This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa File: 59e71e1a-ae50-3564-849a-54acf114c131.roa (raw, json) Hash identifier: lD1JJXv7iA0ZPnuIDPt5s2jBYlOH3C70EXy1T+8FO5U= Subject key identifier: 61:C5:4A:6F:6F:94:94:48:1E:7F:5B:00:E1:BA:71:68:87:88:30:1C Certificate issuer: /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6 Certificate serial: 010D0C9F4328584BEC50B8041F926A5C7DDD95E0 Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 40714 IP address blocks: 164.152.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:b8:04:1f:92:6a:5c:7d:dd:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=30605ca7-7f58-4a28-bddd-3d9030fd2881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:01:05:94:a8:8b:e9:80:ae:60:23:be:f6: 3b:35:4d:c4:5d:e8:0d:dd:53:af:6b:dc:61:0b:e2: 55:b2:33:57:4e:f9:83:a5:d5:f5:f8:af:55:6b:39: 2d:40:54:b0:ff:7a:a1:d1:71:80:a6:1e:a3:fc:92: 1c:5b:d7:6f:b1:57:8c:a5:72:ef:37:e5:a2:a2:ec: 15:b2:44:3e:6f:25:b8:53:f3:b3:5e:d1:eb:0f:72: cd:f0:05:f4:97:44:b2:1b:be:d6:ca:7f:2c:62:ff: 80:01:1f:b9:6c:ec:85:00:48:57:87:02:f8:9d:42: 3e:d2:10:8a:36:17:ac:7f:3a:a9:2d:96:20:35:bf: e3:cf:7d:a9:6e:12:55:4d:13:2c:f6:d5:ef:86:db: 23:19:64:c6:1b:3f:17:9a:fe:04:9d:06:e0:58:77: 33:43:8d:2d:12:14:ba:4f:79:23:f4:24:5e:06:fc: 77:33:37:f8:8b:a1:61:40:9c:58:fc:5f:f5:4d:39: ca:61:d5:cd:0f:06:b6:2d:60:f3:d4:99:2e:75:9e: 2a:07:66:45:75:7b:dd:0b:ff:0c:34:fb:7c:69:35: b9:13:68:66:82:b6:1d:f4:65:f8:12:48:e2:97:0d: 58:5d:0d:c1:ed:99:c7:53:9f:2c:f7:8e:f4:86:1e: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:4A:6F:6F:94:94:48:1E:7F:5B:00:E1:BA:71:68:87:88:30:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl X509v3 Authority Key Identifier: keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer sbgp-ipAddrBlock: critical IPv4: 164.152.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:83:1b:d6:8b:20:46:c2:47:3d:56:10:76:e8:10:26:e1:56: f3:68:4b:38:ee:d2:5a:68:1c:56:22:9d:05:93:a0:e0:2f:40: dd:ae:9b:ed:c6:8a:f2:3b:5f:16:98:ac:8c:4f:eb:52:e9:ca: 39:c1:33:f7:32:bf:c1:df:a0:23:db:f9:1e:8e:2a:31:e5:dc: d9:db:23:11:ab:7b:db:de:f7:b3:e3:c7:cd:6a:d2:f8:c0:ed: c0:9d:60:18:dd:71:61:66:f6:be:e1:36:97:a0:e8:4f:4d:25: bf:cf:00:73:b1:40:e5:b4:55:bb:6d:88:3e:d9:ee:b6:a9:3e: 83:43:3c:c0:ad:f1:73:7d:08:8f:6f:d6:2a:a6:c9:1b:45:48: 4b:37:c0:7c:c8:49:4a:77:39:29:f2:68:ae:73:75:28:63:57: c6:b7:30:f1:f9:fa:46:b2:cc:2b:82:c3:93:94:d0:a1:93:18: 6d:3f:c1:58:22:15:22:4c:a9:46:f9:ba:2c:1e:58:10:cb:33: c5:8f:ba:d9:0d:d2:0d:9f:fe:5a:8b:ac:94:10:fb:5f:09:48: a1:91:ea:8c:01:38:a6:0d:df:a0:1d:61:09:4c:08:74:c5:4c: 20:73:32:9b:2b:7c:c0:ca:76:f9:fb:73:18:37:17:f1:5e:5e: ca:5b:f1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsULgEH5JqXH3dleAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUyZDlkZDItYTIwNi00Njk0LWE1NTAtZDY2MzllMzNl OWY2MB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk MzA2MDVjYTctN2Y1OC00YTI4LWJkZGQtM2Q5MDMwZmQyODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj4BBZSoi+mArmAjvvY7NU3EXegN3VOva9xh C+JVsjNXTvmDpdX1+K9VazktQFSw/3qh0XGAph6j/JIcW9dvsVeMpXLvN+WiouwV skQ+byW4U/OzXtHrD3LN8AX0l0SyG77Wyn8sYv+AAR+5bOyFAEhXhwL4nUI+0hCK NhesfzqpLZYgNb/jz32pbhJVTRMs9tXvhtsjGWTGGz8Xmv4EnQbgWHczQ40tEhS6 T3kj9CReBvx3Mzf4i6FhQJxY/F/1TTnKYdXNDwa2LWDz1JkudZ4qB2ZFdXvdC/8M NPt8aTW5E2hmgrYd9GX4Ekjilw1YXQ3B7ZnHU58s9470hh6SVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHFSm9vlJRIHn9bAOG6cWiHiDAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJk OWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYzOWUzM2U5ZjYvNTllNzFlMWEtYWU1MC0z NTY0LTg0OWEtNTRhY2YxMTRjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUyZDlkZDItYTIwNi00Njk0LWE1 NTAtZDY2MzllMzNlOWY2L2Y1MmQ5ZGQyLWEyMDYtNDY5NC1hNTUwLWQ2NjM5ZTMz ZTlmNi5jcmwwHwYDVR0jBBgwFoAUvef1VICmOwv+tubvHg+zGOF337kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJkOWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYz OWUzM2U5ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpJhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+DG9aLIEbCRz1WEHboECbhVvNoSzju0lpoHFYinQWToOAvQN2um+3G ivI7XxaYrIxP61LpyjnBM/cyv8HfoCPb+R6OKjHl3NnbIxGre9ve97Pjx81q0vjA 7cCdYBjdcWFm9r7hNpeg6E9NJb/PAHOxQOW0VbttiD7Z7rapPoNDPMCt8XN9CI9v 1iqmyRtFSEs3wHzISUp3OSnyaK5zdShjV8a3MPH5+kayzCuCw5OU0KGTGG0/wVgi FSJMqUb5uiweWBDLM8WPutkN0g2f/lqLrJQQ+18JSKGR6owBOKYN36AdYQlMCHTF TCBzMpsrfMDKdvn7cxg3F/FeXspb8e4= -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:32 2025 by rpki-client