This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2bfa8a10-f913-38c6-b375-b9fc58571530.roa File: 2bfa8a10-f913-38c6-b375-b9fc58571530.roa (raw, json) Hash identifier: LGTOqjBLSuXEX1OI4tOPV6fX0XoEs1s+KhzKefVNmtM= Subject key identifier: 2C:D1:7A:96:A6:87:4F:D6:76:66:D8:71:E2:81:6C:DC:1B:53:B3:1C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BF1E5EF37D9427EC5E5A9FE00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2bfa8a10-f913-38c6-b375-b9fc58571530.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 30215 IP address blocks: 139.138.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:ef:37:d9:42:7e:c5:e5:a9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=1b9a8572-520b-4223-bb05-838efa941d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:07:5d:6a:98:bf:72:02:5c:da:df:ac:4d: b9:20:73:74:fa:bc:66:ae:3c:b3:7d:bc:57:d0:78: 20:ce:9d:bb:f8:22:f0:28:d4:39:37:12:83:ff:c9: b2:51:04:99:1d:22:6d:98:4a:2c:08:c8:33:70:46: 4d:a8:41:a2:30:ae:27:b8:d9:3a:66:3b:40:bf:eb: c2:d1:51:e0:61:ee:ff:39:7d:71:64:7e:6c:f7:1a: f9:40:d2:b8:96:bc:21:4e:2f:ab:e7:d4:c5:b5:0e: 69:44:c0:ee:05:e6:3a:dd:68:dd:c6:c9:7d:fe:19: 5b:0f:ff:4f:01:e3:1f:fa:44:c5:f2:a2:07:18:d7: 35:34:f5:fc:a9:ae:b4:b6:68:7a:22:11:ab:26:da: 0b:b9:bf:1b:88:dd:fd:47:90:07:82:3e:3b:60:d3: 05:c4:26:c8:ee:4f:ef:17:2c:3a:fc:5e:02:fd:3f: 1f:70:da:61:0b:9c:36:97:58:4e:7b:1a:b2:29:e3: bb:af:dd:9c:22:86:fc:8c:d9:f2:0f:92:f5:0c:c9: 54:0f:41:4e:65:bd:50:ac:2a:0b:62:ad:72:ce:d0: 53:e1:7e:7f:ad:e6:f4:01:56:5c:b1:70:ad:bf:23: 27:de:f3:44:7d:79:be:7d:e6:40:67:39:b7:62:02: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:7A:96:A6:87:4F:D6:76:66:D8:71:E2:81:6C:DC:1B:53:B3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2bfa8a10-f913-38c6-b375-b9fc58571530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:78:c3:e5:fb:74:ea:6d:e5:09:2b:96:4b:7d:ad:86:5e:27: 24:11:e2:7d:48:e0:78:90:f5:92:27:a9:f4:6f:26:9a:18:20: 3e:be:3b:9e:bc:ad:17:a8:e4:b2:6a:e3:2e:2b:69:4f:17:df: b4:96:a2:f1:68:b8:b8:d8:9e:0a:dc:0d:e2:a5:f0:f7:75:be: 2f:3a:0b:83:8f:b0:ef:d5:ee:a7:92:46:d5:7e:8c:9c:f2:87: 1c:59:b5:74:e8:e3:25:70:ef:d5:a9:d9:94:6e:a3:98:e2:bb: d9:4c:f2:60:09:43:b6:81:f1:44:86:ca:28:86:c8:ef:1f:91: cc:8e:a6:d9:b3:02:1a:a3:81:41:fc:9b:5f:a6:b2:9a:8e:cc: b5:f9:2c:3c:0d:41:7c:b2:f5:df:4a:eb:fa:cc:57:02:e2:e9: b3:13:fb:54:40:6f:47:39:c2:09:af:d2:b8:5e:fc:38:80:1d: bc:e0:11:cf:bb:d8:7f:c1:1d:a2:2c:a2:d4:f7:14:fe:80:9f: 95:8b:40:7a:73:fb:69:c8:38:ce:09:03:a1:0b:e6:b4:5f:b7: bb:c8:48:4b:96:db:29:5a:dc:35:af:e0:7d:9b:fb:70:26:29: ff:3f:09:4a:4b:58:e3:c9:1a:38:3b:a4:6b:77:5f:fc:a4:d8: a9:3a:c9:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5e832UJ+xeWp/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk MWI5YTg1NzItNTIwYi00MjIzLWJiMDUtODM4ZWZhOTQxZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhwHXWqYv3ICXNrfrE25IHN0+rxmrjyzfbxX 0Hggzp27+CLwKNQ5NxKD/8myUQSZHSJtmEosCMgzcEZNqEGiMK4nuNk6ZjtAv+vC 0VHgYe7/OX1xZH5s9xr5QNK4lrwhTi+r59TFtQ5pRMDuBeY63Wjdxsl9/hlbD/9P AeMf+kTF8qIHGNc1NPX8qa60tmh6IhGrJtoLub8biN39R5AHgj47YNMFxCbI7k/v Fyw6/F4C/T8fcNphC5w2l1hOexqyKeO7r92cIob8jNnyD5L1DMlUD0FOZb1QrCoL Yq1yztBT4X5/reb0AVZcsXCtvyMn3vNEfXm+feZAZzm3YgKKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzRepamh0/WdmbYceKBbNwbU7McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMmJmYThhMTAtZjkxMy0z OGM2LWIzNzUtYjlmYzU4NTcxNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN4w+X7dOpt5Qkrlkt9rYZeJyQR4n1I4HiQ9ZInqfRvJpoYID6+O568 rReo5LJq4y4raU8X37SWovFouLjYngrcDeKl8Pd1vi86C4OPsO/V7qeSRtV+jJzy hxxZtXTo4yVw79Wp2ZRuo5jiu9lM8mAJQ7aB8USGyiiGyO8fkcyOptmzAhqjgUH8 m1+mspqOzLX5LDwNQXyy9d9K6/rMVwLi6bMT+1RAb0c5wgmv0rhe/DiAHbzgEc+7 2H/BHaIsotT3FP6An5WLQHpz+2nIOM4JA6EL5rRft7vISEuW2yla3DWv4H2b+3Am Kf8/CUpLWOPJGjg7pGt3X/yk2Kk6yZU= -----END CERTIFICATE-----Generated at Sun Nov 30 16:25:00 2025 by rpki-client