This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa File: 889e1dc3-7376-38e7-8389-5e83a3a0926e.roa (raw, json) Hash identifier: XTig6HZMPTDv1C24ZreHAqm/6N4DqspNZyUvsrFjNko= Subject key identifier: 6E:3A:83:18:0C:55:32:DF:5A:3D:D8:6D:0A:9C:6F:71:D6:5D:C0:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584C2B20F5CC7F877FF1C0292D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa Signing time: Sat 13 Dec 2025 02:00:30 +0000 ROA not before: Sat 13 Dec 2025 02:00:30 +0000 ROA not after: Fri 13 Mar 2026 01:00:30 +0000 asID: 0 IP address blocks: 208.198.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2b:20:f5:cc:7f:87:7f:f1:c0:29:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Dec 13 02:00:30 2025 GMT Not After : Mar 13 01:00:30 2026 GMT Subject: CN=37fda136-826e-4884-9131-6522d12e4fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:9b:8b:76:ea:fe:98:20:65:28:3d:c8:df: fa:45:2b:4c:7a:0d:f5:91:de:a5:04:18:a6:c2:e0: 80:db:9c:1b:48:f8:0f:10:8c:56:95:47:3d:c6:12: bc:46:3a:39:fa:9b:e9:0c:50:2d:27:cc:8f:6c:cc: b9:b3:2f:59:25:6f:24:4c:4e:98:77:4e:e5:d4:4b: 28:d1:95:33:3a:5b:36:0a:0f:22:b0:99:8a:c5:62: cf:4a:87:4f:7d:9c:b3:11:1e:6c:f3:cb:05:7a:1c: 53:5c:08:13:5f:c1:d2:fb:50:3a:97:22:69:6d:c1: e5:22:29:4a:60:03:67:92:ee:ec:d0:73:f9:d0:0d: ce:e3:56:80:7c:ab:80:e1:61:68:ec:4d:82:56:54: a2:82:7e:81:f1:72:38:2e:ff:9b:33:fa:bd:a7:a1: 3a:26:82:ec:e6:30:10:5c:ef:8e:da:cc:24:23:a7: 4e:97:14:ff:59:ea:d4:16:1b:8a:89:e7:e9:e6:28: 45:88:d7:55:a0:27:ff:9b:9d:1a:d5:a9:2b:e9:4f: 58:fb:c4:30:74:62:5b:94:32:64:6b:3d:67:f5:76: 57:b3:b8:8e:bf:88:6a:6e:19:05:55:fa:03:75:ba: 40:4b:2f:71:38:3a:b5:6d:f2:b9:de:43:02:a5:e2: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3A:83:18:0C:55:32:DF:5A:3D:D8:6D:0A:9C:6F:71:D6:5D:C0:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.198.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c2:07:74:80:fa:80:da:ab:7d:27:88:6a:cf:2f:c5:6a:c3: dc:50:cd:0e:70:db:dd:99:a0:fb:d1:1f:f1:33:f0:45:ab:64: dc:f7:73:b7:7b:d2:08:df:33:a4:c9:be:ad:db:57:35:f4:06: b7:4c:82:5c:d0:e2:00:f2:f2:8d:23:8d:46:9a:65:a7:40:a9: c2:2a:72:bc:ef:16:8f:09:53:94:c3:33:54:0b:37:93:4f:c4: 33:0e:43:61:91:88:f8:08:53:72:42:1d:84:75:a6:cc:6c:8d: c7:74:4d:41:f1:90:ee:4c:c4:e3:8c:7b:56:ac:6a:5f:ca:cc: 8d:93:f3:57:4b:17:fe:60:67:9c:60:85:1c:50:58:48:a6:e8: 29:0d:45:22:68:9b:26:e7:e5:24:9e:e7:7c:83:23:13:91:5a: 17:55:c2:04:59:eb:3b:1a:5e:c1:d3:71:2f:35:12:d0:2f:3a: 9c:07:0b:91:33:0e:db:a7:83:8a:ec:ef:69:29:da:a7:ce:57: 73:44:8f:9e:4a:2f:96:8c:a0:89:9a:97:ca:2b:69:0b:f5:69: b8:e3:da:a0:1f:e3:be:82:27:6a:04:a1:bb:62:7d:b9:b6:37: 77:c6:6d:30:90:8d:67:c7:86:2d:04:bc:de:29:96:6f:73:37: 39:4c:e8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwrIPXMf4d/8cApLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTIxMzAyMDAzMFoXDTI2MDMxMzAxMDAzMFowLzEtMCsGA1UEAxMk MzdmZGExMzYtODI2ZS00ODg0LTkxMzEtNjUyMmQxMmU0ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh2bi3bq/pggZSg9yN/6RStMeg31kd6lBBim wuCA25wbSPgPEIxWlUc9xhK8Rjo5+pvpDFAtJ8yPbMy5sy9ZJW8kTE6Yd07l1Eso 0ZUzOls2Cg8isJmKxWLPSodPfZyzER5s88sFehxTXAgTX8HS+1A6lyJpbcHlIilK YANnku7s0HP50A3O41aAfKuA4WFo7E2CVlSign6B8XI4Lv+bM/q9p6E6JoLs5jAQ XO+O2swkI6dOlxT/WerUFhuKiefp5ihFiNdVoCf/m50a1akr6U9Y+8QwdGJblDJk az1n9XZXs7iOv4hqbhkFVfoDdbpASy9xODq1bfK53kMCpeIxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG46gxgMVTLfWj3YbQqcb3HWXcBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg5ZTFkYzMtNzM3Ni0z OGU3LTgzODktNWU4M2EzYTA5MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/CB3SA+oDaq30niGrPL8Vqw9xQzQ5w292ZoPvRH/Ez8EWrZNz3c7d7 0gjfM6TJvq3bVzX0BrdMglzQ4gDy8o0jjUaaZadAqcIqcrzvFo8JU5TDM1QLN5NP xDMOQ2GRiPgIU3JCHYR1psxsjcd0TUHxkO5MxOOMe1asal/KzI2T81dLF/5gZ5xg hRxQWEim6CkNRSJomybn5SSe53yDIxORWhdVwgRZ6zsaXsHTcS81EtAvOpwHC5Ez Dtung4rs72kp2qfOV3NEj55KL5aMoImal8oraQv1abjj2qAf476CJ2oEobtifbm2 N3fGbTCQjWfHhi0EvN4plm9zNzlM6Nk= -----END CERTIFICATE-----Generated at Fri Dec 19 21:09:27 2025 by rpki-client