This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json) Hash identifier: RQuHflvKlDBUI6hfiHZ3tBELwrKAt4kusHCAunjSH0U= Subject key identifier: 31:82:03:37:14:B9:2C:C5:84:28:5A:7C:C7:96:B1:D1:D0:7E:6F:81 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584BF615E03470FEAB5E8B761380 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 4540 IP address blocks: 170.89.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e0:34:70:fe:ab:5e:8b:76:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=a252635c-1adf-4ed0-94c3-fde11e7c1da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:64:1a:ee:c7:ac:25:02:ca:81:be:41:84: 26:0b:cf:57:c8:fd:19:ab:42:28:af:6e:20:2b:54: 89:4d:c2:15:e8:57:ea:87:55:f3:b2:91:a6:d3:c3: b6:92:ad:9e:59:e8:1b:7e:cb:7a:f0:a0:f2:2f:54: df:5c:da:4b:72:07:6a:72:ab:3e:b6:a0:49:8d:fd: 3d:9d:d3:40:75:d0:e2:9a:3a:7e:9e:00:e6:42:b1: 61:7d:4e:da:2e:74:63:e5:de:81:49:a2:4e:fb:be: bb:2d:df:2a:0c:ce:3f:62:bb:a6:72:94:15:89:3f: d8:e0:c0:fb:7a:83:83:4f:7f:a3:d4:49:36:bc:e8: 5c:ec:53:85:60:0b:39:34:fb:34:63:dd:36:09:ae: 0f:c0:28:d4:d7:a2:05:e0:9f:b7:ad:45:9b:a4:ac: d7:35:de:ae:a6:be:1a:b1:89:e7:26:f3:c5:72:12: cb:6f:2c:2c:ae:08:a3:5d:05:e7:88:13:d1:a4:af: 78:5d:73:d5:2f:da:22:c8:60:37:81:02:f2:84:58: 75:e9:36:4f:a1:b3:c4:23:4e:20:60:c3:42:cc:18: 45:60:ab:d0:1e:e9:66:d8:f4:0c:c7:08:6d:b3:43: 91:d0:5b:60:cb:6e:10:80:03:9f:2f:b1:da:7e:4b: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:03:37:14:B9:2C:C5:84:28:5A:7C:C7:96:B1:D1:D0:7E:6F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:92:4d:a6:90:46:d2:11:cf:bf:54:7c:82:0a:b8:86:60:01: ac:82:23:07:61:ca:b9:83:a7:32:78:76:a5:1a:18:15:c3:00: b9:f0:f1:a2:98:d1:64:4d:7f:f5:72:4f:8a:ee:cf:e4:53:21: 70:d6:0b:f4:ed:49:8a:f3:27:e6:cc:88:ba:f6:1b:b8:26:ca: bd:65:96:94:36:fd:41:f7:42:39:5e:68:a7:14:5f:3d:3a:90: 5c:95:aa:09:87:bb:d2:11:40:ed:53:db:96:1c:35:e5:19:f1: af:73:f4:b6:9d:b6:f9:c0:e0:4d:27:b2:02:a3:06:b6:64:eb: fc:1f:b7:6f:94:40:42:f2:f8:03:03:28:ce:fa:05:e7:58:9e: 05:7c:81:b8:ec:eb:2b:1e:f4:4a:2c:dd:e2:fb:d6:44:c8:bd: 50:ae:2e:74:08:f3:79:fe:44:2f:61:10:40:df:8f:85:99:42: 82:28:61:45:24:39:4a:72:7d:6c:e0:c6:59:66:13:5a:18:67: d6:44:e2:62:64:dd:16:27:f1:3e:f0:e3:be:eb:9d:aa:bc:ee: 33:78:80:47:72:9f:28:d8:ac:13:a5:72:60:69:cc:aa:b3:cf: b1:fe:6a:ef:ac:37:73:45:f0:e6:93:ef:7f:4f:4c:5e:4c:21: 1a:0c:d3:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FeA0cP6rXot2E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk YTI1MjYzNWMtMWFkZi00ZWQwLTk0YzMtZmRlMTFlN2MxZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirdkGu7HrCUCyoG+QYQmC89XyP0Zq0Ior24g K1SJTcIV6Ffqh1XzspGm08O2kq2eWegbfst68KDyL1TfXNpLcgdqcqs+tqBJjf09 ndNAddDimjp+ngDmQrFhfU7aLnRj5d6BSaJO+767Ld8qDM4/YrumcpQViT/Y4MD7 eoODT3+j1Ek2vOhc7FOFYAs5NPs0Y902Ca4PwCjU16IF4J+3rUWbpKzXNd6upr4a sYnnJvPFchLLbywsrgijXQXniBPRpK94XXPVL9oiyGA3gQLyhFh16TZPobPEI04g YMNCzBhFYKvQHulm2PQMxwhts0OR0Ftgy24QgAOfL7HafksjwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGCAzcUuSzFhChafMeWsdHQfm+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYTAwYjY3ZmYtYzJlMC0z NThkLWIyNWUtMGYxNTBjNjg3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFySTaaQRtIRz79UfIIKuIZgAayCIwdhyrmDpzJ4dqUaGBXDALnw8aKY 0WRNf/VyT4ruz+RTIXDWC/TtSYrzJ+bMiLr2G7gmyr1llpQ2/UH3QjleaKcUXz06 kFyVqgmHu9IRQO1T25YcNeUZ8a9z9LadtvnA4E0nsgKjBrZk6/wft2+UQELy+AMD KM76BedYngV8gbjs6yse9Eos3eL71kTIvVCuLnQI83n+RC9hEEDfj4WZQoIoYUUk OUpyfWzgxllmE1oYZ9ZE4mJk3RYn8T7w477rnaq87jN4gEdynyjYrBOlcmBpzKqz z7H+au+sN3NF8OaT739PTF5MIRoM0/8= -----END CERTIFICATE-----Generated at Tue Nov 25 08:14:31 2025 by rpki-client