:34:ac:a5:a6:87:df:35:a8:f8:66:19:31:b7:0b:0c: 83:7d:8d:97:19:65:8f:fb:3e:8f:09:48:aa:d5:d7:0b:2d:4b: 71:24:66:fe:80:4d:ff:6f:88:99:2d:39:4b:f0:8e:f4:36:a7: a9:bb:92:de:16:96:a1:a2:82:98:0c:53:85:c7:6d:00:b3:95: 3b:03:af:69:5b:3c:00:ba:1b:dc:e9:b4:3d:9c:d0:dc:1f:c2: 75:b1:3c:63:da:fb:d1:65:36:53:9b:07:16:53:ea:95:8c:07: 12:09:07:49:0b:1e:4b:37:03:c5:a7:cc:de:1f:05:eb:3f:7d: 3e:89:4b:b4:07:ab:c7:9f:d9:12:a7:6c:85:63:0e:10:01:a8: f5:86:f8:c6:a8:cd:de:af:6f:fb:f2:c6:15:db:a8:62:34:39: c8:19:70:88:97:34:75:0e:02:53:71:b9:ae:8a:5b:72:a5:35: 80:33:aa:26:c4:5d:ec:35:17:bf:f1:b9:cd:82:c3:8f:47:f1: f6:7c:92:fa:0a:19:68:97:0b:eb:79:5c:ca:f6:94:93:7f:70: e8:06:f5:cc:a4:15:66:04:08:b6:1b:aa:63:ac:2f:f9:6e:10: 66:07:19:f5:cc:95:b1:b1:9a:32:32:dd:90:71:28:18:9d:e9: 8b:98:e1:65 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEwMEpgQN3ofXp3mhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTIwMTIzMDE0OFoXDTI2MDMwMTIzMDE0OFowLzEtMCsGA1UEAxMk OWFiYzFkNzctNjZiZC00M2M4LWFkOTktNDBlNzM2NGFmYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit+ovhXedFEfJLk5S7pzW0TowSzb0UdmDpyd rZkD3/2ShT22zVZ/MbcOsObIggfnOz7OUQwWvmU+8EbSogvuGC/hhFCxhz0D9ihC Hk3/wOaI6eW2sVPVynxhfOWZM5/UNLeTDZu3hOTrOIp2s8cIqQAykxmXSOWzlu/s PSRRvWGfKU0spZBNRRndG0TSSKRrSudJoWwAnScc1YASR9zchNaE6G2ap2xSzodk pShjIFQaOhUkECD2sCHdV0k2/97jECaA2rq0rhM0BzigVdQURN76TJi1pn6SH8Zb adbGzN0GWbN4/xm+LS5vGRLU5fRpqpXyWWnbwK1JjHw1iu/8fQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFElEbzwD+YlHSIOEpSWB0MscVCpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDMxYTIyMmQtMzJhOC0z MTc4LWIyNmMtODYzNWU1MjM3MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgNc2NKylpoffNaj4ZhkxtwsMg32Nlxllj/s+jwlIqtXXCy1LcSRm/oBN /2+ImS05S/CO9DanqbuS3haWoaKCmAxThcdtALOVOwOvaVs8ALob3Om0PZzQ3B/C dbE8Y9r70WU2U5sHFlPqlYwHEgkHSQseSzcDxafM3h8F6z99PolLtAerx5/ZEqds hWMOEAGo9Yb4xqjN3q9v+/LGFduoYjQ5yBlwiJc0dQ4CU3G5ropbcqU1gDOqJsRd 7DUXv/G5zYLDj0fx9nyS+goZaJcL63lcyvaUk39w6Ab1zKQVZgQIthuqY6wv+W4Q ZgcZ9cyVsbGaMjLdkHEoGJ3pi5jhZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:49 2025 by rpki-client