This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
File: 1a850553-c1f9-3561-bb79-65835fe4fee4.roa (raw, json)
Hash identifier: it8mrQxpUdUonGA3KQRif2o1SHwlwHtb2iKXc0g/wWI=
Subject key identifier: 17:94:FB:F9:43:8A:9F:E2:E9:56:82:61:7D:CF:CD:56:74:44:05:5F
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584BEF1B387A6C879E624789EC00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
Signing time: Fri 21 Nov 2025 14:00:38 +0000
ROA not before: Fri 21 Nov 2025 14:00:38 +0000
ROA not after: Thu 19 Feb 2026 14:00:38 +0000
asID: 30215
IP address blocks: 139.138.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 01 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ef:1b:38:7a:6c:87:9e:62:47:89:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Nov 21 14:00:38 2025 GMT
Not After : Feb 19 14:00:38 2026 GMT
Subject: CN=882a932c-3ed7-4c63-8a03-938ee8e55109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:7e:d6:34:b6:29:83:d9:ab:15:c9:4f:49:
ce:e5:40:89:c9:9a:36:94:d3:5b:6b:c9:98:36:fa:
fd:ef:65:69:58:d3:f9:b3:cc:d6:b5:af:98:27:b7:
11:29:35:cb:4e:05:b1:e2:57:16:4f:6c:c5:1b:05:
ab:a6:bb:68:92:36:ae:ef:8c:44:05:7d:66:61:9a:
4a:7c:f0:66:e2:ce:b8:c8:cf:2b:48:da:26:69:ea:
ce:ba:62:24:43:54:a4:ee:62:94:cc:37:75:eb:b8:
c1:70:e1:bf:46:27:69:1f:54:4c:4e:cf:3b:df:c2:
a4:53:64:19:4f:cc:3a:96:f9:f1:c1:dd:26:c5:21:
40:02:ac:ca:ed:ef:3e:0d:24:d8:d6:54:11:e1:2c:
9e:0c:33:3d:f2:72:da:09:a5:94:0c:88:75:d7:4d:
c5:a7:77:24:4f:bd:45:1b:26:a7:b2:15:1f:35:d3:
1c:53:cb:1e:5c:e1:46:ea:8c:21:9e:ce:d4:3e:61:
54:50:d2:81:c6:27:55:16:f9:1a:35:d5:5a:4b:41:
06:4b:db:5a:c3:85:7c:95:e9:44:e2:e5:ce:bc:4a:
56:d2:49:bf:3f:c2:ba:1e:47:a2:55:9b:02:03:bd:
22:b6:b2:89:05:24:1e:13:1e:73:22:c5:1c:05:56:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:FB:F9:43:8A:9F:E2:E9:56:82:61:7D:CF:CD:56:74:44:05:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:11:b0:b0:83:73:65:b1:0a:52:17:0d:e7:6e:b8:d8:c3:5f:
f7:26:f4:33:d4:1f:12:38:3a:3f:d2:d1:ca:d2:84:b8:a2:14:
e1:91:1b:04:a2:b9:8f:fb:2f:a3:2a:6c:a5:41:50:62:11:a7:
d7:6b:02:f9:76:24:12:d5:75:2e:04:0a:8f:d7:b4:53:77:99:
94:d3:24:df:d5:88:d8:e9:c6:d4:71:f8:e9:f7:c5:ca:d3:19:
14:e0:62:66:60:b6:51:ed:8c:7f:d9:37:8e:93:9f:5b:08:cf:
eb:13:ce:63:19:cf:16:9c:7b:87:7b:a2:cb:2f:49:7e:51:69:
36:5f:81:3b:5d:e1:d0:49:40:36:ce:75:66:0d:2e:c2:87:8f:
69:89:c8:16:af:8e:3d:dd:3d:ac:00:34:5a:04:61:20:96:8c:
c2:da:14:69:1a:78:38:21:11:34:7b:2b:e3:1b:c7:c9:7f:c4:
19:fe:fa:32:73:2e:c3:42:84:cf:22:f9:81:b4:e7:aa:ee:28:
57:33:a2:ed:a0:74:e6:69:20:76:29:d3:2a:45:51:74:88:e9:
24:5e:79:2a:21:89:ef:ed:67:89:ce:fe:8b:ce:4c:1d:ee:4c:
4d:de:7a:33:23:45:8d:ed:21:5c:6d:8c:71:46:27:77:bb:09:
9f:7e:04:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGzh6bIeeYkeJ7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk
ODgyYTkzMmMtM2VkNy00YzYzLThhMDMtOTM4ZWU4ZTU1MTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT5+1jS2KYPZqxXJT0nO5UCJyZo2lNNba8mY
Nvr972VpWNP5s8zWta+YJ7cRKTXLTgWx4lcWT2zFGwWrprtokjau74xEBX1mYZpK
fPBm4s64yM8rSNomaerOumIkQ1Sk7mKUzDd167jBcOG/RidpH1RMTs8738KkU2QZ
T8w6lvnxwd0mxSFAAqzK7e8+DSTY1lQR4SyeDDM98nLaCaWUDIh1103Fp3ckT71F
GyanshUfNdMcU8seXOFG6owhns7UPmFUUNKBxidVFvkaNdVaS0EGS9taw4V8lelE
4uXOvEpW0km/P8K6HkeiVZsCA70itrKJBSQeEx5zIsUcBVaiQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBeU+/lDip/i6VaCYX3PzVZ0RAVfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMWE4NTA1NTMtYzFmOS0z
NTYxLWJiNzktNjU4MzVmZTRmZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABURsLCDc2WxClIXDeduuNjDX/cm9DPUHxI4Oj/S0crShLiiFOGRGwSi
uY/7L6MqbKVBUGIRp9drAvl2JBLVdS4ECo/XtFN3mZTTJN/ViNjpxtRx+On3xcrT
GRTgYmZgtlHtjH/ZN46Tn1sIz+sTzmMZzxace4d7ossvSX5RaTZfgTtd4dBJQDbO
dWYNLsKHj2mJyBavjj3dPawANFoEYSCWjMLaFGkaeDghETR7K+Mbx8l/xBn++jJz
LsNChM8i+YG056ruKFczou2gdOZpIHYp0ypFUXSI6SReeSohie/tZ4nO/ovOTB3u
TE3eejMjRY3tIVxtjHFGJ3e7CZ9+BPQ=
-----END CERTIFICATE-----
Generated at Sun Nov 30 16:25:33 2025 by rpki-client