This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa File: b8ae9718-f55e-3239-a6dd-058166da4e45.roa (raw, json) Hash identifier: jlbbZdnNN7zCNAlA/6qo2wuyfNEDtroIcDWPR5uXEV4= Subject key identifier: B7:17:4A:BC:D3:FC:95:FC:3E:5C:7B:D4:FC:CF:E6:7A:47:13:C6:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE82087D74ACA355B8D903A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 52.122.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:87:d7:4a:ca:35:5b:8d:90:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=d9b967ca-5ef0-4f95-a62d-21f909ff579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:38:a1:ec:2d:cc:67:1b:5d:a1:7b:00:a8:8d: 87:82:c6:ea:45:7a:04:83:b6:2f:8f:72:7d:ce:d9: 2e:76:31:b5:1a:3a:92:19:3d:08:cd:b3:39:da:0c: 03:a1:9b:5d:95:ea:d2:50:b4:50:ec:89:cf:bd:34: 31:cd:69:5b:f9:d2:e6:59:92:9d:15:85:99:ce:be: f5:c2:9e:4a:ee:47:32:02:d4:fb:47:ce:5f:ab:2d: d1:df:46:bd:69:7d:cb:6d:4a:3d:b4:4f:55:19:e3: 6a:8c:76:fc:08:81:67:b7:b8:8c:f6:54:94:4a:44: ba:60:23:60:40:8c:cb:15:f7:60:03:5e:ba:bd:51: d6:1e:71:3e:5c:76:d5:e3:f0:dd:d0:4a:83:7d:ad: df:cc:cc:2a:3d:8a:81:20:41:0f:05:78:62:fc:94: 6a:9a:e5:95:41:45:6a:08:0f:12:4a:32:d9:33:9b: df:b7:ef:6c:63:22:6b:04:1f:85:88:d4:e4:3c:09: dd:10:1a:31:5f:dd:98:4c:8a:a9:87:6c:a8:e5:d2: a5:8d:52:f1:6f:ec:d6:3b:ff:3b:97:40:dc:77:e7: 70:fe:53:d7:25:03:b6:43:db:c5:ae:04:83:a6:37: 22:2f:a8:93:0e:c6:8f:5d:22:a2:5c:fe:bc:9a:40: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:17:4A:BC:D3:FC:95:FC:3E:5C:7B:D4:FC:CF:E6:7A:47:13:C6:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:72:19:59:4a:7c:1e:92:4c:b4:a6:11:a2:9c:dd:33:8c:b9: 5e:c2:b1:00:81:2f:87:5d:db:90:6a:9e:60:1e:eb:9c:58:e9: ea:df:90:6f:8b:7f:e3:7f:2e:65:08:bc:fc:76:e1:1e:73:cb: 9c:33:8a:8f:68:5c:21:7e:cc:ff:7b:65:bf:21:c1:20:78:9c: 82:86:d1:01:cc:9a:73:02:77:fb:09:e5:20:9d:b4:b1:43:10: ca:ce:79:fb:3c:2f:ea:98:6d:a8:6d:09:26:58:ad:c3:97:0e: 16:f0:38:06:5b:26:63:e0:5a:cb:2c:bb:83:c8:8c:6e:b3:94: 59:53:93:4f:27:7a:b1:51:86:a7:a6:4c:e7:aa:35:e7:91:d8: d0:84:00:97:c1:85:91:97:72:a1:08:60:a1:84:37:42:ac:53: e1:23:f2:7f:5b:b2:57:a3:99:99:25:1f:4e:41:b8:9f:fe:0c: f3:5f:ad:10:5b:a1:34:b4:bc:e2:2e:12:a4:2e:1c:fb:8e:56: c3:c1:0f:a9:71:68:29:5c:90:fe:dd:27:37:a9:88:39:64:50: f3:a8:f7:dd:27:54:49:d6:55:ea:9c:a1:fb:b0:47:bc:6b:a6: 93:55:3d:92:6f:20:78:be:a5:db:75:92:f0:14:38:e2:dc:12: 29:d0:22:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIIfXSso1W42QOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk ZDliOTY3Y2EtNWVmMC00Zjk1LWE2MmQtMjFmOTA5ZmY1NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Dih7C3MZxtdoXsAqI2HgsbqRXoEg7Yvj3J9 ztkudjG1GjqSGT0IzbM52gwDoZtdlerSULRQ7InPvTQxzWlb+dLmWZKdFYWZzr71 wp5K7kcyAtT7R85fqy3R30a9aX3LbUo9tE9VGeNqjHb8CIFnt7iM9lSUSkS6YCNg QIzLFfdgA166vVHWHnE+XHbV4/Dd0EqDfa3fzMwqPYqBIEEPBXhi/JRqmuWVQUVq CA8SSjLZM5vft+9sYyJrBB+FiNTkPAndEBoxX92YTIqph2yo5dKljVLxb+zWO/87 l0Dcd+dw/lPXJQO2Q9vFrgSDpjciL6iTDsaPXSKiXP68mkCn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcXSrzT/JX8Plx71PzP5npHE8ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhhZTk3MTgtZjU1ZS0z MjM5LWE2ZGQtMDU4MTY2ZGE0ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFyGVlKfB6STLSmEaKc3TOMuV7CsQCBL4dd25BqnmAe65xY6erfkG+L f+N/LmUIvPx24R5zy5wzio9oXCF+zP97Zb8hwSB4nIKG0QHMmnMCd/sJ5SCdtLFD EMrOefs8L+qYbahtCSZYrcOXDhbwOAZbJmPgWsssu4PIjG6zlFlTk08nerFRhqem TOeqNeeR2NCEAJfBhZGXcqEIYKGEN0KsU+Ej8n9bslejmZklH05BuJ/+DPNfrRBb oTS0vOIuEqQuHPuOVsPBD6lxaClckP7dJzepiDlkUPOo990nVEnWVeqcofuwR7xr ppNVPZJvIHi+pdt1kvAUOOLcEinQIoU= -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:10 2025 by rpki-client