This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa File: 6638f874-6d79-393c-8793-4fb63bc1f4dc.roa (raw, json) Hash identifier: i7uYAXlf0q7ONDjwfUZSQpxo2EpyCJXBKj1g3HDIuyg= Subject key identifier: 42:2F:64:6A:8C:3E:0F:34:1B:80:89:04:9C:5B:A2:92:E5:7A:F1:5B Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584BE985CF9BC0728977E2CEA640 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa Signing time: Wed 19 Nov 2025 14:00:38 +0000 ROA not before: Wed 19 Nov 2025 14:00:38 +0000 ROA not after: Tue 17 Feb 2026 14:00:38 +0000 asID: 20 IP address blocks: 192.5.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e9:85:cf:9b:c0:72:89:77:e2:ce:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Nov 19 14:00:38 2025 GMT Not After : Feb 17 14:00:38 2026 GMT Subject: CN=6ab68fac-f175-46b0-b97b-827442196171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:f3:12:37:ae:06:ba:e6:9c:b5:c4:6b:88: 78:12:b2:52:f9:63:d5:15:6a:d9:a6:86:01:07:0e: 19:b9:2f:45:d4:27:4f:89:82:19:77:e2:1f:f3:63: 7a:0c:e3:2d:08:c4:73:26:91:c8:38:dd:cd:e8:d2: e9:ad:5a:da:7b:fb:ff:68:55:a0:e8:0d:c4:98:64: 99:a4:6a:48:4d:d6:ac:03:42:66:6e:31:19:89:71: e0:ba:ea:41:ad:8f:6d:b7:c4:8d:f3:50:be:b1:22: 7b:38:e7:a8:23:8d:bf:16:96:bd:ff:c0:72:5f:b0: 26:9e:9a:98:d1:6c:49:21:86:e3:5f:1e:a9:66:d1: dd:8e:71:9d:95:2b:68:a9:94:0c:96:56:fa:c5:98: cf:f2:ff:a1:bd:aa:53:52:03:78:32:d3:ad:44:d7: 51:9b:d2:34:49:35:84:5f:70:fd:95:0c:59:42:c7: b6:bb:f8:59:61:d0:a5:d5:d2:2b:93:c8:27:23:f4: 6c:82:b7:3f:c9:d0:35:cf:f0:f2:4d:48:0b:cd:29: 3b:f1:12:c3:e1:e7:b7:15:7b:80:ce:c8:04:10:4f: a4:d1:10:63:47:a7:c8:44:77:47:e7:8a:70:be:04: 05:73:77:42:88:9c:8e:59:46:1e:6d:4a:14:9f:d2: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:64:6A:8C:3E:0F:34:1B:80:89:04:9C:5B:A2:92:E5:7A:F1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 192.5.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ed:1a:eb:f8:56:86:3c:55:db:f6:4c:de:63:ed:2a:7f:8c: 6c:3d:b8:0f:e4:8d:b9:8d:4a:83:3c:db:8b:7a:e7:59:6c:74: bb:a8:65:e2:3e:72:88:27:2e:06:04:04:d5:27:0a:0c:6b:42: 2d:a9:85:b7:8d:a2:91:c6:11:eb:32:80:83:19:4e:f2:fc:49: 57:6b:bc:6b:e4:3f:57:33:90:11:fa:d0:5e:88:05:2e:c5:6f: fb:a3:34:c7:bb:c8:d4:8a:80:0d:2e:b8:ba:8e:0d:62:41:44: 81:b7:be:c1:79:03:6f:3b:f8:f1:c4:fd:80:18:7e:9f:2b:f7: 97:6a:12:f9:7d:f7:97:0c:a8:db:68:3c:7a:8b:d4:4e:75:e9: 78:b0:9d:68:79:95:21:b9:1f:56:ad:bd:d3:1b:87:da:85:69: 42:af:e1:8e:87:ee:93:18:4d:26:69:f0:72:16:30:a9:ba:7a: 18:7e:8f:5d:a8:e4:5a:a1:fc:8c:cc:07:23:39:25:dd:e6:37: 0c:ac:c2:45:ea:b1:17:2d:1d:f9:2c:a0:2e:86:fa:c8:40:f9: 77:80:5e:99:37:b5:8b:d8:98:f3:44:5e:a7:29:0d:1a:9a:b0: 88:1f:c8:67:5c:f7:67:87:5d:cd:65:b0:11:d0:5c:42:fb:68: b5:c9:4d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvphc+bwHKJd+LOpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI1MTExOTE0MDAzOFoXDTI2MDIxNzE0MDAzOFowLzEtMCsGA1UEAxMk NmFiNjhmYWMtZjE3NS00NmIwLWI5N2ItODI3NDQyMTk2MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2LzEjeuBrrmnLXEa4h4ErJS+WPVFWrZpoYB Bw4ZuS9F1CdPiYIZd+If82N6DOMtCMRzJpHION3N6NLprVrae/v/aFWg6A3EmGSZ pGpITdasA0JmbjEZiXHguupBrY9tt8SN81C+sSJ7OOeoI42/Fpa9/8ByX7AmnpqY 0WxJIYbjXx6pZtHdjnGdlStoqZQMllb6xZjP8v+hvapTUgN4MtOtRNdRm9I0STWE X3D9lQxZQse2u/hZYdCl1dIrk8gnI/Rsgrc/ydA1z/DyTUgLzSk78RLD4ee3FXuA zsgEEE+k0RBjR6fIRHdH54pwvgQFc3dCiJyOWUYebUoUn9K8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIvZGqMPg80G4CJBJxbopLlevFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvNjYzOGY4NzQtNmQ3OS0z OTNjLTg3OTMtNGZiNjNiYzFmNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPtGuv4VoY8Vdv2TN5j7Sp/jGw9uA/kjbmNSoM824t651lsdLuoZeI+ cognLgYEBNUnCgxrQi2phbeNopHGEesygIMZTvL8SVdrvGvkP1czkBH60F6IBS7F b/ujNMe7yNSKgA0uuLqODWJBRIG3vsF5A287+PHE/YAYfp8r95dqEvl995cMqNto PHqL1E516XiwnWh5lSG5H1atvdMbh9qFaUKv4Y6H7pMYTSZp8HIWMKm6ehh+j12o 5Fqh/IzMByM5Jd3mNwyswkXqsRctHfksoC6G+shA+XeAXpk3tYvYmPNEXqcpDRqa sIgfyGdc92eHXc1lsBHQXEL7aLXJTQs= -----END CERTIFICATE-----Generated at Tue Nov 25 12:39:20 2025 by rpki-client