This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa File: 0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa (raw, json) Hash identifier: NmodVRJFl7CP/1VhZnvJpQHZN0VIZ5Llyy8cAXY7CzQ= Subject key identifier: 38:A5:87:92:D4:6A:08:78:88:EE:6D:2B:A1:55:5A:01:BA:CE:F9:F9 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584C109B642979A842BE02CED440 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 16509 IP address blocks: 216.157.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:64:29:79:a8:42:be:02:ce:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=431fb2d9-b5dd-4860-97bb-5ddfdb1d193d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:b4:5b:e6:c6:36:98:26:83:60:04:07:20: e0:d4:42:b4:53:b1:06:d4:10:86:d1:4d:55:9a:a6: 36:5d:a2:de:da:06:a8:90:77:44:53:a1:5b:6b:77: de:6d:5c:44:08:95:65:cc:12:80:69:c4:aa:fb:34: 40:1c:db:11:f9:74:89:a9:b3:f6:6e:7b:42:3c:b2: 3c:73:c7:72:0d:18:e8:1b:98:d4:12:55:e8:a0:d5: 6c:d9:b7:98:cc:45:0b:93:0c:70:e4:fe:01:1d:71: f7:ce:f2:c6:9d:61:c7:a8:6d:a2:4a:73:73:14:00: 0b:3a:ad:0a:ca:cc:d0:31:19:9b:aa:73:8b:9f:36: 8c:2e:a7:d9:d7:72:d9:29:54:e0:59:e4:c7:e4:5b: 22:7d:4b:79:3d:36:ac:f8:0b:df:3a:52:a0:e9:3c: ff:6c:d2:7e:e7:a4:ab:fc:04:8b:91:8b:24:ca:07: 29:3c:41:5b:cf:39:92:6d:b4:9f:5f:d5:5a:e4:6e: 5b:b7:60:b0:7f:fd:34:2a:98:cd:0f:6d:d0:4a:61: 27:4f:99:47:51:5d:cd:00:d1:47:1d:9c:46:f8:b3: 79:6f:41:bb:b3:5d:92:94:a3:6b:2f:13:6e:a5:bb: d6:a9:ca:95:6d:15:27:91:9d:ca:fb:4e:86:6f:e0: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A5:87:92:D4:6A:08:78:88:EE:6D:2B:A1:55:5A:01:BA:CE:F9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:91:f9:a0:b9:25:5e:a8:fb:bc:13:8c:aa:29:b5:42:c1:19: 90:67:10:d1:19:cc:8a:70:e6:8e:a9:11:2d:e6:fa:fc:40:d8: cd:db:31:88:ab:49:41:c2:7a:a2:35:2e:a2:75:b0:37:19:19: f5:24:36:c1:ba:28:0c:63:97:21:14:3e:3f:64:ae:cd:7e:ca: 58:14:36:8a:f5:9e:33:76:01:f7:60:0d:c2:69:4e:42:0a:ca: 71:18:de:d3:87:de:76:d7:58:ea:ee:17:3d:7a:bb:11:ea:8f: af:ee:49:8d:1c:5f:2a:de:78:10:d5:17:26:f8:de:78:fc:79: 22:80:6a:4d:fb:f2:99:d8:90:4e:46:30:8a:1e:0b:9a:b9:30: 0a:2b:d2:38:5c:fb:50:a6:64:d8:32:e0:01:eb:b3:31:68:19: 5e:84:c9:f4:50:c5:c9:b6:1c:a6:12:08:48:b3:8f:61:00:03: 3a:17:d7:85:11:2a:d3:a7:78:b4:37:0b:bf:e8:28:05:5a:14: 8d:f5:f5:ab:48:d6:eb:74:39:68:e1:53:cb:0d:25:17:1d:4e: ef:4f:78:78:92:e3:ac:b1:2f:c1:0f:4f:ab:2d:c0:ee:89:74: 64:3e:d1:41:d9:8c:49:9b:d6:98:f0:3d:14:c4:35:aa:1c:c2: d4:df:83:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm2QpeahCvgLO1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk NDMxZmIyZDktYjVkZC00ODYwLTk3YmItNWRkZmRiMWQxOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKS0W+bGNpgmg2AEByDg1EK0U7EG1BCG0U1V mqY2XaLe2gaokHdEU6Fba3febVxECJVlzBKAacSq+zRAHNsR+XSJqbP2bntCPLI8 c8dyDRjoG5jUElXooNVs2beYzEULkwxw5P4BHXH3zvLGnWHHqG2iSnNzFAALOq0K yszQMRmbqnOLnzaMLqfZ13LZKVTgWeTH5FsifUt5PTas+AvfOlKg6Tz/bNJ+56Sr /ASLkYskygcpPEFbzzmSbbSfX9Va5G5bt2Cwf/00KpjND23QSmEnT5lHUV3NANFH HZxG+LN5b0G7s12SlKNrLxNupbvWqcqVbRUnkZ3K+06Gb+AVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDilh5LUagh4iO5tK6FVWgG6zvn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGE5Y2VmNjUtZTU5YS0z ZjA4LTliNGEtZTdhYWY1MmJiNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2R+aC5JV6o+7wTjKoptULBGZBnENEZzIpw5o6pES3m+vxA2M3bMYir SUHCeqI1LqJ1sDcZGfUkNsG6KAxjlyEUPj9krs1+ylgUNor1njN2AfdgDcJpTkIK ynEY3tOH3nbXWOruFz16uxHqj6/uSY0cXyreeBDVFyb43nj8eSKAak378pnYkE5G MIoeC5q5MAor0jhc+1CmZNgy4AHrszFoGV6EyfRQxcm2HKYSCEizj2EAAzoX14UR KtOneLQ3C7/oKAVaFI319atI1ut0OWjhU8sNJRcdTu9PeHiS46yxL8EPT6stwO6J dGQ+0UHZjEmb1pjwPRTENaocwtTfg/A= -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:38 2025 by rpki-client