This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa File: 533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa (raw, json) Hash identifier: dGy0tqasHZ98Swl44RN+py73Ax7bOfHlwVmYpVYeRcw= Subject key identifier: 99:B6:7B:5B:54:1E:92:E4:A8:64:C7:FA:D3:35:C9:DB:60:B9:1B:D0 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584BEDB5CBAEC1F17DE345E2B980 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 62610 IP address blocks: 128.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:cb:ae:c1:f1:7d:e3:45:e2:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=f239637f-857b-45a5-8da8-ee7fadebc10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:a0:b4:55:a6:95:b9:57:89:df:05:4f:d3: 19:17:e4:20:95:bf:ce:dc:45:5b:e7:b7:8c:df:17: af:d0:11:63:1b:70:39:7b:13:6a:7a:9e:62:93:0c: 11:ad:7a:91:11:ca:ab:60:88:a7:d0:a6:b9:e5:c1: d1:dd:67:90:4b:12:9d:31:47:a5:05:76:e4:a6:ca: a5:06:4e:a5:db:6c:81:fe:97:ad:04:b6:a3:7a:78: f1:ff:ee:49:62:e6:2a:4f:60:49:57:7d:39:32:2a: a4:6d:10:b6:df:6a:76:03:02:96:d2:44:44:9a:97: 37:67:31:1a:0c:8a:6a:c5:35:1a:7b:09:4b:6c:11: 2d:0e:ee:aa:d8:f6:ec:bc:01:44:c2:22:51:3c:ce: 6b:eb:0d:3d:a1:b0:80:a9:24:1c:b5:bc:19:98:7c: 03:9d:c0:e0:e7:e9:f0:69:aa:c7:97:79:fb:2e:7f: 85:ef:48:92:3c:b7:82:92:20:6b:70:9f:6c:ca:7f: 97:4c:ea:62:bb:f8:1e:ab:0c:c3:ed:c7:6a:c3:06: b5:0d:d6:4d:94:48:16:d8:17:f8:70:c5:5a:66:f0: 62:d5:7e:9f:22:e8:3e:5d:ea:11:ae:c6:b8:04:18: a5:3c:d3:24:dd:b4:97:81:6d:5a:29:0a:1b:f4:55: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:7B:5B:54:1E:92:E4:A8:64:C7:FA:D3:35:C9:DB:60:B9:1B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:25:e7:78:4a:1b:b6:73:d0:e5:34:fa:32:ba:e4:23:4b:17: 32:78:7d:6b:1b:32:0b:09:7d:db:59:92:4f:65:33:2a:64:23: 79:cc:51:7b:a3:e2:55:c4:ba:6d:11:e5:0e:69:19:dd:ba:7f: 92:f9:5c:29:f7:20:ba:a8:da:cd:24:ef:66:9b:9a:c3:93:e5: 4a:f6:eb:7d:d4:93:61:51:46:6b:e1:68:76:a0:c7:c3:8d:61: 26:b2:7f:f4:10:c7:30:a2:88:80:d9:13:f2:18:13:fc:85:9e: c0:50:15:3e:bc:0f:77:35:9a:a5:01:1c:46:82:bd:56:ee:c3: 30:04:7c:d3:c0:e6:c2:11:ac:cb:22:69:b8:35:0f:71:26:ad: 99:25:b3:26:a1:88:54:74:79:e0:d1:61:74:34:4a:ff:53:13: f5:c1:56:ef:78:71:ce:68:e0:3d:07:35:39:ef:2d:e3:eb:38: 91:c8:f5:fd:44:bd:de:d1:22:69:2f:6a:50:51:81:53:16:11: d5:b8:d4:40:e4:d6:8f:62:1c:80:fb:96:75:be:dc:8d:be:50: 57:94:ff:27:0a:79:55:c7:31:bd:b4:29:fa:31:be:87:d3:69: 0e:7e:41:c3:18:62:b1:e8:b3:5f:40:d9:3f:d2:65:5a:84:2d: 4d:39:fb:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttcuuwfF940XiuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjIzOTYzN2YtODU3Yi00NWE1LThkYTgtZWU3ZmFkZWJjMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2KgtFWmlblXid8FT9MZF+Qglb/O3EVb57eM 3xev0BFjG3A5exNqep5ikwwRrXqREcqrYIin0Ka55cHR3WeQSxKdMUelBXbkpsql Bk6l22yB/petBLajenjx/+5JYuYqT2BJV305MiqkbRC232p2AwKW0kREmpc3ZzEa DIpqxTUaewlLbBEtDu6q2PbsvAFEwiJRPM5r6w09obCAqSQctbwZmHwDncDg5+nw aarHl3n7Ln+F70iSPLeCkiBrcJ9syn+XTOpiu/geqwzD7cdqwwa1DdZNlEgW2Bf4 cMVaZvBi1X6fIug+XeoRrsa4BBilPNMk3bSXgW1aKQob9FWU+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm2e1tUHpLkqGTH+tM1ydtguRvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTMzZDU4NTgtMGFmNy0z ZTdhLWIxYzEtZGIyMDRlNjZlNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwl53hKG7Zz0OU0+jK65CNLFzJ4fWsbMgsJfdtZkk9lMypkI3nMUXuj 4lXEum0R5Q5pGd26f5L5XCn3ILqo2s0k72abmsOT5Ur2633Uk2FRRmvhaHagx8ON YSayf/QQxzCiiIDZE/IYE/yFnsBQFT68D3c1mqUBHEaCvVbuwzAEfNPA5sIRrMsi abg1D3EmrZklsyahiFR0eeDRYXQ0Sv9TE/XBVu94cc5o4D0HNTnvLePrOJHI9f1E vd7RImkvalBRgVMWEdW41EDk1o9iHID7lnW+3I2+UFeU/ycKeVXHMb20KfoxvofT aQ5+QcMYYrHos19A2T/SZVqELU05+9w= -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:13 2025 by rpki-client