This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa File: 89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json) Hash identifier: JBP9fL2VzGDMT5gseyFJ/5DO2XHx1N7+CdK95NPdZ5Y= Subject key identifier: BF:22:B5:E2:A8:48:81:4B:53:EF:40:F8:E7:5F:74:36:B6:E0:32:08 Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Certificate serial: 010D0C9F4328584BE3F075694F942C3D60473900 Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa Signing time: Mon 17 Nov 2025 14:00:39 +0000 ROA not before: Mon 17 Nov 2025 14:00:39 +0000 ROA not after: Sun 15 Feb 2026 14:00:39 +0000 asID: 393966 IP address blocks: 204.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e3:f0:75:69:4f:94:2c:3d:60:47:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Validity Not Before: Nov 17 14:00:39 2025 GMT Not After : Feb 15 14:00:39 2026 GMT Subject: CN=7aeafdd0-e131-4d6e-ba61-8b3b2ec72364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:63:44:e0:68:88:58:ca:db:a0:c9:71:c1: 7e:4a:6b:ff:06:1c:61:41:7e:c3:d3:88:5a:8f:e4: 7c:ca:2e:73:13:61:5e:89:6e:f6:f4:2b:f9:93:25: 74:b5:7d:a9:ed:cd:71:a4:36:29:9d:00:2f:da:e8: 08:c9:83:4c:8d:d5:65:c0:f6:4f:38:71:1b:9c:97: c6:ee:96:16:d3:84:d0:c1:7f:da:69:62:24:a9:bb: 47:1d:39:fd:cc:50:c0:18:75:fe:bf:25:d6:48:77: df:df:13:83:54:e2:ec:0d:e6:f3:b8:da:e1:19:fd: 16:e0:02:c6:f7:ff:0a:9e:ca:70:f4:9a:b7:0f:82: f0:02:be:ec:5a:1b:18:ae:87:97:aa:68:a1:47:5b: a5:82:5d:65:2a:45:78:69:98:77:45:26:0c:3e:3f: 54:a8:69:0e:d2:0a:38:ed:b3:17:be:12:9e:6f:d1: b8:d1:24:a0:6f:4e:ca:d7:e2:2b:03:29:ad:5a:5e: 30:e4:8d:1b:d7:e3:5d:49:8d:4c:7b:15:11:b8:74: 29:01:01:90:05:9d:89:06:8a:24:75:83:0a:32:0a: b7:6c:f3:d8:75:f9:81:70:2b:48:26:54:eb:b1:6d: 5e:cd:38:25:1c:d4:52:5d:bd:32:75:2e:61:25:0c: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:B5:E2:A8:48:81:4B:53:EF:40:F8:E7:5F:74:36:B6:E0:32:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl X509v3 Authority Key Identifier: keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer sbgp-ipAddrBlock: critical IPv4: 204.239.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:50:8d:72:e3:87:9e:46:ba:e9:1b:8c:dd:3a:d9:8a:46:c2: 90:60:d3:5e:53:e7:06:d0:36:64:70:f4:92:cd:ea:07:71:01: 0d:4e:00:e1:12:a9:fb:b7:71:83:f2:32:85:89:fa:e3:6e:fe: 6c:7a:44:ce:ed:ee:99:00:2d:e0:4f:ae:58:68:8b:78:5e:2e: b7:d7:15:04:92:57:18:b4:dd:bd:67:96:8f:23:1b:fb:2b:7d: 51:f7:9e:b1:ab:00:af:52:7e:5e:c0:52:15:94:27:ea:79:03: b9:7a:e4:02:8a:a6:b4:57:33:8f:e5:9b:d0:0a:97:8b:a7:c7: fb:ca:89:dd:e6:8d:2d:07:44:ce:6e:5f:7f:b7:38:e5:c4:12: 22:d3:8e:38:b8:f5:1c:df:7a:63:f3:39:02:39:36:cc:20:2e: a7:da:28:96:27:10:d6:af:d1:cb:b2:87:41:43:6b:57:d5:c2: c5:0e:20:b6:65:9f:71:de:b6:84:71:df:f5:03:c0:a0:1f:76: c3:34:63:0b:31:8c:da:44:0c:1d:41:e4:21:bb:b8:30:8a:d0: 72:76:39:74:48:56:24:1f:ef:4c:ae:f6:1a:c3:6e:80:60:2d: 37:e9:26:1d:2d:79:de:e6:1d:5c:93:02:17:2d:71:c2:82:2c: 97:57:de:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvj8HVpT5QsPWBHOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2N2UxMTEtOWQxOS00YzFlLWExZWYtODZmMTMzNjY5 YThlMB4XDTI1MTExNzE0MDAzOVoXDTI2MDIxNTE0MDAzOVowLzEtMCsGA1UEAxMk N2FlYWZkZDAtZTEzMS00ZDZlLWJhNjEtOGIzYjJlYzcyMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ9jROBoiFjK26DJccF+Smv/BhxhQX7D04ha j+R8yi5zE2FeiW729Cv5kyV0tX2p7c1xpDYpnQAv2ugIyYNMjdVlwPZPOHEbnJfG 7pYW04TQwX/aaWIkqbtHHTn9zFDAGHX+vyXWSHff3xODVOLsDebzuNrhGf0W4ALG 9/8Knspw9Jq3D4LwAr7sWhsYroeXqmihR1ulgl1lKkV4aZh3RSYMPj9UqGkO0go4 7bMXvhKeb9G40SSgb07K1+IrAymtWl4w5I0b1+NdSY1MexURuHQpAQGQBZ2JBook dYMKMgq3bPPYdfmBcCtIJlTrsW1ezTglHNRSXb0ydS5hJQwmJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8iteKoSIFLU+9A+OdfdDa24DIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMDY3 ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYxMzM2NjlhOGUvODlmZGJiYTUtYzMwNS0z YmYxLWJlMzgtMGQ5OTkwZjVmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDA2N2UxMTEtOWQxOS00YzFlLWEx ZWYtODZmMTMzNjY5YThlLzAwNjdlMTExLTlkMTktNGMxZS1hMWVmLTg2ZjEzMzY2 OWE4ZS5jcmwwHwYDVR0jBBgwFoAUlskWWwf6rfza/VMJjgMSFtSDko4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMDY3ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYx MzM2NjlhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNQjXLjh55GuukbjN062YpGwpBg015T5wbQNmRw9JLN6gdxAQ1OAOES qfu3cYPyMoWJ+uNu/mx6RM7t7pkALeBPrlhoi3heLrfXFQSSVxi03b1nlo8jG/sr fVH3nrGrAK9Sfl7AUhWUJ+p5A7l65AKKprRXM4/lm9AKl4unx/vKid3mjS0HRM5u X3+3OOXEEiLTjji49RzfemPzOQI5NswgLqfaKJYnENav0cuyh0FDa1fVwsUOILZl n3HetoRx3/UDwKAfdsM0YwsxjNpEDB1B5CG7uDCK0HJ2OXRIViQf70yu9hrDboBg LTfpJh0ted7mHVyTAhctccKCLJdX3ng= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:20 2025 by rpki-client