This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa File: dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa (raw, json) Hash identifier: DL78Fp6g309jhnlRMaXdB8WGsSWfRlgOJcY3p0oxAYY= Subject key identifier: 77:9B:E4:7E:63:5F:AF:2D:99:48:B9:C1:7D:06:4D:9F:4C:2E:E4:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E90F6556BD1ADB283E3F948 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 22909 IP address blocks: 68.52.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:90:f6:55:6b:d1:ad:b2:83:e3:f9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=51bfc4dd-efea-4960-9ab5-cb427a2cfa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:33:6e:34:19:d8:05:2e:13:06:24:5a:5e: 35:d7:74:cf:a9:4c:7f:fd:a2:e7:2d:d5:c9:b4:35: 5b:38:a2:55:b5:f8:04:ec:b1:93:84:a2:03:ec:05: 5b:4a:4a:d1:80:a3:24:9e:c6:f3:83:9b:1a:39:da: 40:ac:ce:72:cb:76:f8:e7:c0:3d:2e:f7:c8:23:a3: 6a:62:b6:38:fb:e7:e1:4c:66:b9:f3:7f:31:ed:e6: ec:be:4e:33:d5:c6:43:07:9f:a8:ba:9e:ed:06:df: fe:e8:0a:c1:a7:61:ab:7e:f5:e1:27:d0:78:8a:55: 11:b3:f7:cb:f4:51:80:92:6d:23:35:6a:3c:d5:b5: 8c:1c:db:2d:63:53:8c:6c:35:57:ee:1d:03:6a:52: 4a:6f:a1:c3:34:e7:33:f7:a8:96:38:e4:ed:2b:76: cc:d6:db:72:43:f4:76:00:31:0a:d4:2b:23:38:82: a6:c2:3a:25:5b:0d:51:cb:ba:f2:56:ba:07:2b:7d: 76:17:81:e6:c8:0a:ba:08:f9:39:8d:dc:e2:a2:47: e1:21:a3:7f:bb:40:d6:be:78:bf:06:ce:c4:72:0b: 58:cb:88:94:67:09:b8:f1:c0:47:79:57:d7:0d:1c: 2e:c3:90:38:55:3a:2b:de:f6:a5:5d:ab:23:c2:39: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9B:E4:7E:63:5F:AF:2D:99:48:B9:C1:7D:06:4D:9F:4C:2E:E4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:24:f3:13:e6:e4:70:e5:1b:dc:0a:b7:ad:87:29:12:9a:ab: c9:e9:14:fe:94:63:eb:30:4b:5c:fa:9f:4d:c2:a5:8f:3b:28: f8:2b:20:a6:3c:6d:cb:de:89:f0:d2:99:ab:33:75:e3:dd:16: d4:24:9e:22:42:2c:44:58:70:1d:a6:48:03:ce:b4:e0:e8:39: fc:6c:6d:34:dc:5c:25:a7:c6:92:0e:2b:3f:4b:37:8c:82:ec: c6:fd:4d:1f:d8:f9:11:13:28:74:07:39:1b:03:80:7d:62:06: 91:ba:a0:65:a3:64:8e:b6:29:51:77:0f:f9:66:27:79:b8:b1: d2:ea:00:70:bb:16:10:fb:9e:3b:2a:4c:14:6f:7b:85:49:1e: 6c:da:bb:64:9c:cc:17:14:8e:c8:b4:1f:03:9c:5e:b6:09:b7: c3:f9:7e:f3:ac:f2:c4:53:58:60:be:e6:ba:5e:dd:73:b7:ef: c7:de:67:de:76:2a:be:3e:63:98:69:57:fe:32:2e:78:ab:b3: a6:c2:70:e6:b9:ce:f0:6f:7f:65:bf:4e:72:72:9e:07:32:24: 1f:c1:ba:66:05:01:e6:e1:05:e4:09:6a:0b:00:f9:23:64:8e: 25:5b:56:fb:e1:6c:de:70:c1:1e:2c:bf:d9:6d:c0:92:65:c1: d9:b9:0f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekPZVa9GtsoPj+UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NTFiZmM0ZGQtZWZlYS00OTYwLTlhYjUtY2I0MjdhMmNmYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaQzbjQZ2AUuEwYkWl4113TPqUx//aLnLdXJ tDVbOKJVtfgE7LGThKID7AVbSkrRgKMknsbzg5saOdpArM5yy3b458A9LvfII6Nq YrY4++fhTGa5838x7ebsvk4z1cZDB5+oup7tBt/+6ArBp2GrfvXhJ9B4ilURs/fL 9FGAkm0jNWo81bWMHNstY1OMbDVX7h0DalJKb6HDNOcz96iWOOTtK3bM1ttyQ/R2 ADEK1CsjOIKmwjolWw1Ry7ryVroHK312F4HmyAq6CPk5jdziokfhIaN/u0DWvni/ Bs7EcgtYy4iUZwm48cBHeVfXDRwuw5A4VTor3valXasjwjktDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeb5H5jX68tmUi5wX0GTZ9MLuQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZmY2VhNmUtY2ZkYi0z ZmVhLWIxYmUtM2QxZGI4YjY5NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDRZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4k8xPm5HDlG9wKt62HKRKaq8npFP6UY+swS1z6n03CpY87KPgrIKY8 bcveifDSmaszdePdFtQkniJCLERYcB2mSAPOtODoOfxsbTTcXCWnxpIOKz9LN4yC 7Mb9TR/Y+RETKHQHORsDgH1iBpG6oGWjZI62KVF3D/lmJ3m4sdLqAHC7FhD7njsq TBRve4VJHmzau2SczBcUjsi0HwOcXrYJt8P5fvOs8sRTWGC+5rpe3XO378feZ952 Kr4+Y5hpV/4yLnirs6bCcOa5zvBvf2W/TnJyngcyJB/BumYFAebhBeQJagsA+SNk jiVbVvvhbN5wwR4sv9ltwJJlwdm5D08= -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:43 2025 by rpki-client