This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: LsaazMHvkX0YOAiLCjV/wUoB0s82V60et10F4eqm6Dg= Subject key identifier: B3:70:9A:85:FD:32:C6:5A:DF:73:82:C9:F9:59:01:B4:A4:73:CE:1C Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584BF615E08A9CE9ED2A01014700 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e0:8a:9c:e9:ed:2a:01:01:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=fb07f920-927f-4e9f-a3b0-1ae0120bbb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:0a:db:d0:6c:76:bc:23:68:a2:f2:f7:90: e4:ae:ea:8c:9b:b6:78:fc:2b:c0:d3:86:01:1c:15: da:63:06:52:49:bb:60:bd:5e:bb:ef:9f:6c:c0:3c: bf:01:d2:4c:1b:f3:88:bd:13:4b:74:bb:31:59:25: ee:2d:02:5e:b6:8c:e4:78:88:e0:bb:77:51:98:f6: 8b:c1:f4:90:e7:64:fe:d0:99:55:79:f9:4a:7a:1d: 0b:64:45:2c:af:05:b1:6f:6d:5c:87:86:d3:ed:3a: 7a:1f:3a:d9:d8:b3:b3:8c:ac:21:a3:86:3e:f5:36: 1a:42:c9:32:d6:89:f5:ac:90:59:83:1b:75:9d:f5: 32:bb:d3:dd:70:dc:47:16:eb:03:12:5b:2a:db:8e: 23:2b:92:de:83:1e:5f:2e:a3:52:f4:cb:c9:dd:a7: 97:b5:d4:7a:c5:7f:81:40:af:eb:2c:2d:88:5f:79: 6f:b4:39:78:d1:e4:44:91:00:aa:fc:b4:44:ce:06: 4c:5a:37:db:27:5b:87:fd:a4:b0:02:cd:7f:73:26: 5b:d8:b2:cd:f8:9d:5b:74:59:5e:5b:73:66:80:6e: c2:39:b2:8d:d5:6b:a5:25:a5:4b:2f:78:65:20:52: a8:9f:72:a8:b8:3e:c7:c8:58:19:cf:65:b1:8d:6e: 25:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:9A:85:FD:32:C6:5A:DF:73:82:C9:F9:59:01:B4:A4:73:CE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:15:40:8f:ea:77:51:06:0b:db:a5:48:11:a8:a0:63:48:d6: b8:f8:01:f6:6c:05:9f:f7:4d:3d:2a:21:76:20:ef:74:4d:58: 52:e7:c6:a2:a0:94:ba:f7:07:0c:81:e9:ed:69:8f:12:b5:23: 46:ba:e2:96:ee:aa:55:20:8d:b9:09:8b:d2:6c:e4:b6:8e:00: 99:b5:59:85:94:4c:f8:2d:e4:98:45:7d:c4:79:fa:8b:6e:d2: 57:6f:e4:9a:20:bf:b5:d2:38:ab:86:9a:20:77:d2:5a:cb:c8: 9b:53:0d:82:08:8f:f9:13:db:ff:ce:37:da:a7:36:09:5d:4c: f8:f1:71:53:a7:81:b1:ff:12:fc:a4:b9:a5:83:3c:cc:92:a5: 20:f8:76:e4:c3:71:2f:c7:a6:aa:6f:91:61:da:4a:7a:2c:b5: 65:92:bd:c4:18:72:81:a0:c4:3f:3c:d6:79:2b:5a:e9:cb:19: 90:22:44:1d:4a:49:d9:4c:76:5c:8c:0c:bd:52:07:70:b9:ad: 36:34:76:de:ed:2f:21:49:59:44:34:64:d6:23:5b:14:20:92: b5:86:2f:40:67:11:96:7e:63:f8:79:b3:48:4a:75:6f:66:4f: 81:8b:e7:c9:32:8d:c1:da:fd:34:92:94:29:83:3d:2b:9d:5c: 5d:e2:03:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FeCKnOntKgEBRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk ZmIwN2Y5MjAtOTI3Zi00ZTlmLWEzYjAtMWFlMDEyMGJiYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7UK29BsdrwjaKLy95DkruqMm7Z4/CvA04YB HBXaYwZSSbtgvV67759swDy/AdJMG/OIvRNLdLsxWSXuLQJetozkeIjgu3dRmPaL wfSQ52T+0JlVeflKeh0LZEUsrwWxb21ch4bT7Tp6HzrZ2LOzjKwho4Y+9TYaQsky 1on1rJBZgxt1nfUyu9PdcNxHFusDElsq244jK5Legx5fLqNS9MvJ3aeXtdR6xX+B QK/rLC2IX3lvtDl40eREkQCq/LREzgZMWjfbJ1uH/aSwAs1/cyZb2LLN+J1bdFle W3NmgG7CObKN1WulJaVLL3hlIFKon3KouD7HyFgZz2WxjW4lHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNwmoX9MsZa33OCyflZAbSkc84cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkVQI/qd1EGC9ulSBGooGNI1rj4AfZsBZ/3TT0qIXYg73RNWFLnxqKg lLr3BwyB6e1pjxK1I0a64pbuqlUgjbkJi9Js5LaOAJm1WYWUTPgt5JhFfcR5+otu 0ldv5Jogv7XSOKuGmiB30lrLyJtTDYIIj/kT2//ON9qnNgldTPjxcVOngbH/Evyk uaWDPMySpSD4duTDcS/HpqpvkWHaSnostWWSvcQYcoGgxD881nkrWunLGZAiRB1K SdlMdlyMDL1SB3C5rTY0dt7tLyFJWUQ0ZNYjWxQgkrWGL0BnEZZ+Y/h5s0hKdW9m T4GL58kyjcHa/TSSlCmDPSudXF3iA+w= -----END CERTIFICATE-----Generated at Tue Nov 25 08:18:28 2025 by rpki-client