This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa
File: caa2d549-4016-330e-806a-a66db5f6ef79.roa (raw, json)
Hash identifier: PungfiObxTFdneGObrnskPnBRnq25NdtuHajomckFpU=
Subject key identifier: 18:CC:54:43:CD:14:94:30:13:3F:96:C2:EE:72:0E:BA:13:89:9C:2A
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584C136627D0A30AFDD89F5A9600
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa
Signing time: Thu 04 Dec 2025 14:00:39 +0000
ROA not before: Thu 04 Dec 2025 14:00:39 +0000
ROA not after: Wed 04 Mar 2026 14:00:39 +0000
asID: 9304
IP address blocks: 152.232.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:13:66:27:d0:a3:0a:fd:d8:9f:5a:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Dec 4 14:00:39 2025 GMT
Not After : Mar 4 14:00:39 2026 GMT
Subject: CN=3f4afc4d-5bec-4fef-b62d-b2809bc7c2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:4d:f9:de:e4:f8:59:f8:c0:6b:ee:71:ad:
59:12:9e:3e:7f:03:e2:a6:08:52:17:58:1f:7e:90:
e1:7c:ad:d8:b7:e5:90:e7:d8:fa:7b:cc:87:91:17:
76:42:87:df:c1:95:a0:c2:fd:e9:fd:5e:49:2a:64:
f6:07:45:98:d9:94:70:f6:cc:4a:85:88:b3:b7:1a:
7b:32:c5:d5:e2:10:d8:97:0c:0f:c0:a7:a7:eb:0d:
1e:74:d6:28:c5:08:62:2a:13:ba:33:5a:d2:e4:e0:
01:2d:a8:60:b9:f4:b4:ad:0e:2d:52:d1:21:8f:6b:
d1:0a:a1:37:6a:d3:51:d0:cf:f9:6c:74:a8:db:ed:
47:1f:1c:f1:0e:79:da:e2:7f:75:2a:e8:4f:7e:d4:
44:e9:f9:0a:b2:63:60:5b:ba:a1:a5:87:99:fe:08:
f2:d8:2d:5f:a2:55:04:e9:56:6a:a5:60:c9:87:53:
bf:7d:10:da:5f:01:d0:49:c3:37:a4:4b:9a:ae:aa:
bb:be:99:76:f9:0b:d3:69:77:15:e0:73:f1:65:ae:
ca:46:b8:55:90:22:e9:34:42:7e:0e:cd:9d:fd:77:
c3:c5:a3:b0:4d:64:e0:7a:f5:11:3f:7e:3f:42:87:
8f:d1:7a:36:90:6d:0f:98:ee:9b:af:59:9b:af:1c:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:54:43:CD:14:94:30:13:3F:96:C2:EE:72:0E:BA:13:89:9C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4a:bc:7c:84:33:79:63:68:5a:12:0a:31:ee:e2:95:48:bc:
e3:25:3d:ba:37:8d:95:ac:ba:23:d5:30:60:ca:da:fd:a0:f8:
cc:96:44:db:ab:c6:d5:45:d6:f2:72:6e:d5:b9:de:10:a1:94:
0a:c7:42:6c:fe:c6:61:0c:54:22:38:35:6d:21:75:b5:d1:a8:
04:7d:43:ce:b2:cf:fc:4b:b1:6a:01:61:cd:79:c9:0b:5e:9c:
89:f6:f9:72:79:ca:3b:52:c6:d9:f2:de:31:6e:d7:c9:b0:f3:
13:7c:7b:3b:72:c0:d0:3d:d9:c2:ee:0b:27:46:3b:c6:05:8a:
cb:48:0a:d5:e3:01:a6:a5:5e:89:73:b7:c5:65:59:e5:05:5b:
1a:a0:0a:3e:ec:8d:b1:7e:54:a0:50:c4:c8:20:73:f1:57:7a:
c7:20:ac:b0:1f:62:0c:e7:55:b4:3c:a9:61:6f:83:70:b9:a1:
f2:eb:28:48:fc:7b:ef:86:77:13:7a:5f:73:ba:3a:05:2d:b5:
58:73:2a:7f:6e:65:35:07:c1:99:08:5d:a5:ec:9d:e9:00:0a:
63:59:b0:9b:28:18:fc:6d:bf:58:9e:10:16:7f:ff:d9:b3:e8:
7c:30:a6:38:8f:ad:ab:f8:a3:54:1d:5c:c1:a9:b9:23:dc:d3:
42:8b:1b:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwTZifQowr92J9algAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk
M2Y0YWZjNGQtNWJlYy00ZmVmLWI2MmQtYjI4MDliYzdjMmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwpN+d7k+Fn4wGvuca1ZEp4+fwPipghSF1gf
fpDhfK3Yt+WQ59j6e8yHkRd2QoffwZWgwv3p/V5JKmT2B0WY2ZRw9sxKhYiztxp7
MsXV4hDYlwwPwKen6w0edNYoxQhiKhO6M1rS5OABLahgufS0rQ4tUtEhj2vRCqE3
atNR0M/5bHSo2+1HHxzxDnna4n91KuhPftRE6fkKsmNgW7qhpYeZ/gjy2C1folUE
6VZqpWDJh1O/fRDaXwHQScM3pEuarqq7vpl2+QvTaXcV4HPxZa7KRrhVkCLpNEJ+
Ds2d/XfDxaOwTWTgevURP34/QoeP0Xo2kG0PmO6br1mbrxzvSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjMVEPNFJQwEz+Wwu5yDroTiZwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvY2FhMmQ1NDktNDAxNi0z
MzBlLTgwNmEtYTY2ZGI1ZjZlZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRKvHyEM3ljaFoSCjHu4pVIvOMlPbo3jZWsuiPVMGDK2v2g+MyWRNur
xtVF1vJybtW53hChlArHQmz+xmEMVCI4NW0hdbXRqAR9Q86yz/xLsWoBYc15yQte
nIn2+XJ5yjtSxtny3jFu18mw8xN8eztywNA92cLuCydGO8YFistICtXjAaalXolz
t8VlWeUFWxqgCj7sjbF+VKBQxMggc/FXescgrLAfYgznVbQ8qWFvg3C5ofLrKEj8
e++GdxN6X3O6OgUttVhzKn9uZTUHwZkIXaXsnekACmNZsJsoGPxtv1ieEBZ//9mz
6HwwpjiPrav4o1QdXMGpuSPc00KLG1Y=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:54:46 2025 by rpki-client