This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa File: aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa (raw, json) Hash identifier: FKjQZmZtsAsvwA0H9BEByCZfYRNOFPOVFMCL0oND/Sc= Subject key identifier: D7:46:C7:D7:4E:7F:2D:F9:D0:8C:D1:10:CF:5F:94:6E:93:E6:12:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E92796BE5F9EAE90C7D1400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 22909 IP address blocks: 68.52.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:92:79:6b:e5:f9:ea:e9:0c:7d:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=8e4ccf12-d50d-46f7-94f0-095e10b83270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:10:62:50:83:ac:ce:71:42:10:47:6c:14:04: 94:48:1a:b4:38:6d:db:4c:c2:5c:9b:ec:f7:32:c2: b2:68:39:a2:88:31:87:cc:1c:cb:10:3a:1e:34:48: 6e:41:d6:6f:52:f5:31:fa:7b:ac:5e:e3:55:a5:96: a7:e3:23:dd:2a:d8:db:63:25:3a:a6:30:c5:e0:90: a6:e5:77:54:2f:79:ba:4c:5e:ae:67:cd:15:7f:fa: 8a:b3:6f:b1:8d:2c:b5:31:c8:aa:28:67:a0:9c:20: 06:84:4a:43:8d:45:d7:e3:20:20:d6:80:41:f7:dc: ac:14:66:06:7d:b0:e0:03:48:e5:9d:6c:a8:dd:d5: 65:7b:70:7f:e8:49:0f:c0:4d:ce:cc:73:78:41:8d: 7a:a1:c1:26:5f:81:b9:f2:d7:27:5d:f4:bf:54:89: 86:49:f2:f3:5c:89:78:ef:b4:a4:68:92:2b:da:a7: 44:55:36:0c:da:68:8d:5a:89:eb:ed:f5:21:77:9e: 3d:6b:2f:ff:60:34:62:ab:d5:e2:26:ae:1a:c3:91: ae:bc:84:c8:12:9d:b0:60:03:7c:bc:bc:2e:01:a3: 67:88:f9:d2:c2:04:2b:60:a3:cf:2a:59:ec:de:f6: a5:8e:3f:9b:1f:e5:57:60:b6:6a:3e:3b:74:a7:7b: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:46:C7:D7:4E:7F:2D:F9:D0:8C:D1:10:CF:5F:94:6E:93:E6:12:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:76:b2:97:eb:9b:a8:50:1f:90:6e:bd:1d:4a:b9:8b:65:db: 21:24:4f:ff:62:ae:58:76:69:b8:a3:5e:d6:e5:da:a8:f3:79: 97:1a:2f:e0:69:01:38:89:1b:85:54:d0:66:74:ea:4e:39:b3: 05:5d:96:1e:82:7f:0b:78:e1:b8:1d:e7:09:ec:0a:32:3c:a6: fc:98:07:2e:c8:4e:fe:a8:91:c5:b1:76:1e:bb:6e:8d:94:18: 90:25:a6:ce:50:9d:e7:b4:61:64:f6:7a:18:a3:8e:c6:85:27: 42:b2:ab:33:20:90:7a:5b:17:41:6f:71:9c:fb:2b:d1:08:b3: eb:fa:b7:fc:6e:bf:aa:a5:b7:fb:be:cb:32:77:d7:f6:a0:fe: 2a:f5:f4:3d:2d:c6:b8:c4:3e:d5:85:0a:af:99:ef:ab:31:e6: 5d:0c:da:c0:83:57:54:2c:4e:0c:5c:27:03:fa:47:38:e5:b2: 92:57:dc:03:f2:e5:40:d2:dc:10:c6:df:dd:b0:65:45:6b:4b: c4:bb:54:b1:38:8f:45:18:29:ed:e6:1e:95:f6:37:d1:b7:a7: e2:5b:ce:a2:87:28:53:fb:53:5f:96:f0:aa:8e:fa:d2:a1:03: bd:8e:3f:16:94:cb:83:42:8f:f5:0a:6f:07:7e:93:66:86:31: 44:f2:f7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEweknlr5fnq6Qx9FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk OGU0Y2NmMTItZDUwZC00NmY3LTk0ZjAtMDk1ZTEwYjgzMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRBiUIOsznFCEEdsFASUSBq0OG3bTMJcm+z3 MsKyaDmiiDGHzBzLEDoeNEhuQdZvUvUx+nusXuNVpZan4yPdKtjbYyU6pjDF4JCm 5XdUL3m6TF6uZ80Vf/qKs2+xjSy1MciqKGegnCAGhEpDjUXX4yAg1oBB99ysFGYG fbDgA0jlnWyo3dVle3B/6EkPwE3OzHN4QY16ocEmX4G58tcnXfS/VImGSfLzXIl4 77SkaJIr2qdEVTYM2miNWonr7fUhd549ay//YDRiq9XiJq4aw5GuvITIEp2wYAN8 vLwuAaNniPnSwgQrYKPPKlns3valjj+bH+VXYLZqPjt0p3sUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdGx9dOfy350IzREM9flG6T5hJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEwOWM5ZDAtOWE0Ni0z YmE4LTllZGUtZjY2MTQ4YjBmMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMx2spfrm6hQH5BuvR1KuYtl2yEkT/9irlh2abijXtbl2qjzeZcaL+Bp ATiJG4VU0GZ06k45swVdlh6Cfwt44bgd5wnsCjI8pvyYBy7ITv6okcWxdh67bo2U GJAlps5Qnee0YWT2ehijjsaFJ0KyqzMgkHpbF0FvcZz7K9EIs+v6t/xuv6qlt/u+ yzJ31/ag/ir19D0txrjEPtWFCq+Z76sx5l0M2sCDV1QsTgxcJwP6RzjlspJX3APy 5UDS3BDG392wZUVrS8S7VLE4j0UYKe3mHpX2N9G3p+JbzqKHKFP7U1+W8KqO+tKh A72OPxaUy4NCj/UKbwd+k2aGMUTy97M= -----END CERTIFICATE-----Generated at Tue Jan 20 18:57:56 2026 by rpki-client