This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: acUdtDdw7xLXA9Wnny2/i4BjmZs/TjIwJu1j9yP8SY8= Subject key identifier: CA:12:3E:72:1D:A4:A8:DF:85:40:0C:20:C3:A6:C0:B0:C4:22:E3:CB Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584BF615E0B56A32EB7515997500 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e0:b5:6a:32:eb:75:15:99:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=bdb7748b-c058-44f6-bf3c-fd041cbd218d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:2b:6d:80:a2:fb:42:17:35:22:24:8e:56: fe:fd:c7:70:9d:f2:d0:4d:52:74:b0:ae:09:61:9c: db:6b:33:d6:17:57:e4:c4:36:81:e4:35:9f:37:f4: c8:32:53:43:c9:fb:16:60:81:be:62:4a:01:e4:dc: 17:21:f7:3a:be:0b:48:a2:2e:d6:76:ab:bf:fd:ea: dc:c2:6b:ba:ad:7e:7a:aa:dd:ab:82:16:6b:dd:77: 0e:ca:36:7e:a9:9c:71:f6:b0:44:ae:65:10:98:be: bb:5f:8c:05:44:54:84:44:92:63:61:d9:f5:02:b3: 3f:44:df:af:5a:61:74:ff:24:75:df:19:7f:22:10: 46:39:68:8a:9f:eb:85:b5:44:80:ee:ff:b4:b4:00: b6:c1:8f:a2:a3:06:70:d6:0d:59:8a:41:a3:c0:64: 24:81:1f:20:57:95:00:9e:3b:81:3c:62:a6:f0:59: 58:f2:34:bb:90:03:d7:ba:e8:39:8a:10:aa:81:8e: 95:ac:71:ce:96:a6:04:82:94:d9:25:69:d2:27:fa: 6e:ba:c5:d4:aa:05:42:2e:41:1d:d7:e5:8e:45:83: 33:de:64:5e:a1:68:cc:ce:4b:6f:0b:15:9d:75:81: 76:9f:a8:ef:bd:9c:55:21:73:2c:19:0a:8b:12:53: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:12:3E:72:1D:A4:A8:DF:85:40:0C:20:C3:A6:C0:B0:C4:22:E3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f6:87:0d:3a:48:d8:db:b5:bb:f6:53:cf:8a:76:24:1f:dc: de:4d:e5:60:67:48:45:14:a3:8c:e4:da:7b:2f:93:2a:80:81: f1:63:fe:f6:8c:73:85:52:7d:2d:d1:cd:b9:07:d6:b6:be:94: 14:06:8e:27:97:de:59:11:4d:82:a0:1c:05:99:ee:1e:b8:11: b2:55:d1:73:39:ce:f7:98:88:96:35:24:e3:99:d4:eb:3d:5f: 51:33:21:d3:68:40:6b:0b:af:2d:59:7d:8d:82:e6:b8:12:0a: 90:09:69:55:5b:28:58:86:e7:98:c4:bd:e9:34:be:72:75:5c: 3f:3f:b0:3d:6e:82:b1:85:a5:62:b6:73:64:ba:da:6e:e0:b4: 52:28:0d:80:8f:e8:c8:57:e1:cd:32:a5:7c:c4:62:60:9f:e9: 72:6c:d7:b7:dc:5e:2e:da:da:3b:59:82:b3:ca:e0:97:fd:61: 3b:04:c2:c6:89:aa:40:34:7b:32:50:84:19:8d:2a:d2:25:16: f2:1a:47:d5:51:6c:ac:3e:e9:48:8f:16:c5:26:31:e7:46:06: 0a:4a:c4:b2:2e:cc:1e:45:83:34:ee:d0:19:8e:bd:64:af:db: 3b:d7:34:50:e0:2a:68:91:7f:cd:71:63:8f:ab:01:34:1e:60: 19:b7:ef:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FeC1ajLrdRWZdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk YmRiNzc0OGItYzA1OC00NGY2LWJmM2MtZmQwNDFjYmQyMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjArbYCi+0IXNSIkjlb+/cdwnfLQTVJ0sK4J YZzbazPWF1fkxDaB5DWfN/TIMlNDyfsWYIG+YkoB5NwXIfc6vgtIoi7Wdqu//erc wmu6rX56qt2rghZr3XcOyjZ+qZxx9rBErmUQmL67X4wFRFSERJJjYdn1ArM/RN+v WmF0/yR13xl/IhBGOWiKn+uFtUSA7v+0tAC2wY+iowZw1g1ZikGjwGQkgR8gV5UA njuBPGKm8FlY8jS7kAPXuug5ihCqgY6VrHHOlqYEgpTZJWnSJ/puusXUqgVCLkEd 1+WORYMz3mReoWjMzktvCxWddYF2n6jvvZxVIXMsGQqLElOUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoSPnIdpKjfhUAMIMOmwLDEIuPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD2hw06SNjbtbv2U8+KdiQf3N5N5WBnSEUUo4zk2nsvkyqAgfFj/vaM c4VSfS3RzbkH1ra+lBQGjieX3lkRTYKgHAWZ7h64EbJV0XM5zveYiJY1JOOZ1Os9 X1EzIdNoQGsLry1ZfY2C5rgSCpAJaVVbKFiG55jEvek0vnJ1XD8/sD1ugrGFpWK2 c2S62m7gtFIoDYCP6MhX4c0ypXzEYmCf6XJs17fcXi7a2jtZgrPK4Jf9YTsEwsaJ qkA0ezJQhBmNKtIlFvIaR9VRbKw+6UiPFsUmMedGBgpKxLIuzB5FgzTu0BmOvWSv 2zvXNFDgKmiRf81xY4+rATQeYBm375k= -----END CERTIFICATE-----Generated at Tue Nov 25 08:16:43 2025 by rpki-client