This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa File: 11afab10-f59c-313b-b25b-4dc592a25c6e.roa (raw, json) Hash identifier: 8vVUxgR5WryMXw3Ty+6DNMSmVjj83s6xvoFXMnKQqU4= Subject key identifier: E2:40:A2:D3:C7:1F:F7:50:06:2A:84:05:16:56:85:41:25:68:01:64 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BDCF5E1382B1C1B9299878800 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 30238 IP address blocks: 68.232.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e1:38:2b:1c:1b:92:99:87:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=f08e0997-456b-4fdc-8f49-7cb66eb05cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:7f:63:c0:58:be:b7:12:58:df:8b:00:1b: 5a:2c:39:2a:ff:e3:16:b2:52:76:a0:88:dd:64:0e: 80:82:d0:fb:be:8c:52:68:3f:1f:fa:64:7a:3f:3c: 96:b8:4b:bb:80:28:51:c3:e5:82:8f:83:f2:1c:96: 7c:df:55:fa:1d:24:ec:d3:fd:26:c9:7b:5b:64:5d: 08:12:f3:1b:3c:0e:b5:2a:c7:4c:c5:93:9f:fd:c2: 96:8f:ca:63:75:e7:5d:61:8a:13:60:6d:74:d4:c8: a0:26:37:74:e7:f9:37:91:33:07:d8:87:e5:0f:0a: 6a:cb:af:96:56:e4:be:16:c3:6b:c2:c8:4c:92:ca: c6:48:dc:74:0d:a1:5d:58:73:a4:4e:81:2a:0a:0e: 27:6f:b8:69:02:0a:63:6f:d1:06:84:ac:0e:c4:cf: 8c:1d:80:68:e2:b1:02:95:8c:1b:fa:22:68:2c:e5: 61:36:0e:b8:5d:4e:7a:20:d5:dc:48:a0:cd:14:a4: 97:45:27:02:17:35:d9:a8:db:05:09:fb:5f:12:2f: 57:49:91:2c:d5:ee:eb:a9:e0:f2:e7:81:a8:b1:cd: bd:a7:8f:f4:3d:a3:31:6b:ad:83:3c:8c:3a:e4:07: ed:09:7d:cb:ab:d2:a8:5c:03:9f:59:1d:1d:3a:ab: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:A2:D3:C7:1F:F7:50:06:2A:84:05:16:56:85:41:25:68:01:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:45:c6:b4:10:1b:44:69:22:16:06:30:30:c3:e4:46:e0:eb: a3:9b:ea:5c:0c:52:56:5a:f4:0b:47:da:75:20:ee:f4:b0:41: b9:f5:67:c9:6f:ed:15:4b:4e:6f:b7:10:c5:57:b9:8b:b1:0c: e3:90:84:93:76:f3:bd:bd:eb:50:5a:7a:3a:f9:28:62:34:1c: f9:01:8d:9a:50:8f:a9:51:71:e9:77:cc:c0:83:e3:e3:46:fc: 53:4c:67:e5:15:6a:fc:e7:bc:17:76:1a:ae:cc:1f:0d:89:cc: 79:24:11:38:01:13:46:79:e4:a8:b7:d7:73:8c:79:af:94:41: e7:7f:34:1d:e3:5d:b7:02:5d:a2:45:7d:7a:87:55:65:b7:79: c3:ac:d6:10:55:f4:6c:83:a8:b2:fb:5a:0d:33:c9:23:ff:18: 2f:0b:41:a9:73:1c:23:1d:5d:47:4b:47:ff:37:e8:31:cf:64: 3a:99:2b:12:d8:f0:74:cf:c7:2d:33:00:17:f4:80:43:22:8d: c9:74:3a:07:c7:79:a1:e2:11:0b:1d:32:cb:67:0b:d8:9b:40: c1:37:15:e1:2d:26:18:41:77:90:d5:c0:cc:a0:d9:73:c2:f5: 20:54:c7:72:19:78:c8:38:5d:94:d4:4d:d0:81:06:ec:72:91: 58:c3:65:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9eE4KxwbkpmHiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk ZjA4ZTA5OTctNDU2Yi00ZmRjLThmNDktN2NiNjZlYjA1Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQV/Y8BYvrcSWN+LABtaLDkq/+MWslJ2oIjd ZA6AgtD7voxSaD8f+mR6PzyWuEu7gChRw+WCj4PyHJZ831X6HSTs0/0myXtbZF0I EvMbPA61KsdMxZOf/cKWj8pjdeddYYoTYG101MigJjd05/k3kTMH2IflDwpqy6+W VuS+FsNrwshMksrGSNx0DaFdWHOkToEqCg4nb7hpAgpjb9EGhKwOxM+MHYBo4rEC lYwb+iJoLOVhNg64XU56INXcSKDNFKSXRScCFzXZqNsFCftfEi9XSZEs1e7rqeDy 54Gosc29p4/0PaMxa62DPIw65AftCX3Lq9KoXAOfWR0dOqt9oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJAotPHH/dQBiqEBRZWhUElaAFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTFhZmFiMTAtZjU5Yy0z MTNiLWIyNWItNGRjNTkyYTI1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlFxrQQG0RpIhYGMDDD5Ebg66Ob6lwMUlZa9AtH2nUg7vSwQbn1Z8lv 7RVLTm+3EMVXuYuxDOOQhJN2872961Baejr5KGI0HPkBjZpQj6lRcel3zMCD4+NG /FNMZ+UVavznvBd2Gq7MHw2JzHkkETgBE0Z55Ki313OMea+UQed/NB3jXbcCXaJF fXqHVWW3ecOs1hBV9GyDqLL7Wg0zySP/GC8LQalzHCMdXUdLR/836DHPZDqZKxLY 8HTPxy0zABf0gEMijcl0OgfHeaHiEQsdMstnC9ibQME3FeEtJhhBd5DVwMyg2XPC 9SBUx3IZeMg4XZTUTdCBBuxykVjDZVo= -----END CERTIFICATE-----Generated at Sun Nov 30 16:23:37 2025 by rpki-client