This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/df354d03-6059-33bb-b861-c1e2e8bd0dd9.roa File: df354d03-6059-33bb-b861-c1e2e8bd0dd9.roa (raw, json) Hash identifier: 1Xq3NDASSMr1OfsfK7ldATS/oOGyxJtErsenbhLdDO0= Subject key identifier: AC:32:03:2A:A1:3B:ED:E4:6F:8C:89:86:81:0B:56:75:04:83:58:7F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584C0C12990534BF53014A39C380 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/df354d03-6059-33bb-b861-c1e2e8bd0dd9.roa Signing time: Mon 01 Dec 2025 23:01:49 +0000 ROA not before: Mon 01 Dec 2025 23:01:49 +0000 ROA not after: Sun 01 Mar 2026 23:01:49 +0000 asID: 81 IP address blocks: 192.154.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:12:99:05:34:bf:53:01:4a:39:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Dec 1 23:01:49 2025 GMT Not After : Mar 1 23:01:49 2026 GMT Subject: CN=66e41d47-ee2a-4f7e-866a-027f6d96a5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:7f:c7:50:46:67:9e:78:74:7d:f5:29:11: 62:65:8e:dc:7c:c8:9f:28:87:bd:0f:d3:b5:85:24: 87:c0:fa:5b:dd:ab:48:75:23:a7:6b:ac:58:1b:9e: 07:09:a0:a9:52:26:4c:2f:8d:aa:33:f8:a2:f2:34: e4:4f:fe:3a:a0:13:d8:b8:7d:8d:d6:8c:f4:3f:1d: b7:92:e9:92:25:5e:c1:04:37:9f:84:ae:fd:3f:4d: b3:fe:18:c5:d1:82:e0:e5:b7:5d:67:4f:75:1c:ff: 9f:4f:90:a7:3f:c1:6c:17:67:46:7d:2c:b6:40:44: 0d:3a:43:a9:14:35:f9:08:ae:21:1f:14:39:42:0b: d8:b9:80:17:9b:c5:e3:66:b0:01:16:a1:bf:2c:33: a8:27:47:e5:ae:be:53:6b:2b:33:c0:5b:d2:d2:4b: 68:ae:06:1d:85:ad:b1:ea:6a:58:b1:07:56:8e:2e: 2d:a5:bc:c9:a0:0f:75:3d:f5:18:50:6e:c9:0c:5b: 25:62:ed:c0:b2:2b:9d:f8:dc:5e:0d:57:b2:3b:cc: 12:1e:d3:e8:12:1e:c1:d7:63:98:a6:c7:a6:70:92: b3:16:bb:7f:96:a9:dc:04:25:d5:a4:f0:3d:ce:90: c4:73:8f:1a:08:01:ee:52:c9:12:a3:dd:74:6e:bd: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:03:2A:A1:3B:ED:E4:6F:8C:89:86:81:0B:56:75:04:83:58:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/df354d03-6059-33bb-b861-c1e2e8bd0dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:46:a4:fd:b8:67:f4:5b:3a:d2:b3:8f:38:2b:e4:8c:48:8b: 8e:08:19:2e:f9:94:5f:0f:45:bc:96:f3:21:dd:32:25:ea:f3: 42:8a:12:51:2e:80:fc:7d:8a:87:2d:0d:77:13:2b:e0:e3:b9: 89:e2:38:a7:1c:db:08:f5:25:c3:fc:d0:96:c9:57:3d:18:42: 1b:eb:49:7d:17:d6:e0:ba:e7:a7:f6:f9:9f:ed:d9:8f:aa:dd: 37:36:61:83:38:7c:ff:51:7b:ee:e9:0f:ca:99:a1:cb:28:90: 9d:d1:62:bf:c4:fa:32:00:e7:2c:e4:b0:ef:b0:74:2f:1d:4f: 39:89:e8:8b:b8:d2:a9:e8:f4:99:1c:91:b2:9b:cc:80:60:89: 5f:53:81:a6:75:14:ab:45:29:fd:5d:39:d3:56:da:a7:33:30: 76:71:41:84:ac:50:3d:97:f4:8b:a6:dd:86:3d:23:13:cd:49: bb:25:85:2c:07:1a:0e:5c:90:80:ed:a1:e2:23:0f:6c:6b:74: 94:2f:67:b9:fd:9e:66:fb:2f:36:4a:6f:a6:9d:0f:a5:77:2f: 7f:bf:4f:07:54:0e:a1:c4:71:c3:99:32:b3:f9:13:1f:38:8c: 86:af:6c:5b:41:31:99:43:93:d0:11:c7:bd:0c:d4:e9:20:e6: 2e:8d:82:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMEpkFNL9TAUo5w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTIwMTIzMDE0OVoXDTI2MDMwMTIzMDE0OVowLzEtMCsGA1UEAxMk NjZlNDFkNDctZWUyYS00ZjdlLTg2NmEtMDI3ZjZkOTZhNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQR/x1BGZ554dH31KRFiZY7cfMifKIe9D9O1 hSSHwPpb3atIdSOna6xYG54HCaCpUiZML42qM/ii8jTkT/46oBPYuH2N1oz0Px23 kumSJV7BBDefhK79P02z/hjF0YLg5bddZ091HP+fT5CnP8FsF2dGfSy2QEQNOkOp FDX5CK4hHxQ5QgvYuYAXm8XjZrABFqG/LDOoJ0flrr5TayszwFvS0ktorgYdha2x 6mpYsQdWji4tpbzJoA91PfUYUG7JDFslYu3Asiud+NxeDVeyO8wSHtPoEh7B12OY psemcJKzFrt/lqncBCXVpPA9zpDEc48aCAHuUskSo910br23NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwyAyqhO+3kb4yJhoELVnUEg1h/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGYzNTRkMDMtNjA1OS0z M2JiLWI4NjEtYzFlMmU4YmQwZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABGpP24Z/RbOtKzjzgr5IxIi44IGS75lF8PRbyW8yHdMiXq80KKElEu gPx9ioctDXcTK+DjuYniOKcc2wj1JcP80JbJVz0YQhvrSX0X1uC656f2+Z/t2Y+q 3Tc2YYM4fP9Re+7pD8qZocsokJ3RYr/E+jIA5yzksO+wdC8dTzmJ6Iu40qno9Jkc kbKbzIBgiV9TgaZ1FKtFKf1dOdNW2qczMHZxQYSsUD2X9Ium3YY9IxPNSbslhSwH Gg5ckIDtoeIjD2xrdJQvZ7n9nmb7LzZKb6adD6V3L3+/TwdUDqHEccOZMrP5Ex84 jIavbFtBMZlDk9ARx70M1Okg5i6Ngts= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:53 2025 by rpki-client