This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa File: 0ff3813d-a425-3f1f-a715-aacfa0108453.roa (raw, json) Hash identifier: Ug1oLBIUVQ1HyqyBIQf3G2kRNPFzfAfrexpSxK51suE= Subject key identifier: 16:47:6D:DB:58:7B:71:D9:14:C4:97:75:B4:F8:2A:F5:CA:6F:F7:FD Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584BF615E01F4D4A82DF49D46880 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 4540 IP address blocks: 170.89.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e0:1f:4d:4a:82:df:49:d4:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=235c0d7e-d925-4a08-aceb-855f542fb0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:2d:62:23:42:6a:d4:58:f3:ce:90:b0:13: 83:d8:c9:18:57:0a:3b:7e:3f:79:21:4d:5e:9f:25: 90:90:2e:7b:c6:58:17:f0:0f:68:4c:4f:3b:33:34: 3c:d2:7b:ad:6b:9f:2a:98:ce:62:4a:ce:b6:7a:e6: b5:e2:45:28:06:52:99:37:7f:8b:e9:3f:11:86:9d: 22:e6:ee:97:fb:ba:c0:b5:5e:29:05:88:f2:38:c9: e9:ee:f9:9e:2d:31:c0:0d:73:93:12:70:34:87:5d: ad:a1:4b:cb:9f:e2:a5:a4:95:eb:89:c6:88:67:4c: 5d:62:43:92:0d:55:83:4f:dd:08:5c:9a:fa:e4:7c: 55:5f:63:78:72:ac:56:9d:97:37:97:fb:af:08:80: cc:44:78:73:f5:b0:a5:bd:15:bc:26:d0:0b:d6:b8: f5:f3:46:d2:7e:bf:d3:04:b2:2b:84:b2:b1:13:42: 93:48:ea:5f:6c:28:8a:92:d3:b2:98:c0:e3:76:dc: 1b:2f:31:21:75:cb:f5:60:cb:67:7d:4d:04:9d:66: 90:4a:6c:c8:a3:b1:a5:88:52:f7:f3:fa:d0:51:12: 32:a4:36:05:7a:0e:ce:9d:73:ef:71:03:98:12:1f: 6b:f6:b9:42:9a:3f:d1:78:fc:7a:59:aa:08:d2:eb: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:47:6D:DB:58:7B:71:D9:14:C4:97:75:B4:F8:2A:F5:CA:6F:F7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:39:fd:27:7e:51:fe:e3:11:4e:18:4c:8c:e6:d4:2d:48:89: d1:c1:fb:e8:1d:34:64:27:a1:19:08:8e:88:81:06:f7:c3:2f: a7:3c:de:30:05:7c:bf:d4:92:bc:da:6f:a0:7c:22:1f:89:b6: a4:ba:5d:2a:03:56:af:29:dc:b2:16:10:0c:9e:e9:91:cc:4c: 4d:14:aa:9a:91:a9:6a:66:70:98:73:96:e8:34:8d:cf:fe:d8: c7:b0:b8:07:e7:0b:8c:fa:4d:1a:42:68:dc:a2:00:cb:b4:a8: 1e:9f:45:55:21:6e:0d:1a:7b:03:e0:f8:9b:d9:de:f6:cd:84: 43:c6:51:4f:47:98:5d:cf:d5:9a:da:a1:d3:4b:75:97:1a:84: bd:7c:9a:86:9b:06:df:c8:71:ea:51:77:60:8f:7c:69:46:9b: f0:df:65:22:90:aa:60:01:1e:b9:a3:7d:12:90:f8:01:39:fd: ec:37:3e:27:48:fa:73:b4:db:f0:fe:f1:73:4b:2a:0a:ca:1c: 43:67:2e:d4:e1:65:6e:b5:1c:77:fe:e1:55:a3:53:de:da:42: bd:f8:00:1b:6a:2f:d7:69:e1:c1:a4:25:a4:f1:6b:3a:9d:1d: df:7e:5e:6c:d4:5b:dd:80:ee:a5:b0:b0:3d:d7:4b:9d:51:b3: fb:4f:c5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FeAfTUqC30nUaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk MjM1YzBkN2UtZDkyNS00YTA4LWFjZWItODU1ZjU0MmZiMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4otYiNCatRY886QsBOD2MkYVwo7fj95IU1e nyWQkC57xlgX8A9oTE87MzQ80nuta58qmM5iSs62eua14kUoBlKZN3+L6T8Rhp0i 5u6X+7rAtV4pBYjyOMnp7vmeLTHADXOTEnA0h12toUvLn+KlpJXricaIZ0xdYkOS DVWDT90IXJr65HxVX2N4cqxWnZc3l/uvCIDMRHhz9bClvRW8JtAL1rj180bSfr/T BLIrhLKxE0KTSOpfbCiKktOymMDjdtwbLzEhdcv1YMtnfU0EnWaQSmzIo7GliFL3 8/rQURIypDYFeg7OnXPvcQOYEh9r9rlCmj/RePx6WaoI0uu8qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZHbdtYe3HZFMSXdbT4KvXKb/f9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGZmMzgxM2QtYTQyNS0z ZjFmLWE3MTUtYWFjZmEwMTA4NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc5/Sd+Uf7jEU4YTIzm1C1IidHB++gdNGQnoRkIjoiBBvfDL6c83jAF fL/Ukrzab6B8Ih+JtqS6XSoDVq8p3LIWEAye6ZHMTE0UqpqRqWpmcJhzlug0jc/+ 2MewuAfnC4z6TRpCaNyiAMu0qB6fRVUhbg0aewPg+JvZ3vbNhEPGUU9HmF3P1Zra odNLdZcahL18moabBt/IcepRd2CPfGlGm/DfZSKQqmABHrmjfRKQ+AE5/ew3PidI +nO02/D+8XNLKgrKHENnLtThZW61HHf+4VWjU97aQr34ABtqL9dp4cGkJaTxazqd Hd9+XmzUW92A7qWwsD3XS51Rs/tPxeo= -----END CERTIFICATE-----Generated at Tue Nov 25 08:15:34 2025 by rpki-client