This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa
File: b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa (raw, json)
Hash identifier: gx04QpAgGhqWLel3Qsvn+2Q1K3AXm/jo6bZ3Az51Kps=
Subject key identifier: 08:AF:D5:CA:B1:04:B1:5C:4F:64:5A:07:1D:AF:17:27:FD:8C:F0:ED
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584BC2703F936AFE5392BEB8E400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 3848
IP address blocks: 209.139.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:3f:93:6a:fe:53:92:be:b8:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=72d5e5af-6bb5-4ee7-8ea4-4b732f974815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:c5:3f:0f:0f:4f:2c:77:dd:15:4b:de:06:
c4:6b:cf:97:d9:e7:bb:3b:2f:3a:7b:b1:a6:f2:ee:
83:65:8d:e9:11:2d:cd:ad:3d:1d:e2:dc:24:1d:ca:
01:1f:4d:07:0b:a6:99:47:38:c2:88:13:97:86:e6:
e3:66:c3:19:b4:87:be:99:68:58:fe:f7:18:65:42:
d8:31:3a:d2:00:25:d5:f2:e1:27:b3:55:5d:6d:e9:
a8:c7:2b:dd:00:61:8e:73:2f:2d:dc:a5:17:87:8c:
ef:21:32:ed:69:d1:5a:0f:91:5e:35:a2:12:ce:ba:
4b:54:0e:4e:69:9e:60:5c:97:c3:95:52:31:19:c0:
80:c2:0f:08:c8:ee:4e:02:7a:06:9d:80:45:30:f4:
ac:1e:57:2c:77:95:43:22:ea:13:64:d2:8f:d7:45:
bf:df:41:06:86:5b:1f:68:a3:74:a1:b6:e5:5e:d2:
db:0d:e2:54:6d:21:ad:68:71:2d:50:c0:3d:d9:05:
cf:4a:62:46:0e:24:57:24:de:e4:5e:c0:23:68:8d:
e9:5f:fc:98:70:6e:13:ad:59:c7:28:c4:61:11:f7:
0a:42:5a:05:09:5e:20:7f:82:b1:7c:bc:7f:05:05:
11:96:02:72:fc:53:1b:b2:61:c7:90:79:76:2f:0a:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:D5:CA:B1:04:B1:5C:4F:64:5A:07:1D:AF:17:27:FD:8C:F0:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f9:c2:2c:7f:3c:d4:66:9e:11:ff:46:a7:45:03:48:aa:a0:
c0:25:9f:02:ae:28:d1:01:20:78:a6:5e:07:89:ec:22:d3:aa:
37:09:04:79:43:5f:aa:c0:48:9c:e2:04:00:31:03:9b:d0:56:
6a:cc:61:5d:ff:67:30:66:ba:ac:ff:20:88:4b:90:7b:11:fa:
53:a2:72:85:d4:85:85:a9:6f:62:59:48:0b:9d:70:28:f5:e0:
b4:22:67:87:09:a3:96:17:0a:3b:41:65:3c:41:0c:f8:a0:b6:
4a:48:70:91:2c:63:46:49:e3:71:07:04:a3:33:59:46:34:a4:
ca:be:53:7d:e2:45:3f:e5:5e:a3:84:25:5a:41:51:c2:ca:c0:
13:fd:ba:26:c7:a9:ab:3b:43:77:73:82:0d:53:e9:0b:ef:9a:
21:38:be:89:ba:f0:12:8c:1e:16:c3:21:ce:b3:29:81:dc:0e:
82:be:7b:dc:38:a0:1a:e8:d1:a3:fc:0f:51:ca:8b:5b:e4:48:
12:60:ca:9e:23:dd:56:4c:5d:7b:31:59:13:17:0a:67:24:13:
b6:55:41:ce:ca:54:74:61:b5:d5:ba:2a:42:6c:23:09:ec:3d:
3f:da:8d:de:06:b1:b5:a1:6e:6a:6b:69:bf:4b:74:40:da:89:
48:1b:2c:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcD+Tav5Tkr645AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk
NzJkNWU1YWYtNmJiNS00ZWU3LThlYTQtNGI3MzJmOTc0ODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVTFPw8PTyx33RVL3gbEa8+X2ee7Oy86e7Gm
8u6DZY3pES3NrT0d4twkHcoBH00HC6aZRzjCiBOXhubjZsMZtIe+mWhY/vcYZULY
MTrSACXV8uEns1VdbemoxyvdAGGOcy8t3KUXh4zvITLtadFaD5FeNaISzrpLVA5O
aZ5gXJfDlVIxGcCAwg8IyO5OAnoGnYBFMPSsHlcsd5VDIuoTZNKP10W/30EGhlsf
aKN0obblXtLbDeJUbSGtaHEtUMA92QXPSmJGDiRXJN7kXsAjaI3pX/yYcG4TrVnH
KMRhEfcKQloFCV4gf4KxfLx/BQURlgJy/FMbsmHHkHl2LwpEZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAiv1cqxBLFcT2RaBx2vFyf9jPDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjg4NTIwZjMtNzg3OC0z
N2NlLWE4YTgtZjdmOTJmMjVjMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YvTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC35wix/PNRmnhH/RqdFA0iqoMAlnwKuKNEBIHimXgeJ7CLTqjcJBHlD
X6rASJziBAAxA5vQVmrMYV3/ZzBmuqz/IIhLkHsR+lOicoXUhYWpb2JZSAudcCj1
4LQiZ4cJo5YXCjtBZTxBDPigtkpIcJEsY0ZJ43EHBKMzWUY0pMq+U33iRT/lXqOE
JVpBUcLKwBP9uibHqas7Q3dzgg1T6QvvmiE4vom68BKMHhbDIc6zKYHcDoK+e9w4
oBro0aP8D1HKi1vkSBJgyp4j3VZMXXsxWRMXCmckE7ZVQc7KVHRhtdW6KkJsIwns
PT/ajd4GsbWhbmprab9LdEDaiUgbLHE=
-----END CERTIFICATE-----
Generated at Tue Nov 25 11:38:55 2025 by rpki-client