This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa File: 28138eb9-6117-317b-a8ba-edce60e35af8.roa (raw, json) Hash identifier: Pb3wRr7qDKKdvwm/WvveDqfjs6X/wT7O2gjg9XPtyi0= Subject key identifier: 64:FE:D2:A7:D7:2C:D7:F3:5B:66:82:9C:43:D4:91:F6:5E:9F:03:63 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BDCF5C0A2DCDB9465079734C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 30238 IP address blocks: 68.232.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:c0:a2:dc:db:94:65:07:97:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=35f12b5b-b16b-43a6-ae8f-b30a2d1c2265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:2d:c9:0e:ed:43:8c:62:a6:e7:01:31:ee: b2:bd:c9:53:4f:f9:ff:5d:95:70:77:d0:ca:e2:90: e0:81:82:03:fe:78:1e:94:05:2e:7a:fc:c8:27:fa: c0:b0:7b:70:59:f2:3a:c6:9d:81:44:7e:46:94:3c: d9:42:31:68:78:65:f1:23:11:e8:84:a7:a6:88:a3: ea:27:53:d8:f6:b9:37:37:98:87:89:12:dc:cf:90: 89:c1:d4:cd:ab:50:d9:43:97:9e:43:87:05:0d:6f: 38:33:45:18:f4:e5:d5:29:74:7a:68:f5:79:7f:f0: dc:7b:c8:2f:80:f7:37:38:49:d2:2e:fb:3f:46:ae: 49:c5:7f:b7:28:13:01:29:d9:a7:c8:5e:a5:1f:bd: 32:f6:74:f6:9c:a2:5e:24:b6:92:77:c2:1c:5d:43: 84:cc:0e:05:94:cf:bb:f1:4f:5b:60:e4:3d:3c:6d: 07:03:bc:44:b9:30:b1:78:56:44:77:e5:77:89:7a: 60:cb:3a:6b:fd:5b:91:e1:3e:2c:e1:4e:fb:d2:a5: 37:ac:24:76:e8:12:af:db:7d:61:4c:dd:61:8c:80: c7:0d:0a:1a:69:4c:4c:c0:9d:07:33:ea:bb:6d:8b: 95:4a:2d:41:57:1b:9f:37:77:a7:b3:23:71:8c:61: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:D2:A7:D7:2C:D7:F3:5B:66:82:9C:43:D4:91:F6:5E:9F:03:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a5:f4:37:71:6c:a1:cf:79:1d:41:76:7d:a2:83:a2:57:af: 25:86:8b:05:3d:58:93:d8:2a:cf:80:ed:ed:be:26:e3:13:3f: ba:56:23:d2:6c:49:b1:f7:52:86:6b:ff:1d:b1:40:ae:50:68: 30:2e:b4:0e:64:e2:43:11:2e:5b:a9:9a:bb:b9:a1:6c:a0:d4: 64:4c:b1:1c:96:96:b3:21:c8:29:f3:f4:40:cb:8b:67:ba:da: 3c:23:7a:52:0e:d1:99:1d:93:b2:2e:83:d3:d9:d6:a1:7d:4f: fe:8c:84:ad:6d:1f:97:91:bc:c1:a0:0e:07:5c:20:f1:c8:7a: a3:ed:dd:89:a0:eb:e6:32:a9:9e:c9:11:99:9f:58:c5:a2:bd: e4:88:04:25:a7:c9:cd:e7:83:b5:fb:8f:00:a9:2d:60:97:46: c4:ff:d9:e1:0f:63:b9:e8:85:89:07:81:c1:25:43:00:e8:7f: 48:4e:6d:31:d1:96:20:82:20:4d:79:15:f5:1e:97:2f:33:7b: 6a:83:ba:28:a7:38:bd:71:16:9f:b8:2d:34:53:0a:d0:65:56: 56:48:0c:73:5c:fa:6e:84:24:1b:52:31:58:8a:1d:1d:ce:48: 1b:1b:83:8d:87:a4:e7:5b:7c:78:9d:6c:84:99:64:a4:e4:ca: 41:ed:0d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9cCi3NuUZQeXNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MzVmMTJiNWItYjE2Yi00M2E2LWFlOGYtYjMwYTJkMWMyMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZstyQ7tQ4xipucBMe6yvclTT/n/XZVwd9DK 4pDggYID/ngelAUuevzIJ/rAsHtwWfI6xp2BRH5GlDzZQjFoeGXxIxHohKemiKPq J1PY9rk3N5iHiRLcz5CJwdTNq1DZQ5eeQ4cFDW84M0UY9OXVKXR6aPV5f/Dce8gv gPc3OEnSLvs/Rq5JxX+3KBMBKdmnyF6lH70y9nT2nKJeJLaSd8IcXUOEzA4FlM+7 8U9bYOQ9PG0HA7xEuTCxeFZEd+V3iXpgyzpr/VuR4T4s4U770qU3rCR26BKv231h TN1hjIDHDQoaaUxMwJ0HM+q7bYuVSi1BVxufN3ensyNxjGE1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT+0qfXLNfzW2aCnEPUkfZenwNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxMzhlYjktNjExNy0z MTdiLWE4YmEtZWRjZTYwZTM1YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKl9DdxbKHPeR1Bdn2ig6JXryWGiwU9WJPYKs+A7e2+JuMTP7pWI9Js SbH3UoZr/x2xQK5QaDAutA5k4kMRLlupmru5oWyg1GRMsRyWlrMhyCnz9EDLi2e6 2jwjelIO0Zkdk7Iug9PZ1qF9T/6MhK1tH5eRvMGgDgdcIPHIeqPt3Ymg6+YyqZ7J EZmfWMWiveSIBCWnyc3ng7X7jwCpLWCXRsT/2eEPY7nohYkHgcElQwDof0hObTHR liCCIE15FfUely8ze2qDuiinOL1xFp+4LTRTCtBlVlZIDHNc+m6EJBtSMViKHR3O SBsbg42HpOdbfHidbISZZKTkykHtDSc= -----END CERTIFICATE-----Generated at Sun Nov 30 16:23:43 2025 by rpki-client