This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a4f2b097-503d-3a3c-a5a5-f3db17e66904.roa File: a4f2b097-503d-3a3c-a5a5-f3db17e66904.roa (raw, json) Hash identifier: dGgDtKheg8qB43tEag+q/XTs7THXWe5P1TgAcMXXpec= Subject key identifier: 27:05:C8:6F:AF:1B:3E:1A:95:42:17:64:A4:6A:1B:38:45:58:A5:5A Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584BE555D170096FD62337F73140 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a4f2b097-503d-3a3c-a5a5-f3db17e66904.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 4922 IP address blocks: 216.30.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:d1:70:09:6f:d6:23:37:f7:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=8c0f0361-5846-49b1-9b1b-62b5954119c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:62:44:71:ea:30:09:2b:c4:32:4b:7f:a2: 5c:9b:76:d2:b2:71:6b:02:02:c3:32:34:8b:2c:8e: 86:ae:aa:56:da:5a:d2:6e:89:78:54:c2:76:a8:91: 65:0b:b0:11:21:a4:5f:25:6f:4a:0a:58:4b:1d:1e: 0e:65:e6:94:7f:ef:1d:6a:9b:08:18:f1:17:d0:a9: fc:24:60:74:50:61:1a:ec:51:f7:cc:5a:73:d4:1e: 6c:73:f7:24:4d:60:da:d0:f1:4b:1a:3a:7d:05:ef: 7f:3f:67:3b:a7:7f:21:b0:c4:9b:72:11:6d:ba:01: 63:e2:2a:2a:11:d0:6c:72:e3:d1:ea:76:7e:29:c6: 79:4e:30:db:11:47:a4:07:49:3c:85:07:db:08:00: a8:4c:0b:8b:8d:b5:93:d1:20:85:fc:5d:cc:29:8f: 1f:a8:66:6a:e9:8c:23:94:18:c8:78:3e:a2:e6:ee: 58:1a:40:10:a1:f1:7a:5b:5b:ff:c6:8e:29:62:8d: 0a:8c:70:0d:2f:40:83:a1:4f:31:bf:a8:55:2c:7a: ae:cf:74:3a:74:04:f1:4e:40:bd:6a:0b:a3:ad:99: 34:bb:e7:58:65:fc:14:f7:71:5f:02:42:4c:64:e1: 57:40:e4:f9:d4:86:f6:81:7f:ce:7b:73:fe:39:02: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:05:C8:6F:AF:1B:3E:1A:95:42:17:64:A4:6A:1B:38:45:58:A5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a4f2b097-503d-3a3c-a5a5-f3db17e66904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 216.30.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8f:de:69:95:fe:5c:15:6f:74:c8:23:82:3d:b4:d6:47:e9: aa:3e:c0:ed:f3:52:fc:e1:89:08:f2:23:66:b7:f3:31:0e:63: 21:87:f2:88:31:d6:f6:c2:81:c0:d3:16:cb:b7:cc:df:c3:13: 73:49:83:43:24:bb:9b:24:b5:87:2d:83:30:26:a2:53:a2:b7: 49:a4:ad:ea:d2:5d:91:09:fd:32:7f:3e:20:7a:19:e0:da:7e: 7d:b2:ba:84:c5:49:78:ab:77:fe:74:22:68:c1:20:25:cd:a1: a5:82:3f:5a:25:cd:c7:d9:00:92:8a:b8:23:51:cc:a1:0e:a7: 4f:a5:cf:5b:57:46:7a:6f:09:0e:28:70:b5:74:20:80:f5:08: c8:84:82:0d:04:54:3d:57:8a:c1:97:06:d5:93:97:90:4c:99: c9:57:19:16:48:a2:b5:3c:a0:ce:5a:ea:ec:0e:f6:1b:aa:d5: 60:85:0c:8e:5a:79:60:09:b8:3b:eb:92:44:8d:f3:7d:a7:f1: 49:01:42:85:98:90:42:62:24:c1:c3:1e:c7:5c:38:92:00:6e: 3d:ab:84:68:fd:27:09:e9:46:75:0d:8f:3e:6d:47:7a:2b:7e: 66:b5:36:d6:df:83:bc:a4:21:ce:3b:e3:3a:c9:ea:85:07:28: 80:ec:35:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVdFwCW/WIzf3MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk OGMwZjAzNjEtNTg0Ni00OWIxLTliMWItNjJiNTk1NDExOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN9iRHHqMAkrxDJLf6Jcm3bSsnFrAgLDMjSL LI6GrqpW2lrSbol4VMJ2qJFlC7ARIaRfJW9KClhLHR4OZeaUf+8dapsIGPEX0Kn8 JGB0UGEa7FH3zFpz1B5sc/ckTWDa0PFLGjp9Be9/P2c7p38hsMSbchFtugFj4ioq EdBscuPR6nZ+KcZ5TjDbEUekB0k8hQfbCACoTAuLjbWT0SCF/F3MKY8fqGZq6Ywj lBjIeD6i5u5YGkAQofF6W1v/xo4pYo0KjHANL0CDoU8xv6hVLHquz3Q6dATxTkC9 agujrZk0u+dYZfwU93FfAkJMZOFXQOT51Ib2gX/Oe3P+OQLwRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcFyG+vGz4alUIXZKRqGzhFWKVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYTRmMmIwOTctNTAzZC0z YTNjLWE1YTUtZjNkYjE3ZTY2OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2B6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+P3mmV/lwVb3TII4I9tNZH6ao+wO3zUvzhiQjyI2a38zEOYyGH8ogx 1vbCgcDTFsu3zN/DE3NJg0Mku5sktYctgzAmolOit0mkrerSXZEJ/TJ/PiB6GeDa fn2yuoTFSXird/50ImjBICXNoaWCP1olzcfZAJKKuCNRzKEOp0+lz1tXRnpvCQ4o cLV0IID1CMiEgg0EVD1XisGXBtWTl5BMmclXGRZIorU8oM5a6uwO9huq1WCFDI5a eWAJuDvrkkSN832n8UkBQoWYkEJiJMHDHsdcOJIAbj2rhGj9JwnpRnUNjz5tR3or fma1Ntbfg7ykIc474zrJ6oUHKIDsNaY= -----END CERTIFICATE-----Generated at Tue Nov 25 09:51:59 2025 by rpki-client