This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json) Hash identifier: FfSJOhmI6et+dxQ/KHDN3Jyk934B7NZuKSor4pwXzAk= Subject key identifier: BA:A4:A8:38:E0:5D:2F:E4:FD:FA:2F:C0:6A:F0:A4:4E:7F:06:18:7B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BCD9B12E6CB38A1A848871F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:12:e6:cb:38:a1:a8:48:87:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=853c9e7a-907c-47cd-87fd-24fcd191285f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2a:d6:03:ab:fe:06:0e:b6:c1:1a:b9:30:87: 73:b4:81:62:3e:7c:b9:a4:40:b8:53:92:b0:4c:5f: b2:72:c6:45:ce:d8:e5:51:92:c1:da:96:a1:91:cc: 12:f9:f4:7a:06:0c:c7:3c:94:e3:7b:08:5e:f9:da: fe:6a:36:17:a8:6f:41:c3:d9:60:9c:12:2b:b9:b8: 74:9d:68:04:97:1e:2c:8e:03:cf:ce:b5:d2:7b:0f: 01:8d:37:f1:aa:bd:82:24:d7:15:69:86:ed:7c:91: 9b:90:8a:d3:62:b5:a3:83:4c:8b:1b:8c:5e:77:07: 8e:2d:5d:1b:ba:16:a5:1f:f3:d0:21:a2:4a:3d:53: 45:58:5d:70:03:4e:e9:82:44:c8:b0:b6:28:10:ab: 42:9a:f8:86:b9:79:2b:97:00:e5:8b:63:f3:14:de: 42:b9:7b:db:d0:a0:1b:3f:77:e5:aa:09:81:68:94: c1:f1:e4:60:47:eb:2c:92:fc:2d:da:42:bb:95:ef: 12:1d:1b:e4:b9:59:1d:7e:4e:84:57:9d:16:3e:f9: 82:bc:77:03:73:d4:0c:5f:63:42:44:a2:42:d2:a3: a8:df:f8:d9:24:41:31:c3:70:d6:b2:86:0f:8d:4b: 20:7f:19:d5:cc:86:09:c1:ee:d6:3f:75:26:02:f6: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A4:A8:38:E0:5D:2F:E4:FD:FA:2F:C0:6A:F0:A4:4E:7F:06:18:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8b:5b:9d:35:9a:25:1e:5b:f1:07:23:14:bc:52:00:a8:72: 77:41:e0:10:de:b9:f9:0e:7e:2a:01:8d:b7:f9:32:41:a6:a5: b0:4e:17:74:dc:ec:c4:c7:b8:af:19:5f:ad:77:2f:2d:6a:3b: 5e:3a:0f:b9:1d:2e:58:93:e8:92:b5:f8:68:94:6c:47:86:93: 6a:21:c5:db:d4:28:ab:46:8e:bb:ae:4c:3d:5d:7b:83:01:2c: 1b:b8:7b:26:11:93:0c:58:90:42:0c:0b:2f:58:0a:0b:b4:26: b5:a2:d5:c3:20:a2:d4:78:1b:51:47:d8:51:5a:20:74:14:57: 57:18:c1:fa:f6:82:7a:d9:8e:bf:f7:0c:0b:5f:23:96:29:f0: 67:df:96:f1:c3:8d:e7:86:91:18:3b:dd:3d:6b:16:7b:17:ab: 03:f8:5e:9e:98:94:3a:72:7e:10:95:b4:3c:9b:46:37:94:91: 1b:78:32:97:1f:ac:2b:5e:77:13:a4:74:a3:cb:e1:0d:ce:b2: 00:bd:34:b7:27:ff:cb:14:b9:f4:0b:39:8b:87:1e:08:2a:07: 9d:7d:7e:72:2f:0c:9c:45:be:eb:c3:29:0c:f8:70:b5:07:5e: bf:b2:9e:bb:28:dd:3c:11:87:06:9f:bd:d1:78:1a:f8:e8:9e: 27:be:08:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxLmyzihqEiHH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODUzYzllN2EtOTA3Yy00N2NkLTg3ZmQtMjRmY2QxOTEyODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yrWA6v+Bg62wRq5MIdztIFiPny5pEC4U5Kw TF+ycsZFztjlUZLB2pahkcwS+fR6BgzHPJTjewhe+dr+ajYXqG9Bw9lgnBIrubh0 nWgElx4sjgPPzrXSew8BjTfxqr2CJNcVaYbtfJGbkIrTYrWjg0yLG4xedweOLV0b uhalH/PQIaJKPVNFWF1wA07pgkTIsLYoEKtCmviGuXkrlwDli2PzFN5CuXvb0KAb P3flqgmBaJTB8eRgR+sskvwt2kK7le8SHRvkuVkdfk6EV50WPvmCvHcDc9QMX2NC RKJC0qOo3/jZJEExw3DWsoYPjUsgfxnVzIYJwe7WP3UmAvbkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqkqDjgXS/k/fovwGrwpE5/Bhh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqLW501miUeW/EHIxS8UgCocndB4BDeufkOfioBjbf5MkGmpbBOF3Tc 7MTHuK8ZX613Ly1qO146D7kdLliT6JK1+GiUbEeGk2ohxdvUKKtGjruuTD1de4MB LBu4eyYRkwxYkEIMCy9YCgu0JrWi1cMgotR4G1FH2FFaIHQUV1cYwfr2gnrZjr/3 DAtfI5Yp8GfflvHDjeeGkRg73T1rFnsXqwP4Xp6YlDpyfhCVtDybRjeUkRt4Mpcf rCtedxOkdKPL4Q3OsgC9NLcn/8sUufQLOYuHHggqB519fnIvDJxFvuvDKQz4cLUH Xr+ynrso3TwRhwafvdF4Gvjonie+CNs= -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:21 2025 by rpki-client