This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa File: d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa (raw, json) Hash identifier: YQsrpMQo7vrWGauDuSuJRD4W4gUY4tET9nqJePylO1A= Subject key identifier: B8:F9:0D:94:99:F7:7D:79:41:58:99:81:C7:A2:44:FF:BD:2E:27:38 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BCD9B240BA9B83D3180CEFB00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 30238 IP address blocks: 216.71.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:24:0b:a9:b8:3d:31:80:ce:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=e6442cee-dcef-4122-9153-7f287d610098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:68:f0:a1:89:db:9b:cf:4c:f1:a4:3f:dc: 19:0f:ce:82:ab:fd:eb:4e:eb:f9:80:8f:c3:2c:76: 32:00:59:f8:09:e7:4f:86:16:3a:d8:29:e8:0b:68: 91:17:97:19:7e:d8:1e:36:bb:4c:c9:7a:29:82:61: cf:9b:c5:8d:cc:4a:ad:0d:a1:60:d4:8b:6f:31:8b: 3d:ed:b3:96:3c:c5:92:b9:57:1f:87:e2:10:48:13: 5c:8d:40:54:d4:7c:19:e7:7e:e5:8a:bd:30:03:a9: fb:e2:80:7a:dd:df:1e:74:a9:77:5f:6b:1f:d4:15: 58:2e:0d:f5:d4:79:2b:0e:31:4f:75:be:0f:3e:be: 66:dd:c4:a3:59:d8:8c:84:b6:13:dd:63:8b:00:a5: 6b:b6:cb:a1:37:16:9b:1a:b3:bd:6e:2b:a9:82:6b: dd:93:4c:25:6f:7e:fa:d3:fe:dc:0e:41:37:e4:3d: 0d:b3:21:ea:37:99:bf:65:07:5b:40:2e:04:b3:62: c7:2f:e9:85:e5:91:69:c7:c4:67:83:5a:46:93:89: 72:65:97:10:b7:43:30:9e:87:b1:f0:1f:b1:2d:a7: ec:69:ed:e5:e4:43:3c:e4:51:02:40:b1:a7:ad:d8: e9:9e:61:be:6a:73:95:a4:1e:b2:a7:f8:33:6b:6e: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:0D:94:99:F7:7D:79:41:58:99:81:C7:A2:44:FF:BD:2E:27:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:03:7b:b2:8f:64:2e:30:90:ed:65:55:dc:61:1e:f3:52:8c: 59:09:01:6d:5b:7c:f8:45:77:2e:5b:87:58:4b:a8:1e:6e:b5: 06:c7:87:07:cc:a9:ca:2d:90:6e:e5:0c:42:17:1f:f8:b2:c3: 66:4b:d4:3d:45:cc:85:de:15:ea:8f:4c:a0:27:59:a5:e1:4d: 65:29:c7:37:5b:a6:09:4d:3a:78:e9:17:95:65:c5:b4:37:4a: 4c:d6:1d:4b:29:97:27:3c:75:80:15:91:07:a9:5b:f0:a7:42: 12:a5:84:f0:11:36:47:56:3d:c7:25:74:0e:1a:66:82:76:43: 52:8b:fb:7b:e8:17:9e:75:84:4a:8b:72:14:0c:a9:75:72:89: 45:99:f5:15:ba:13:a2:7a:46:df:51:10:ea:6a:e7:5a:d5:fd: ff:91:e6:f5:75:6a:31:11:b0:cc:5e:24:ad:b7:87:c7:27:0c: ba:2c:fd:ab:9e:eb:58:7c:71:e9:31:34:04:3e:ab:4a:55:2b: 4b:af:81:23:7b:c4:ae:f7:d5:9a:f5:76:b2:b0:64:7d:7e:ec: 37:2f:7c:b9:d7:3c:fc:e8:34:b0:6f:91:b4:65:67:1e:c8:70: af:bd:f6:c5:83:cc:4d:27:65:a1:01:2a:12:97:eb:83:c0:2d: e8:ec:96:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmyQLqbg9MYDO+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTY0NDJjZWUtZGNlZi00MTIyLTkxNTMtN2YyODdkNjEwMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiBo8KGJ25vPTPGkP9wZD86Cq/3rTuv5gI/D LHYyAFn4CedPhhY62CnoC2iRF5cZftgeNrtMyXopgmHPm8WNzEqtDaFg1ItvMYs9 7bOWPMWSuVcfh+IQSBNcjUBU1HwZ537lir0wA6n74oB63d8edKl3X2sf1BVYLg31 1HkrDjFPdb4PPr5m3cSjWdiMhLYT3WOLAKVrtsuhNxabGrO9biupgmvdk0wlb376 0/7cDkE35D0NsyHqN5m/ZQdbQC4Es2LHL+mF5ZFpx8Rng1pGk4lyZZcQt0Mwnoex 8B+xLafsae3l5EM85FECQLGnrdjpnmG+anOVpB6yp/gza25JwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj5DZSZ9315QViZgceiRP+9Lic4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDA5Y2ZkYmQtYmI2YS0z MWEyLTkzYTUtODkwZGI5YWExZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMDe7KPZC4wkO1lVdxhHvNSjFkJAW1bfPhFdy5bh1hLqB5utQbHhwfM qcotkG7lDEIXH/iyw2ZL1D1FzIXeFeqPTKAnWaXhTWUpxzdbpglNOnjpF5VlxbQ3 SkzWHUsplyc8dYAVkQepW/CnQhKlhPARNkdWPccldA4aZoJ2Q1KL+3voF551hEqL chQMqXVyiUWZ9RW6E6J6Rt9REOpq51rV/f+R5vV1ajERsMxeJK23h8cnDLos/aue 61h8cekxNAQ+q0pVK0uvgSN7xK731Zr1drKwZH1+7DcvfLnXPPzoNLBvkbRlZx7I cK+99sWDzE0nZaEBKhKX64PALejslnE= -----END CERTIFICATE-----Generated at Sun Nov 30 16:22:18 2025 by rpki-client