This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa File: 7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa (raw, json) Hash identifier: rvoZDKiWg5S44laMDtIj/E3iE6zZc7cPSKpsBWrFjbc= Subject key identifier: 43:55:71:0D:A7:C9:71:84:FB:75:E0:21:AB:8E:F3:76:2B:A6:CD:16 Certificate issuer: /CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a Certificate serial: 010D0C9F4328584BFA7B6A35530538D3D99BA100 Authority key identifier: 76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa Signing time: Tue 25 Nov 2025 15:48:27 +0000 ROA not before: Tue 25 Nov 2025 15:48:27 +0000 ROA not after: Mon 23 Feb 2026 15:48:27 +0000 asID: 14618 IP address blocks: 192.152.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:7b:6a:35:53:05:38:d3:d9:9b:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a Validity Not Before: Nov 25 15:48:27 2025 GMT Not After : Feb 23 15:48:27 2026 GMT Subject: CN=632924e8-f7d0-48e2-9c22-990fe870e0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:5d:30:2f:f2:01:7f:98:c7:17:b3:83:fb: 6a:94:d0:93:94:71:db:cd:f0:c6:9f:11:2b:96:f5: 14:3c:63:a6:c9:4b:fb:c7:ba:d3:43:26:3a:f7:19: 9d:48:91:b5:0c:f9:37:62:48:0d:5b:fe:be:4d:fd: 2d:29:71:7b:9f:95:ff:d7:ef:3f:f9:47:bb:7e:2c: 90:a1:e3:15:64:50:24:4e:c1:c6:69:34:d9:d7:8c: bf:0e:28:8b:c6:82:fd:7d:44:00:d2:8d:92:1c:67: 7d:c4:9d:4f:ca:51:aa:61:65:61:27:23:57:bc:09: 5a:20:84:9d:e6:b6:e5:68:6e:5f:5d:8b:e5:3a:cc: 10:0a:55:aa:2f:4b:91:3d:64:c1:91:f7:21:b4:a9: 06:50:dc:f0:1f:85:27:50:0c:1e:48:a4:1d:b2:a1: 2f:8d:38:b2:aa:50:ec:7c:4c:69:35:c8:ac:48:59: 3a:3f:87:a6:9f:55:69:1e:de:e6:53:41:7f:64:6d: 48:ab:5e:bc:0f:53:04:e5:6e:45:2d:16:be:57:f7: 4d:fa:f3:6b:a3:45:3f:3e:6c:06:ae:c2:9b:4c:e8: 8e:14:88:35:19:fb:b3:5f:fb:10:90:6a:80:95:0b: 13:c2:28:21:7b:53:50:0c:04:79:1f:86:35:2d:f7: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:55:71:0D:A7:C9:71:84:FB:75:E0:21:AB:8E:F3:76:2B:A6:CD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl X509v3 Authority Key Identifier: keyid:76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer sbgp-ipAddrBlock: critical IPv4: 192.152.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b5:bb:9e:31:04:c3:84:83:a4:d2:77:7c:c1:e7:d9:57:e5: e1:e3:0e:56:9b:12:f1:2d:20:33:db:16:8d:b5:a9:95:b7:a6: 7a:92:8a:ac:0b:93:1b:90:6c:1b:6a:15:72:37:14:60:70:16: 46:e3:73:06:c0:c8:ad:8b:b2:fd:c7:69:ba:61:85:8c:e7:b4: b1:7f:2d:e1:3b:b7:b4:c7:77:79:a5:4c:39:07:dd:c5:32:f7: 84:3c:69:07:7f:f4:c9:ca:cf:04:e4:c6:c9:5a:fa:00:94:44: 58:11:5e:21:a6:25:92:5b:47:87:f0:f5:2a:bc:84:ef:45:6f: f2:28:4c:fb:f2:25:01:cc:c6:9a:1b:89:35:d4:02:b4:6b:3b: 65:e4:2b:bd:06:95:ab:5d:89:94:5f:f7:d7:ae:8f:35:e0:86: 6a:55:e4:20:ad:93:2d:96:67:37:e6:f4:e6:b2:fb:bd:b8:fa: 9d:4e:ab:85:18:4f:bd:dd:ba:de:d8:19:54:21:f6:d6:f9:5b: e3:2c:df:93:6a:d2:61:07:c2:65:77:47:4f:e8:49:bf:66:6f: d6:3d:af:59:60:c7:a5:fb:75:1d:83:5f:e9:c1:e1:84:b6:82: 83:3a:48:61:28:c6:b5:9d:88:0b:af:2c:f7:5b:ea:25:0f:57: 0b:b7:3e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6e2o1UwU409mboQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVmY2ZlOGUtOTY5Yi00OWRmLWE1YjktMDFlM2FkZmUy YjdhMB4XDTI1MTEyNTE1NDgyN1oXDTI2MDIyMzE1NDgyN1owLzEtMCsGA1UEAxMk NjMyOTI0ZTgtZjdkMC00OGUyLTljMjItOTkwZmU4NzBlMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqRdMC/yAX+Yxxezg/tqlNCTlHHbzfDGnxEr lvUUPGOmyUv7x7rTQyY69xmdSJG1DPk3YkgNW/6+Tf0tKXF7n5X/1+8/+Ue7fiyQ oeMVZFAkTsHGaTTZ14y/DiiLxoL9fUQA0o2SHGd9xJ1PylGqYWVhJyNXvAlaIISd 5rblaG5fXYvlOswQClWqL0uRPWTBkfchtKkGUNzwH4UnUAweSKQdsqEvjTiyqlDs fExpNcisSFk6P4emn1VpHt7mU0F/ZG1Iq168D1ME5W5FLRa+V/dN+vNro0U/PmwG rsKbTOiOFIg1GfuzX/sQkGqAlQsTwighe1NQDAR5H4Y1LffNUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENVcQ2nyXGE+3XgIauO83Yrps0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NWZj ZmU4ZS05NjliLTQ5ZGYtYTViOS0wMWUzYWRmZTJiN2EvN2Q3MTc3NDEtZDJkOC0z OGVkLTllZWYtOWRkNTU4N2VmYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTVmY2ZlOGUtOTY5Yi00OWRmLWE1 YjktMDFlM2FkZmUyYjdhLzk1ZmNmZThlLTk2OWItNDlkZi1hNWI5LTAxZTNhZGZl MmI3YS5jcmwwHwYDVR0jBBgwFoAUdlLCba9/5l3LOhsGcFq9nQAcQlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NWZjZmU4ZS05NjliLTQ5ZGYtYTViOS0wMWUz YWRmZTJiN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC21u54xBMOEg6TSd3zB59lX5eHjDlabEvEtIDPbFo21qZW3pnqSiqwL kxuQbBtqFXI3FGBwFkbjcwbAyK2Lsv3HabphhYzntLF/LeE7t7THd3mlTDkH3cUy 94Q8aQd/9MnKzwTkxsla+gCURFgRXiGmJZJbR4fw9Sq8hO9Fb/IoTPvyJQHMxpob iTXUArRrO2XkK70GlatdiZRf99eujzXghmpV5CCtky2WZzfm9Oay+724+p1Oq4UY T73dut7YGVQh9tb5W+Ms35Nq0mEHwmV3R0/oSb9mb9Y9r1lgx6X7dR2DX+nB4YS2 goM6SGEoxrWdiAuvLPdb6iUPVwu3Ppg= -----END CERTIFICATE-----Generated at Fri Nov 28 07:17:26 2025 by rpki-client