This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: 3+LwZP8iyGH3CpCPkMhiMqgwObnEfRyaVVVEiZ0kpl4= Subject key identifier: 18:C6:C0:4B:1C:28:72:1A:D1:C2:CA:51:92:FE:CC:6F:03:7A:04:B7 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584BD33062EBE373C803A1732100 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:62:eb:e3:73:c8:03:a1:73:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=aec74d59-cffa-45e2-a779-6ed692557064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:8a:08:20:c7:80:65:9e:d2:96:01:6e:12: 88:8c:6f:6e:af:94:20:9e:25:97:39:e1:46:d3:1b: f4:cf:d7:67:93:81:d4:c6:f7:1e:bb:05:24:a4:93: 7e:f1:d1:96:77:3b:56:98:fd:00:de:e2:dd:86:59: 85:cf:4d:73:9c:d9:21:06:58:ec:2a:bd:22:d1:c2: 7b:b4:8f:71:a0:87:84:82:db:51:2b:7a:d0:2a:0a: fc:8a:5c:9c:f8:7b:b2:62:b7:f3:68:55:21:18:96: e7:6c:d7:96:81:cb:8e:c0:ce:0d:73:6b:15:ad:3a: da:c0:7b:88:7e:f6:28:95:63:1d:a6:0c:44:d0:0f: 5e:4b:83:07:16:14:12:d6:3b:a6:ac:39:95:c8:96: b5:30:ce:95:7c:e2:1a:ec:18:57:30:e6:32:54:c2: 5a:87:6c:0e:b7:23:0d:f2:cd:6a:3a:48:fe:5e:04: b2:5d:c0:dd:be:f8:7c:9a:5b:8d:72:e6:83:d3:f6: cf:f2:b0:68:c8:b8:87:9d:36:8d:0e:3f:a2:ee:12: a1:e0:99:ce:2d:5e:32:45:04:38:c6:02:f1:fc:bc: 74:02:58:9b:0d:cb:e9:49:50:ee:2e:ee:21:70:5f: 59:e4:c2:f5:21:52:e6:8e:54:91:42:8b:74:6a:8c: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:C0:4B:1C:28:72:1A:D1:C2:CA:51:92:FE:CC:6F:03:7A:04:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:75:42:03:cd:c5:c6:e2:c2:5a:87:3c:d0:af:0d:db:e9:52: b1:15:d3:c5:42:c7:9a:c8:82:ca:1c:23:81:d4:5a:91:1f:23: 68:4b:ef:ec:57:19:a5:e9:cd:50:48:70:70:7a:70:24:4f:17: af:14:e5:13:40:36:25:55:ae:de:4e:7d:cd:62:cf:c3:a5:fe: 35:fa:58:87:8c:fa:c9:54:0e:87:cd:8e:6d:36:bd:0d:fe:98: 07:d2:a6:6f:61:12:15:51:a2:27:aa:f4:0b:be:02:a8:2d:e6: 08:b6:e4:84:4c:bc:fc:d3:cf:36:11:b2:74:a9:26:e2:f6:68: 51:55:04:ac:57:8c:a3:73:e3:74:88:91:d3:ae:f7:cd:43:89: 41:b1:91:97:1b:aa:c7:ef:86:10:69:05:73:4b:5a:52:09:e5: 96:5c:f2:1b:01:c9:e1:40:60:8f:7c:2e:b6:6f:b5:f4:98:12: f4:81:f8:06:a1:72:83:15:d4:f4:bf:33:7f:f2:b0:53:20:96: 8e:40:af:06:bf:7c:0f:97:4e:3c:07:2a:7f:c3:29:e8:a3:5e: 95:87:ac:1e:bb:2d:15:cd:d1:8e:0e:9f:b9:4e:d8:e8:0c:49: b9:2f:55:eb:41:f5:85:46:d1:ca:86:7b:8f:e1:45:95:4b:e7: cc:05:96:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGLr43PIA6FzIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk YWVjNzRkNTktY2ZmYS00NWUyLWE3NzktNmVkNjkyNTU3MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYCKCCDHgGWe0pYBbhKIjG9ur5QgniWXOeFG 0xv0z9dnk4HUxvceuwUkpJN+8dGWdztWmP0A3uLdhlmFz01znNkhBljsKr0i0cJ7 tI9xoIeEgttRK3rQKgr8ilyc+HuyYrfzaFUhGJbnbNeWgcuOwM4Nc2sVrTrawHuI fvYolWMdpgxE0A9eS4MHFhQS1jumrDmVyJa1MM6VfOIa7BhXMOYyVMJah2wOtyMN 8s1qOkj+XgSyXcDdvvh8mluNcuaD0/bP8rBoyLiHnTaNDj+i7hKh4JnOLV4yRQQ4 xgLx/Lx0AlibDcvpSVDuLu4hcF9Z5ML1IVLmjlSRQot0aowKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjGwEscKHIa0cLKUZL+zG8DegS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt1QgPNxcbiwlqHPNCvDdvpUrEV08VCx5rIgsocI4HUWpEfI2hL7+xX GaXpzVBIcHB6cCRPF68U5RNANiVVrt5Ofc1iz8Ol/jX6WIeM+slUDofNjm02vQ3+ mAfSpm9hEhVRoieq9Au+Aqgt5gi25IRMvPzTzzYRsnSpJuL2aFFVBKxXjKNz43SI kdOu981DiUGxkZcbqsfvhhBpBXNLWlIJ5ZZc8hsByeFAYI98LrZvtfSYEvSB+Aah coMV1PS/M3/ysFMglo5Arwa/fA+XTjwHKn/DKeijXpWHrB67LRXN0Y4On7lO2OgM SbkvVetB9YVG0cqGe4/hRZVL58wFlrA= -----END CERTIFICATE-----Generated at Tue Nov 25 11:34:20 2025 by rpki-client