This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a20b9a7a-b935-3689-a560-23beb6f36353.roa File: a20b9a7a-b935-3689-a560-23beb6f36353.roa (raw, json) Hash identifier: yx0S1rsTFmurAxj0pCG+CVeG80QPaLS9AMXdjx8IyoA= Subject key identifier: AC:27:55:3A:42:06:68:1D:FB:11:8E:B7:6A:DD:17:E5:07:5C:34:E8 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584C0C12993FBE13A7A020CD746A Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a20b9a7a-b935-3689-a560-23beb6f36353.roa Signing time: Mon 01 Dec 2025 23:01:49 +0000 ROA not before: Mon 01 Dec 2025 23:01:49 +0000 ROA not after: Sun 01 Mar 2026 23:01:49 +0000 asID: 81 IP address blocks: 192.154.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:12:99:3f:be:13:a7:a0:20:cd:74:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Dec 1 23:01:49 2025 GMT Not After : Mar 1 23:01:49 2026 GMT Subject: CN=f59b1408-df47-4f7b-8f68-fa99155b019a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:33:6e:ae:d6:4d:10:72:a5:ec:d1:01:e2: a6:d2:ff:4c:d4:59:9e:e3:9f:8f:c4:17:63:9e:a1: 78:1b:b5:ac:a9:0e:5a:31:ed:22:56:a5:4f:c0:a7: 6f:28:c8:c6:26:22:94:34:39:60:a3:25:c8:f8:b2: d1:ae:9c:40:9c:0e:a0:3c:dc:cd:0c:17:48:fd:63: 03:8c:5f:bf:5d:b4:04:3a:9d:41:c2:ac:f9:b6:99: 5b:a7:65:22:79:36:0d:86:6d:1b:40:46:4a:dc:54: 93:62:39:ad:d7:3f:96:b3:1a:f2:fa:a1:26:22:b7: 32:1c:dc:44:4a:8a:4a:55:a9:df:7d:32:aa:26:ef: 55:56:1a:85:aa:56:dd:2c:ad:b6:8f:bc:78:55:ad: 77:1b:22:bd:63:d6:13:56:2a:ed:74:06:19:80:ac: 5a:a9:ca:ad:f8:91:85:c9:08:6d:cb:26:6a:94:1d: 04:e0:76:d4:e9:20:16:49:c3:7c:f0:88:23:b3:b2: ec:ae:b9:44:20:32:59:00:69:94:b3:75:52:0e:3a: 39:8a:ee:27:71:66:05:7f:01:3d:9d:5f:40:68:5c: 98:54:5c:87:84:86:0d:fc:b2:49:1d:c1:52:ce:db: 42:56:47:40:31:f2:bf:20:35:5b:70:00:de:d9:45: f0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:27:55:3A:42:06:68:1D:FB:11:8E:B7:6A:DD:17:E5:07:5C:34:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a20b9a7a-b935-3689-a560-23beb6f36353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b6:33:72:70:90:b5:53:c9:b6:f1:db:33:d8:7a:67:48:28: 11:eb:1b:70:d9:ea:eb:09:d0:a3:b8:a7:e1:5f:01:87:3f:af: e7:ce:79:c4:36:a4:25:14:38:74:25:f5:f9:56:eb:d4:fa:ca: fd:ce:27:85:58:65:7d:ed:a7:55:1b:8a:98:9b:05:35:04:18: 7a:df:d8:c0:33:80:d7:88:f3:b3:f3:4c:8a:21:58:d6:69:b2: 76:33:ae:7a:b0:c8:57:95:98:0e:9a:85:ba:0a:03:07:87:7f: 5f:4b:7a:57:6f:07:83:ad:30:ed:48:62:48:7f:e5:75:c9:cb: 00:81:b0:07:53:02:84:ec:69:cb:0b:9e:da:60:26:3e:fe:53: da:5c:40:e2:0c:f5:40:fd:9d:ed:73:66:3b:19:ae:13:88:db: 3f:91:99:0b:96:43:12:55:d0:44:8f:7b:fd:7a:ef:3c:ac:1f: fd:1e:64:0e:e4:68:38:71:86:9c:31:b2:33:c2:f7:d3:c2:0c: 75:e5:8f:58:6f:4e:28:02:ad:37:f5:6a:c7:5f:d3:ac:44:58: b4:21:cb:c6:80:aa:67:f2:24:b7:1e:a4:8a:a4:4f:59:98:e5: 50:e4:af:3e:fb:00:16:2b:25:0e:8d:01:50:bd:22:a1:35:4e: db:9f:6a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMEpk/vhOnoCDNdGowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTIwMTIzMDE0OVoXDTI2MDMwMTIzMDE0OVowLzEtMCsGA1UEAxMk ZjU5YjE0MDgtZGY0Ny00ZjdiLThmNjgtZmE5OTE1NWIwMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiIzbq7WTRBypezRAeKm0v9M1Fme45+PxBdj nqF4G7WsqQ5aMe0iVqVPwKdvKMjGJiKUNDlgoyXI+LLRrpxAnA6gPNzNDBdI/WMD jF+/XbQEOp1Bwqz5tplbp2UieTYNhm0bQEZK3FSTYjmt1z+Wsxry+qEmIrcyHNxE SopKVanffTKqJu9VVhqFqlbdLK22j7x4Va13GyK9Y9YTVirtdAYZgKxaqcqt+JGF yQhtyyZqlB0E4HbU6SAWScN88Igjs7LsrrlEIDJZAGmUs3VSDjo5iu4ncWYFfwE9 nV9AaFyYVFyHhIYN/LJJHcFSzttCVkdAMfK/IDVbcADe2UXwQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwnVTpCBmgd+xGOt2rdF+UHXDToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTIwYjlhN2EtYjkzNS0z Njg5LWE1NjAtMjNiZWI2ZjM2MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK2M3JwkLVTybbx2zPYemdIKBHrG3DZ6usJ0KO4p+FfAYc/r+fOecQ2 pCUUOHQl9flW69T6yv3OJ4VYZX3tp1UbipibBTUEGHrf2MAzgNeI87PzTIohWNZp snYzrnqwyFeVmA6ahboKAweHf19LeldvB4OtMO1IYkh/5XXJywCBsAdTAoTsacsL ntpgJj7+U9pcQOIM9UD9ne1zZjsZrhOI2z+RmQuWQxJV0ESPe/167zysH/0eZA7k aDhxhpwxsjPC99PCDHXlj1hvTigCrTf1asdf06xEWLQhy8aAqmfyJLcepIqkT1mY 5VDkrz77ABYrJQ6NAVC9IqE1Ttufaos= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:32 2025 by rpki-client