This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/4c610528-08a6-3276-9f0e-d5fdb8c3db1e.roa File: 4c610528-08a6-3276-9f0e-d5fdb8c3db1e.roa (raw, json) Hash identifier: w6sbcw0TdgAljsRFNDHsUWez7hyQ5h1RUeNw/6FI2cI= Subject key identifier: 91:70:E7:E9:BE:1D:A3:28:C8:BB:6C:13:55:B9:FF:8A:0A:A0:C7:9F Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584BE973FEC526BC1A9708E32E80 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/4c610528-08a6-3276-9f0e-d5fdb8c3db1e.roa Signing time: Wed 19 Nov 2025 13:24:46 +0000 ROA not before: Wed 19 Nov 2025 13:24:46 +0000 ROA not after: Tue 17 Feb 2026 13:24:46 +0000 asID: 395383 IP address blocks: 192.157.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e9:73:fe:c5:26:bc:1a:97:08:e3:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Nov 19 13:24:46 2025 GMT Not After : Feb 17 13:24:46 2026 GMT Subject: CN=e25d6148-2dd3-4c2a-b816-c443a0c2582e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:ab:1b:50:aa:b9:11:cc:cd:d4:8d:ca:5c: 14:e6:59:64:9d:4c:c7:14:d1:4b:68:0e:2e:d2:4c: 10:77:22:b2:d5:d9:e7:68:0e:7a:76:df:fa:f7:9c: 2d:18:18:41:1b:27:f4:ed:ce:6f:8c:fd:cc:01:be: e7:5a:ef:2e:1b:5f:9b:62:d6:77:e1:de:9d:79:ed: d2:62:9b:ff:6d:22:87:d3:80:4a:3f:fa:1b:aa:7c: 60:ff:80:dd:cd:3c:4d:a4:ed:5c:d1:3b:f6:ff:a2: e6:36:5c:a0:2e:7d:28:70:2e:81:e3:1a:f0:cc:5f: 14:7e:91:eb:26:5c:ae:fc:a5:91:80:23:3f:c9:f1: a9:9d:70:89:a3:c4:2c:3e:e1:ff:58:45:f7:6a:83: f1:26:e2:c6:c4:eb:98:b4:e0:0d:cb:6e:61:ad:c3: 2f:4c:d7:11:a2:cd:66:6a:d5:f7:7f:cb:ec:94:99: e1:99:e5:bc:cd:27:e4:9a:97:ad:84:48:31:69:b1: 03:a0:46:61:f0:2b:6d:ea:b2:3f:1d:86:fd:a2:13: a0:32:fb:ca:5e:69:e4:5b:37:72:8d:3c:b5:33:76: 47:6c:47:38:d2:55:3e:a5:26:d7:87:6c:49:9b:f1: 5e:c6:ae:d6:62:d7:2a:91:bb:01:b9:01:61:c1:ff: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:70:E7:E9:BE:1D:A3:28:C8:BB:6C:13:55:B9:FF:8A:0A:A0:C7:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/4c610528-08a6-3276-9f0e-d5fdb8c3db1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ae:42:3b:59:67:2d:1a:d6:0e:7f:9e:e4:fc:b2:4a:7f:18: 75:b8:53:ff:b5:83:68:ba:c7:a7:44:5a:15:81:4e:af:57:dd: 96:10:47:08:af:78:b0:b8:07:26:9f:bc:9c:c5:4e:b1:cf:cd: 81:1f:e1:fb:7f:dc:e1:dd:56:2f:5c:90:07:e3:e2:76:6d:68: 8c:d1:5b:2f:08:ac:61:21:3c:e5:da:e6:93:9d:85:87:7b:90: d4:5f:e1:76:71:f2:30:4d:6d:69:9f:27:45:6f:34:f3:e2:23: e1:7c:44:4a:5b:03:2a:4d:2d:ba:7b:40:ec:e1:5e:95:41:08: 6a:f2:c9:9e:8f:89:72:bd:22:ba:1d:2f:a5:d5:12:75:ab:f1: dd:80:4e:3b:45:77:fd:ee:c5:88:c8:23:12:5a:a1:ef:40:bc: 22:be:a2:88:84:01:af:75:0f:6e:b7:cd:03:f6:12:1a:1f:f4: 1d:d3:c3:b7:3e:f6:79:35:1f:e6:7c:8a:15:fd:83:ac:91:9a: d1:74:52:af:ae:f6:07:36:80:d2:36:21:2a:6a:4d:d6:10:d8: 93:2a:11:58:cc:10:40:2f:98:5f:f2:67:b1:97:31:d4:51:9b: 97:20:36:4e:e5:8d:60:cb:f4:8e:e1:0c:d4:e3:9f:71:34:08: 0a:8f:a7:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvpc/7FJrwalwjjLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MTExOTEzMjQ0NloXDTI2MDIxNzEzMjQ0NlowLzEtMCsGA1UEAxMk ZTI1ZDYxNDgtMmRkMy00YzJhLWI4MTYtYzQ0M2EwYzI1ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraWrG1CquRHMzdSNylwU5llknUzHFNFLaA4u 0kwQdyKy1dnnaA56dt/695wtGBhBGyf07c5vjP3MAb7nWu8uG1+bYtZ34d6dee3S Ypv/bSKH04BKP/obqnxg/4DdzTxNpO1c0Tv2/6LmNlygLn0ocC6B4xrwzF8UfpHr Jlyu/KWRgCM/yfGpnXCJo8QsPuH/WEX3aoPxJuLGxOuYtOANy25hrcMvTNcRos1m atX3f8vslJnhmeW8zSfkmpethEgxabEDoEZh8Ctt6rI/HYb9ohOgMvvKXmnkWzdy jTy1M3ZHbEc40lU+pSbXh2xJm/Fexq7WYtcqkbsBuQFhwf+9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFw5+m+HaMoyLtsE1W5/4oKoMefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvNGM2MTA1MjgtMDhhNi0z Mjc2LTlmMGUtZDVmZGI4YzNkYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSuQjtZZy0a1g5/nuT8skp/GHW4U/+1g2i6x6dEWhWBTq9X3ZYQRwiv eLC4ByafvJzFTrHPzYEf4ft/3OHdVi9ckAfj4nZtaIzRWy8IrGEhPOXa5pOdhYd7 kNRf4XZx8jBNbWmfJ0VvNPPiI+F8REpbAypNLbp7QOzhXpVBCGryyZ6PiXK9Irod L6XVEnWr8d2ATjtFd/3uxYjIIxJaoe9AvCK+ooiEAa91D263zQP2Ehof9B3Tw7c+ 9nk1H+Z8ihX9g6yRmtF0Uq+u9gc2gNI2ISpqTdYQ2JMqEVjMEEAvmF/yZ7GXMdRR m5cgNk7ljWDL9I7hDNTjn3E0CAqPpzc= -----END CERTIFICATE-----Generated at Tue Nov 25 11:32:47 2025 by rpki-client