This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a20b71e5-862a-3800-8e14-2351e3f42e74.roa File: a20b71e5-862a-3800-8e14-2351e3f42e74.roa (raw, json) Hash identifier: L4BZ3xOpyHyuPSktfIZhFIE8eDnRJyj7gR7rgPck5ZQ= Subject key identifier: 50:5A:06:13:4C:E7:2B:24:2E:F8:7D:0D:0C:22:1E:A7:07:F8:3E:45 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584C0C12A15C00DFF2FA79827300 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a20b71e5-862a-3800-8e14-2351e3f42e74.roa Signing time: Mon 01 Dec 2025 23:01:53 +0000 ROA not before: Mon 01 Dec 2025 23:01:53 +0000 ROA not after: Sun 01 Mar 2026 23:01:53 +0000 asID: 81 IP address blocks: 198.86.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:12:a1:5c:00:df:f2:fa:79:82:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Dec 1 23:01:53 2025 GMT Not After : Mar 1 23:01:53 2026 GMT Subject: CN=220a8832-f30b-4755-91fa-1386e46ff943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:70:51:bb:42:e3:61:00:c2:40:c5:39:dc: 7e:7c:35:03:bc:7d:d6:1e:5f:54:83:23:9f:f9:55: 9a:51:c5:66:a2:c8:43:ed:4b:fc:93:ff:e9:15:d8: c9:79:28:da:15:a3:1a:36:59:d0:81:57:0c:34:4d: 4c:90:79:2d:fb:e1:db:a4:82:1d:42:ce:55:fc:9b: 99:90:14:32:7b:7f:d8:07:44:b9:cb:94:63:e2:07: 00:e6:5d:a8:76:0c:c5:ca:b7:77:38:a6:f9:5d:7f: 92:0f:37:8e:e0:5c:09:78:04:4e:c8:9c:1c:28:c4: 8f:ac:04:5d:36:cb:85:8c:0d:73:52:52:e5:24:1e: 67:ec:02:44:8a:02:23:ef:16:02:06:ca:1d:65:9b: 76:66:0c:24:4a:7f:e6:93:1e:b6:42:0d:6a:95:df: 4a:3b:a4:87:65:01:90:24:8c:1c:f3:35:c7:37:51: 68:36:7f:7f:fb:b3:3a:bb:a7:6a:ec:e3:a2:90:cb: 97:b7:89:94:11:01:df:34:96:03:23:44:28:40:82: 7e:03:b4:c6:5c:7b:8d:89:36:38:9d:82:a2:c6:e1: 61:1c:ca:e5:f1:96:17:ca:7e:44:be:55:10:de:9c: 51:b0:76:4c:41:d1:3f:15:d3:10:d9:12:f1:f1:36: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5A:06:13:4C:E7:2B:24:2E:F8:7D:0D:0C:22:1E:A7:07:F8:3E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a20b71e5-862a-3800-8e14-2351e3f42e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:56:90:8c:67:90:9f:f6:ea:6a:3a:95:8a:70:dc:68:fe:22: 95:9e:4a:5c:3f:a3:ef:b9:1c:da:66:36:f1:ee:92:bf:26:05: fd:ab:62:b4:63:c8:e6:e9:8f:73:4f:1e:63:ec:f4:f0:bc:d9: 05:c4:02:3a:06:e6:28:bd:49:ac:ad:92:a3:fa:8e:f7:df:9f: 8b:88:05:c2:25:4a:b2:34:61:8b:a5:63:ec:f5:fe:b0:a5:29: 60:21:e3:3c:7a:7d:cc:85:b5:4b:16:e7:89:38:ad:01:55:48: e0:60:3f:a8:f4:44:f6:75:9b:2f:13:59:4a:27:af:ac:72:70: c8:6c:73:95:5f:4a:2d:e6:72:4d:b7:94:68:71:80:e4:b3:d0: ec:59:0a:e1:92:41:19:c8:e9:73:6e:8d:ce:50:4b:04:d0:65: 6d:ae:77:e5:93:1d:05:95:31:f6:74:8c:14:19:7d:7c:1f:a4: 3a:b3:c3:fa:7c:84:91:f9:48:27:ee:47:bc:c3:63:00:21:c7: aa:64:e1:d9:e3:ce:3c:1e:a1:d3:61:75:67:01:c1:d9:5b:13: 5b:58:bb:0e:4f:c9:b3:3c:04:f8:2e:cf:6b:13:73:d8:0d:23: 0a:21:8e:9f:d3:e1:7e:fb:dd:25:13:04:09:3d:bb:f5:d1:fb: 72:16:58:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMEqFcAN/y+nmCcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTIwMTIzMDE1M1oXDTI2MDMwMTIzMDE1M1owLzEtMCsGA1UEAxMk MjIwYTg4MzItZjMwYi00NzU1LTkxZmEtMTM4NmU0NmZmOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrRwUbtC42EAwkDFOdx+fDUDvH3WHl9UgyOf +VWaUcVmoshD7Uv8k//pFdjJeSjaFaMaNlnQgVcMNE1MkHkt++HbpIIdQs5V/JuZ kBQye3/YB0S5y5Rj4gcA5l2odgzFyrd3OKb5XX+SDzeO4FwJeAROyJwcKMSPrARd NsuFjA1zUlLlJB5n7AJEigIj7xYCBsodZZt2ZgwkSn/mkx62Qg1qld9KO6SHZQGQ JIwc8zXHN1FoNn9/+7M6u6dq7OOikMuXt4mUEQHfNJYDI0QoQIJ+A7TGXHuNiTY4 nYKixuFhHMrl8ZYXyn5EvlUQ3pxRsHZMQdE/FdMQ2RLx8TZ2WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBaBhNM5yskLvh9DQwiHqcH+D5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTIwYjcxZTUtODYyYS0z ODAwLThlMTQtMjM1MWUzZjQyZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFWkIxnkJ/26mo6lYpw3Gj+IpWeSlw/o++5HNpmNvHukr8mBf2rYrRj yObpj3NPHmPs9PC82QXEAjoG5ii9SaytkqP6jvffn4uIBcIlSrI0YYulY+z1/rCl KWAh4zx6fcyFtUsW54k4rQFVSOBgP6j0RPZ1my8TWUonr6xycMhsc5VfSi3mck23 lGhxgOSz0OxZCuGSQRnI6XNujc5QSwTQZW2ud+WTHQWVMfZ0jBQZfXwfpDqzw/p8 hJH5SCfuR7zDYwAhx6pk4dnjzjweodNhdWcBwdlbE1tYuw5PybM8BPguz2sTc9gN Iwohjp/T4X773SUTBAk9u/XR+3IWWEg= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:53 2025 by rpki-client