This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be5a8c0-303a-3353-8382-8e032027b8ef.roa File: 4be5a8c0-303a-3353-8382-8e032027b8ef.roa (raw, json) Hash identifier: KEGtza1tUpHmyrfq6TKLv0mJVqH5t7RxSoqcj6VCVrc= Subject key identifier: 2D:91:9E:25:2D:AC:B5:6B:EB:5F:CF:DB:2B:A7:12:B1:6C:1F:3D:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BCD9C0F2AC2511A9FA6F06B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be5a8c0-303a-3353-8382-8e032027b8ef.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 33491 IP address blocks: 68.51.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9c:0f:2a:c2:51:1a:9f:a6:f0:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=4376c9cd-9845-4277-ac88-d38ebb3efc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:30:aa:c0:86:f8:16:ff:d9:01:21:9c:0b: 7a:0e:86:a1:47:d3:3f:ae:28:76:d2:5e:cf:ac:c6: 23:a6:2b:07:05:4c:fc:b4:96:2e:d1:d6:c8:5c:3d: cc:5e:82:f8:08:83:f7:df:14:f3:2e:ea:f4:39:3a: 85:c0:4a:61:68:d8:58:9f:fa:ba:82:85:49:d6:13: c0:19:7a:2f:6a:e8:e3:08:5b:42:21:da:f6:f0:ee: 21:13:4a:64:88:51:2e:14:d9:43:51:e4:7a:77:15: 45:51:b6:b3:1b:f8:6f:05:94:60:b2:eb:a2:a6:c0: 64:71:be:51:28:dc:06:fc:45:46:79:ef:73:04:70: c1:3e:d7:55:7d:63:7c:52:5f:c7:ce:0a:1e:04:ca: 28:e6:d3:f7:0d:f4:5c:ba:5a:07:43:60:1c:8a:98: 8c:1f:5c:52:ef:64:06:d5:21:51:3b:c8:85:16:1d: 22:9c:66:e9:7a:69:09:75:da:53:40:f5:34:c5:29: 61:c1:d6:4b:6e:41:45:29:c7:cf:06:f0:17:c3:06: 16:f6:00:79:db:d8:dc:7a:65:f7:34:20:b8:18:d7: 77:3d:1b:62:60:4b:d3:a7:79:21:7e:5c:50:a1:38: 03:83:e1:00:fd:9d:d5:d8:d2:fe:7a:b5:a4:b0:d1: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:91:9E:25:2D:AC:B5:6B:EB:5F:CF:DB:2B:A7:12:B1:6C:1F:3D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be5a8c0-303a-3353-8382-8e032027b8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:25:fe:b6:9f:62:91:6f:43:fc:65:91:8a:9f:02:8c:49:39: 02:3a:2b:ba:3b:3d:ae:c2:5e:2b:8e:57:4b:6f:53:6a:c5:a1: f2:a2:ac:6f:d5:16:33:a2:0c:86:65:08:fc:c7:44:b5:9e:23: 7c:ec:59:d8:f1:e5:f1:0e:d3:a5:80:c4:d4:1e:7c:03:81:cb: 5c:06:75:e2:14:3d:a2:93:47:2d:6c:47:2a:04:ec:97:3d:c9: 7d:49:6d:97:88:30:3f:36:0d:e1:9c:48:da:2d:bc:8b:da:df: 0d:48:4e:a7:d1:99:05:aa:d4:d7:69:44:9e:cb:ce:f5:7b:38: e7:62:fb:79:67:b7:e8:ff:25:4d:d2:81:93:b0:71:44:08:7e: 02:75:e1:17:ba:45:29:d5:30:ab:0f:e1:bd:ae:fd:c3:7b:ed: 50:b5:7b:4f:11:3f:c6:d6:02:d7:56:90:6d:e2:35:92:f3:d6: b2:7c:cf:97:7b:e9:d2:93:5c:c7:f2:75:11:09:69:23:7d:54: 2d:d1:67:b7:84:74:60:ba:f5:ac:e8:07:60:36:12:2b:f7:51: 5e:f7:7e:27:09:4d:27:8a:72:41:7a:1b:3b:3e:5f:fe:e0:01: f2:bd:ff:b8:7a:d8:8c:c7:19:06:f2:9c:4c:92:34:02:26:1a: 52:35:58:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNnA8qwlEan6bwawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDM3NmM5Y2QtOTg0NS00Mjc3LWFjODgtZDM4ZWJiM2VmYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/owqsCG+Bb/2QEhnAt6DoahR9M/rih20l7P rMYjpisHBUz8tJYu0dbIXD3MXoL4CIP33xTzLur0OTqFwEphaNhYn/q6goVJ1hPA GXovaujjCFtCIdr28O4hE0pkiFEuFNlDUeR6dxVFUbazG/hvBZRgsuuipsBkcb5R KNwG/EVGee9zBHDBPtdVfWN8Ul/HzgoeBMoo5tP3DfRculoHQ2AcipiMH1xS72QG 1SFRO8iFFh0inGbpemkJddpTQPU0xSlhwdZLbkFFKcfPBvAXwwYW9gB529jcemX3 NCC4GNd3PRtiYEvTp3khflxQoTgDg+EA/Z3V2NL+erWksNHzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2RniUtrLVr61/P2yunErFsHz1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJlNWE4YzAtMzAzYS0z MzUzLTgzODItOGUwMzIwMjdiOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDM7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsl/rafYpFvQ/xlkYqfAoxJOQI6K7o7Pa7CXiuOV0tvU2rFofKirG/V FjOiDIZlCPzHRLWeI3zsWdjx5fEO06WAxNQefAOBy1wGdeIUPaKTRy1sRyoE7Jc9 yX1JbZeIMD82DeGcSNotvIva3w1ITqfRmQWq1NdpRJ7LzvV7OOdi+3lnt+j/JU3S gZOwcUQIfgJ14Re6RSnVMKsP4b2u/cN77VC1e08RP8bWAtdWkG3iNZLz1rJ8z5d7 6dKTXMfydREJaSN9VC3RZ7eEdGC69azoB2A2Eiv3UV73ficJTSeKckF6Gzs+X/7g AfK9/7h62IzHGQbynEySNAImGlI1WCU= -----END CERTIFICATE-----Generated at Sat Dec 6 03:49:10 2025 by rpki-client