This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9d59458e-5004-3287-9452-ee0baab27695.roa File: 9d59458e-5004-3287-9452-ee0baab27695.roa (raw, json) Hash identifier: 9SVroSnXiqcGdhILEqXP7BtXbnSUgxRLY2HP8y7h2wI= Subject key identifier: C0:0B:FC:82:CC:10:70:2B:43:A7:F8:A6:A5:37:AF:B5:EE:43:4C:51 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584C0C129C53FC1193D5D72D9900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9d59458e-5004-3287-9452-ee0baab27695.roa Signing time: Mon 01 Dec 2025 23:01:50 +0000 ROA not before: Mon 01 Dec 2025 23:01:50 +0000 ROA not after: Sun 01 Mar 2026 23:01:50 +0000 asID: 81 IP address blocks: 152.28.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:12:9c:53:fc:11:93:d5:d7:2d:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Dec 1 23:01:50 2025 GMT Not After : Mar 1 23:01:50 2026 GMT Subject: CN=d506aa37-6e53-4e21-971e-f47370a1f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:d0:05:20:c7:7b:71:08:51:2b:a4:08:31: e1:cb:38:b7:09:71:8f:af:4b:1f:10:7f:c1:39:61: b0:e3:52:76:49:cf:0e:36:a2:ea:59:96:cb:5b:2e: 11:2c:24:d1:c4:35:4b:a2:26:39:32:c3:05:a8:9b: bf:31:65:e3:a9:cf:e2:0e:88:3f:d5:97:e2:c3:5f: 11:99:70:e1:28:d8:4b:2d:83:83:90:21:43:18:11: 6f:db:d2:02:d1:ec:5d:71:02:e5:57:b3:cd:82:48: a2:e7:92:bd:2d:83:13:a9:32:c8:bc:ad:5d:63:08: 01:4e:19:58:1b:94:ab:88:19:53:a1:6e:0d:40:53: 3f:f7:05:1f:5b:aa:b4:71:86:b8:8b:90:97:7c:53: f1:71:78:10:a7:56:d4:fc:d2:47:ef:61:b4:4c:03: 70:74:53:a7:10:39:29:e6:b8:52:13:59:ee:cb:b6: be:63:3a:2c:ca:73:84:8d:50:4a:5d:a0:10:f6:fb: 05:cd:6b:b4:b1:bf:0d:16:ce:04:6d:f9:f2:2b:5c: 50:5c:b2:a1:cc:dc:77:e7:2d:b2:f5:6d:35:a1:44: 48:46:3f:8c:ef:f5:5a:32:08:ab:30:3d:0d:f0:ea: b4:08:16:63:c5:55:7a:59:5f:a4:ea:96:75:4a:66: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0B:FC:82:CC:10:70:2B:43:A7:F8:A6:A5:37:AF:B5:EE:43:4C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9d59458e-5004-3287-9452-ee0baab27695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:17:34:24:31:39:a1:d4:5f:2e:48:cb:e7:d3:d6:b0:97:45: 70:ab:df:af:e6:02:14:a0:65:3b:fd:ce:0f:ab:9b:32:24:ec: 72:14:f0:22:cb:16:47:bb:39:29:84:11:3b:19:07:91:d0:b2: 0e:a1:bb:ff:34:71:46:2d:c9:8b:0c:e7:60:47:0c:f2:08:41: 70:12:65:4d:90:69:58:22:73:71:38:f8:e3:9f:d0:1e:f4:4a: 7e:b6:21:84:fb:4c:1b:36:47:1d:ef:1a:ee:7f:25:21:82:58: 1e:3d:20:26:bd:5d:f3:08:15:be:1d:f7:34:6f:fa:37:95:26: a7:da:b7:50:bb:8a:6b:62:f6:23:64:c8:e6:78:11:cd:ba:be: d9:5a:f0:5e:d1:6e:6a:a2:aa:b2:31:1f:67:1a:8d:1a:aa:3a: 59:97:f8:f3:8d:6c:d7:07:35:eb:c0:a0:25:85:22:60:13:eb: 57:bf:15:97:3d:d1:5f:5e:36:83:29:7e:94:b5:28:f9:73:75: 9a:57:5e:a6:7b:af:68:44:c8:1a:b0:9e:9e:9b:1c:58:8d:7a: 59:44:99:f3:bc:a6:16:46:1d:2b:e7:11:b8:13:00:12:83:86: 15:47:80:38:70:ec:31:cd:f1:42:1f:51:99:22:90:48:7b:e3: ac:a1:06:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMEpxT/BGT1dctmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTIwMTIzMDE1MFoXDTI2MDMwMTIzMDE1MFowLzEtMCsGA1UEAxMk ZDUwNmFhMzctNmU1My00ZTIxLTk3MWUtZjQ3MzcwYTFmNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtorQBSDHe3EIUSukCDHhyzi3CXGPr0sfEH/B OWGw41J2Sc8ONqLqWZbLWy4RLCTRxDVLoiY5MsMFqJu/MWXjqc/iDog/1Zfiw18R mXDhKNhLLYODkCFDGBFv29IC0exdcQLlV7PNgkii55K9LYMTqTLIvK1dYwgBThlY G5SriBlToW4NQFM/9wUfW6q0cYa4i5CXfFPxcXgQp1bU/NJH72G0TANwdFOnEDkp 5rhSE1nuy7a+YzosynOEjVBKXaAQ9vsFzWu0sb8NFs4EbfnyK1xQXLKhzNx35y2y 9W01oURIRj+M7/VaMgirMD0N8Oq0CBZjxVV6WV+k6pZ1Smb1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAL/ILMEHArQ6f4pqU3r7XuQ0xRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWQ1OTQ1OGUtNTAwNC0z Mjg3LTk0NTItZWUwYmFhYjI3Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUXNCQxOaHUXy5Iy+fT1rCXRXCr36/mAhSgZTv9zg+rmzIk7HIU8CLL Fke7OSmEETsZB5HQsg6hu/80cUYtyYsM52BHDPIIQXASZU2QaVgic3E4+OOf0B70 Sn62IYT7TBs2Rx3vGu5/JSGCWB49ICa9XfMIFb4d9zRv+jeVJqfat1C7imti9iNk yOZ4Ec26vtla8F7RbmqiqrIxH2cajRqqOlmX+PONbNcHNevAoCWFImAT61e/FZc9 0V9eNoMpfpS1KPlzdZpXXqZ7r2hEyBqwnp6bHFiNellEmfO8phZGHSvnEbgTABKD hhVHgDhw7DHN8UIfUZkikEh746yhBqc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:43 2025 by rpki-client