This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa File: 8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa (raw, json) Hash identifier: O+h7Y3z5Ees24B8mWzvzeu9yKBCCW4AN8LnjSHGjrHg= Subject key identifier: AF:C9:39:67:86:0C:25:F4:FC:0C:4A:AB:15:ED:33:EB:88:37:35:B3 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584BE125DA2DBD975AD9C3F4B16B Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 2152 IP address blocks: 209.129.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:25:da:2d:bd:97:5a:d9:c3:f4:b1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=74c60db1-fd35-44d5-8bf7-b57b5d723fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:16:75:e5:d7:e7:bf:01:8b:0d:a8:4b:af: b5:9d:0b:89:aa:4a:3c:bb:45:20:01:cf:59:c5:ef: e6:ac:41:6d:c6:d6:eb:af:dc:ba:44:8f:a7:7b:85: 20:0f:30:d8:85:0f:be:5c:44:27:5d:f4:48:67:6f: 84:f6:cc:54:42:a5:6f:24:23:12:cb:e0:ff:8c:36: 7d:56:98:d5:c1:59:83:94:36:a0:5d:d8:6e:69:15: 14:1a:e3:ca:09:f8:cb:1e:c5:c4:fd:ec:02:08:d9: 06:09:2d:a2:ad:82:14:f8:3f:ec:df:70:22:21:e4: 05:ca:71:6c:2c:15:dc:9a:14:ce:91:55:6b:74:dc: 40:88:b7:3a:3c:f0:21:9d:8b:b6:49:71:77:b2:48: 51:c6:e3:66:00:09:36:51:e3:3c:be:1c:71:b8:d9: a9:39:dc:01:c5:0e:e3:df:05:28:56:b0:9c:45:8d: 13:44:d7:10:d9:62:cf:fc:e5:ea:db:f7:0b:f5:b2: eb:e7:e3:b9:3c:c7:24:47:62:b6:f2:76:f7:39:19: 31:c7:f4:1a:08:2b:1e:6e:28:71:ba:fc:90:7b:90: 21:32:d5:a3:23:96:ae:3f:38:ca:73:e5:30:9e:8d: be:ca:2a:f1:6b:f9:a8:94:e3:29:03:48:b2:a3:f9: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C9:39:67:86:0C:25:F4:FC:0C:4A:AB:15:ED:33:EB:88:37:35:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1d:64:9d:64:82:89:8e:54:dc:00:97:ca:57:f2:bb:9f:2f: e1:a5:71:ba:d8:93:ff:77:a7:d7:bd:ac:ae:b2:ee:12:e1:95: 89:29:99:78:de:06:85:f2:76:49:f8:f0:0e:db:02:96:1d:45: d4:ee:c4:09:f2:9e:2c:c4:eb:53:7d:8d:45:e1:68:05:12:a8: 6b:26:e6:7f:c7:fd:c4:43:f9:1b:9a:28:79:35:f4:19:3d:03: ac:44:88:82:09:91:ad:0b:aa:04:4e:a0:86:3d:45:c1:e7:1b: c5:9b:84:92:ea:4d:cc:90:41:57:d4:97:2b:57:58:a1:ac:e6: 85:ef:7d:97:ee:26:73:93:91:4f:d7:80:80:58:26:ba:66:be: 07:66:5d:92:3d:1a:6a:de:4e:8f:d2:44:9f:36:11:43:e2:c6: cc:71:94:e2:fa:a5:3a:e2:8c:70:59:7d:5a:15:56:d7:7a:e9: 84:30:db:a5:e5:c9:b6:b5:b1:86:9d:04:77:db:e3:01:60:16: 2a:09:2b:fe:20:38:8f:b2:8f:96:29:36:5c:27:93:18:22:72: 0c:32:70:a1:36:28:b0:33:d9:2e:9f:08:75:1e:fe:1e:3f:4a: 75:1c:2c:f6:a2:2d:71:66:85:d3:78:a7:5f:82:78:44:ed:d6: 53:08:17:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJdotvZda2cP0sWswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk NzRjNjBkYjEtZmQzNS00NGQ1LThiZjctYjU3YjVkNzIzZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzgWdeXX578Biw2oS6+1nQuJqko8u0UgAc9Z xe/mrEFtxtbrr9y6RI+ne4UgDzDYhQ++XEQnXfRIZ2+E9sxUQqVvJCMSy+D/jDZ9 VpjVwVmDlDagXdhuaRUUGuPKCfjLHsXE/ewCCNkGCS2irYIU+D/s33AiIeQFynFs LBXcmhTOkVVrdNxAiLc6PPAhnYu2SXF3skhRxuNmAAk2UeM8vhxxuNmpOdwBxQ7j 3wUoVrCcRY0TRNcQ2WLP/OXq2/cL9bLr5+O5PMckR2K28nb3ORkxx/QaCCsebihx uvyQe5AhMtWjI5auPzjKc+Uwno2+yirxa/molOMpA0iyo/kunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/JOWeGDCX0/AxKqxXtM+uINzWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvOGI5OThjNmQtNDI0Zi0z YWZlLThjYjEtOWIxMzk4ZmJhYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEdZJ1kgomOVNwAl8pX8rufL+GlcbrYk/93p9e9rK6y7hLhlYkpmXje BoXydkn48A7bApYdRdTuxAnynizE61N9jUXhaAUSqGsm5n/H/cRD+RuaKHk19Bk9 A6xEiIIJka0LqgROoIY9RcHnG8WbhJLqTcyQQVfUlytXWKGs5oXvfZfuJnOTkU/X gIBYJrpmvgdmXZI9GmreTo/SRJ82EUPixsxxlOL6pTrijHBZfVoVVtd66YQw26Xl yba1sYadBHfb4wFgFioJK/4gOI+yj5YpNlwnkxgicgwycKE2KLAz2S6fCHUe/h4/ SnUcLPaiLXFmhdN4p1+CeETt1lMIFwQ= -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:06 2025 by rpki-client