This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa File: b00b53ed-db98-3d02-883b-21a1dc38e020.roa (raw, json) Hash identifier: 2dcwI2/Z5RxSnMaGtET0u3+Fx9V5PDx4fQUGtWskxS4= Subject key identifier: 5B:0D:64:B1:3A:E2:72:1D:0A:81:74:B4:2E:C0:50:8C:8E:B0:01:EB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BCD9B23A04AFF849B67EA4400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 30238 IP address blocks: 68.232.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:23:a0:4a:ff:84:9b:67:ea:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=548370a2-f10f-4363-bfe3-00608e9047e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:20:d7:39:9a:b4:ed:46:eb:c1:93:ea:38:44: 8d:c8:d2:84:a3:78:d7:ad:11:a1:70:cc:2d:c8:47: da:01:2b:f1:63:cc:dc:7e:5a:47:76:15:bc:7b:88: b3:ae:92:99:00:9f:f2:63:ca:e4:0f:55:fa:7e:d0: a0:0d:dc:ef:42:81:29:64:a8:cc:05:eb:30:9b:46: b1:d0:09:16:0b:c3:f3:a7:63:28:5d:1f:44:86:dc: 1d:f8:aa:88:e3:28:34:ca:ba:1a:18:96:07:c3:8d: db:61:8c:19:d0:35:b4:73:93:57:b0:c8:5e:58:f0: 74:a1:43:6e:ae:e1:46:e2:a8:26:c3:8c:33:50:9c: 77:2f:c4:62:d4:9e:68:ac:d8:ce:90:e9:d2:25:41: d6:d3:10:f9:40:a3:f2:85:7a:6b:50:bc:e4:a1:95: eb:dc:62:03:75:79:94:4b:5b:51:ec:7d:db:a2:35: 87:9e:66:4c:19:42:cb:23:d2:bd:7c:f4:dd:ed:6f: a4:60:3e:b6:65:7a:04:86:9c:cd:b8:21:3c:1c:b2: c1:1e:77:db:b3:ff:92:9d:62:88:dd:82:ba:b6:8c: 53:24:05:a6:30:29:95:43:f9:4a:6a:24:d4:33:c0: 85:c4:24:1f:af:13:58:38:d1:74:1d:e1:d9:30:fc: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:64:B1:3A:E2:72:1D:0A:81:74:B4:2E:C0:50:8C:8E:B0:01:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c8:31:75:4e:f4:8c:68:79:1d:27:b8:c4:01:9f:55:3f:3b: 17:20:3a:e8:db:c5:f4:ba:9d:6c:f4:1e:35:ce:6c:94:e0:7f: 8e:cd:99:dd:c7:a3:92:27:b9:a0:17:b3:c6:96:96:bf:38:d7: 19:f1:7a:4b:30:25:24:8e:76:60:c6:35:3c:55:66:00:37:25: b7:f2:c0:98:2d:d9:60:5d:8e:92:f5:e0:ae:c7:d5:75:1e:04: 3a:d0:a1:54:04:ce:9d:c1:27:2e:8c:3f:99:ec:bb:dc:2f:d6: 48:f4:41:44:70:17:9d:b5:cd:da:60:47:ce:3e:6f:1e:d0:13: af:a8:24:9f:1f:45:d8:7a:a4:fe:4a:0b:f5:f3:9c:52:3c:45: 5e:0f:16:0a:05:6b:0a:a4:ea:52:22:dc:c2:24:8a:1b:c2:0c: e7:1d:8e:7a:c2:d0:93:81:14:13:fb:c3:11:0d:4f:56:85:e4: 17:77:21:af:69:a8:ae:5a:9e:aa:dd:8f:93:32:2c:bf:ea:2a: 93:ed:ec:59:d8:7f:fd:4b:d0:26:08:2c:9b:ec:a9:89:8b:9a: 51:d7:15:a8:27:48:83:98:06:b8:91:6d:cd:61:11:8f:42:6b: aa:6b:ce:20:96:de:72:45:e5:d8:74:05:e7:b1:d5:68:e9:a7: f2:17:1a:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmyOgSv+Em2fqRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTQ4MzcwYTItZjEwZi00MzYzLWJmZTMtMDA2MDhlOTA0N2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyDXOZq07UbrwZPqOESNyNKEo3jXrRGhcMwt yEfaASvxY8zcflpHdhW8e4izrpKZAJ/yY8rkD1X6ftCgDdzvQoEpZKjMBeswm0ax 0AkWC8Pzp2MoXR9Ehtwd+KqI4yg0yroaGJYHw43bYYwZ0DW0c5NXsMheWPB0oUNu ruFG4qgmw4wzUJx3L8Ri1J5orNjOkOnSJUHW0xD5QKPyhXprULzkoZXr3GIDdXmU S1tR7H3bojWHnmZMGULLI9K9fPTd7W+kYD62ZXoEhpzNuCE8HLLBHnfbs/+SnWKI 3YK6toxTJAWmMCmVQ/lKaiTUM8CFxCQfrxNYONF0HeHZMPzr1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsNZLE64nIdCoF0tC7AUIyOsAHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjAwYjUzZWQtZGI5OC0z ZDAyLTg4M2ItMjFhMWRjMzhlMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvIMXVO9IxoeR0nuMQBn1U/OxcgOujbxfS6nWz0HjXObJTgf47Nmd3H o5InuaAXs8aWlr841xnxekswJSSOdmDGNTxVZgA3JbfywJgt2WBdjpL14K7H1XUe BDrQoVQEzp3BJy6MP5nsu9wv1kj0QURwF521zdpgR84+bx7QE6+oJJ8fRdh6pP5K C/XznFI8RV4PFgoFawqk6lIi3MIkihvCDOcdjnrC0JOBFBP7wxENT1aF5Bd3Ia9p qK5anqrdj5MyLL/qKpPt7FnYf/1L0CYILJvsqYmLmlHXFagnSIOYBriRbc1hEY9C a6prziCW3nJF5dh0Beex1Wjpp/IXGgg= -----END CERTIFICATE-----Generated at Sun Nov 30 16:23:40 2025 by rpki-client