This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa File: 889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa (raw, json) Hash identifier: H8w4xyrklVnxXgTiiUxqa0V5tjDWbIzQll4kXGzcjrs= Subject key identifier: 15:BB:C5:C3:49:A5:17:F5:5C:6A:69:C6:75:E4:8A:C8:C4:55:EC:0F Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584BE6BB25E5E6ED9CEB7123F200 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 6939 IP address blocks: 173.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:25:e5:e6:ed:9c:eb:71:23:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=22b0ee81-a572-4706-b414-c09035753f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:81:97:b6:ff:e2:a2:23:54:de:77:72:a4: c5:80:e4:2f:61:22:8b:97:93:40:af:55:3c:b2:f3: 18:a3:88:8a:20:1b:c9:85:1a:29:41:f0:08:17:aa: 23:9a:13:e8:c3:0c:28:d8:ad:b3:e0:74:e9:60:f2: 95:7f:47:0b:ba:22:76:78:95:05:3c:50:48:e9:4d: 6b:8c:13:2b:d9:c8:e9:80:f1:a7:93:fb:ff:97:8b: 4c:4c:b8:1c:2c:1e:a0:3c:bf:37:c8:d3:ba:9a:45: 4a:9d:7b:75:6d:57:7d:ff:11:eb:3c:ab:99:5f:cc: 88:42:42:88:3b:6e:64:b0:e4:76:d8:f1:ae:af:b7: be:5a:eb:0c:14:b9:01:20:4a:b4:6f:e7:8e:1d:77: 2c:c5:df:f8:e1:59:6f:71:ef:1b:01:27:39:33:a6: 49:98:ab:38:e3:42:ab:48:07:42:49:0a:f7:f3:db: b1:04:61:b2:c3:9a:d0:6a:e6:be:bb:ba:94:8f:10: df:9e:d2:46:98:80:a6:b0:d9:df:c6:ef:1c:19:04: e3:ec:9e:bc:6b:8a:d3:b9:b1:35:ac:65:a2:7a:ba: 0d:f8:4c:7b:4c:7e:59:8b:a2:3e:2f:92:a6:f9:e0: 51:e7:f0:27:1d:1c:30:f8:a4:54:01:0e:df:67:f0: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BB:C5:C3:49:A5:17:F5:5C:6A:69:C6:75:E4:8A:C8:C4:55:EC:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/889a48a3-3e77-3d4d-8894-10daed4b1fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9f:7b:db:5b:b6:5c:40:59:3d:31:d3:28:3c:a7:6c:e3:15: cd:fc:e8:ef:7a:33:a3:f3:9f:3c:69:b3:50:40:4d:cc:94:f4: 5d:d0:48:97:df:da:17:ea:4e:18:0a:b0:43:7e:29:ff:ec:70: 77:22:cc:2c:11:e9:db:46:95:03:5b:36:52:f7:79:dd:29:ee: 66:52:0d:29:f6:56:b7:3f:b2:21:cf:8b:1d:73:2d:63:eb:61: fa:68:3c:b5:e7:92:ca:24:cc:29:c9:0b:67:30:51:10:a3:91: c5:54:36:19:5b:18:c9:9f:27:95:af:da:ce:09:fd:02:78:e1: cb:4d:d8:02:22:c8:37:b7:cc:3b:ce:d2:a3:6f:c4:23:09:04: f6:a2:14:e4:46:34:1d:b1:13:1d:75:b0:ab:84:06:4d:9a:ea: ba:5a:ee:ae:0e:89:98:c0:bc:ee:93:c1:e8:e2:01:ff:08:29: e6:d0:75:f6:e3:ed:84:90:11:ae:57:f6:31:78:e4:d9:b7:7c: eb:2e:ed:ea:bf:24:4d:78:3a:9b:98:7a:6c:65:dc:06:18:ca: 96:e3:e8:e2:37:3a:77:b0:07:d0:ae:b6:c8:c9:38:70:de:7d: c5:6c:34:09:aa:2c:d1:c1:c9:45:66:7d:3f:6c:72:95:c8:7f: 7a:f8:17:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvmuyXl5u2c63Ej8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk MjJiMGVlODEtYTU3Mi00NzA2LWI0MTQtYzA5MDM1NzUzZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrWBl7b/4qIjVN53cqTFgOQvYSKLl5NAr1U8 svMYo4iKIBvJhRopQfAIF6ojmhPowwwo2K2z4HTpYPKVf0cLuiJ2eJUFPFBI6U1r jBMr2cjpgPGnk/v/l4tMTLgcLB6gPL83yNO6mkVKnXt1bVd9/xHrPKuZX8yIQkKI O25ksOR22PGur7e+WusMFLkBIEq0b+eOHXcsxd/44Vlvce8bASc5M6ZJmKs440Kr SAdCSQr389uxBGGyw5rQaua+u7qUjxDfntJGmICmsNnfxu8cGQTj7J68a4rTubE1 rGWieroN+Ex7TH5Zi6I+L5Km+eBR5/AnHRww+KRUAQ7fZ/DrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW7xcNJpRf1XGppxnXkisjEVewPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODg5YTQ4YTMtM2U3Ny0z ZDRkLTg4OTQtMTBkYWVkNGIxZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASfe9tbtlxAWT0x0yg8p2zjFc386O96M6Pznzxps1BATcyU9F3QSJff 2hfqThgKsEN+Kf/scHcizCwR6dtGlQNbNlL3ed0p7mZSDSn2Vrc/siHPix1zLWPr YfpoPLXnksokzCnJC2cwURCjkcVUNhlbGMmfJ5Wv2s4J/QJ44ctN2AIiyDe3zDvO 0qNvxCMJBPaiFORGNB2xEx11sKuEBk2a6rpa7q4OiZjAvO6TwejiAf8IKebQdfbj 7YSQEa5X9jF45Nm3fOsu7eq/JE14OpuYemxl3AYYypbj6OI3OnewB9CutsjJOHDe fcVsNAmqLNHByUVmfT9scpXIf3r4F+k= -----END CERTIFICATE-----Generated at Mon Nov 24 00:11:19 2025 by rpki-client