This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa File: 89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa (raw, json) Hash identifier: hNGf0g6QtxWSye/isVoE3msOd/3P+7L65NWZAgIQlks= Subject key identifier: A0:A9:EF:D9:2F:DA:9F:A2:F2:DA:E4:B1:C7:B1:B6:0D:8D:01:00:D6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BFD10F750E771903CBAC5D3D8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 397223 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:f7:50:e7:71:90:3c:ba:c5:d3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=38de7db2-88a3-4722-a45c-75e156ce763b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:93:22:0e:b5:4e:e9:8e:6d:52:0d:22:7c: 32:0c:8b:85:fa:80:97:b3:d3:38:43:32:83:1a:e0: 1f:e7:59:0f:35:8c:f3:88:83:5f:a6:0b:51:8f:05: d8:d9:e7:51:60:bd:f8:5c:7b:37:ff:d0:9c:3a:f1: 19:01:68:cb:37:bb:2f:da:c2:db:6d:a9:43:82:9f: cf:e6:22:32:76:19:5d:7a:46:97:62:b3:a4:03:4e: 83:11:fa:c4:a8:16:c6:3b:18:50:97:1d:e2:4f:bb: 16:d5:36:70:ba:c0:ae:b4:f9:29:c8:00:17:eb:d5: fe:42:f1:7e:54:82:4d:b1:73:40:ae:8a:50:d6:7d: a4:23:e6:d1:20:f3:9c:fb:94:2b:55:bb:89:fa:55: b6:cb:95:63:e9:9a:9f:88:1c:77:84:83:98:94:1a: 99:7e:9d:91:a3:91:25:d4:60:ae:7d:2f:87:d3:82: 51:09:d8:8a:d9:3c:27:bf:29:80:94:9f:08:ca:7c: b5:03:21:0a:4b:a5:79:c1:42:51:c1:6b:5b:03:2b: 1e:7e:e5:f9:e3:f1:d4:d8:7b:8b:73:d7:a5:eb:aa: 96:31:69:31:d3:04:de:df:6e:b7:23:d9:6c:22:ee: ac:00:97:75:dc:c7:6f:7c:89:91:c6:e3:50:7f:cd: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:EF:D9:2F:DA:9F:A2:F2:DA:E4:B1:C7:B1:B6:0D:8D:01:00:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:54:3b:28:4b:9d:06:9a:97:b5:69:3a:39:6e:b4:6d:44:4e: d1:5d:9c:70:4d:22:46:ea:05:42:ad:cd:12:e3:6b:37:07:6a: 24:fd:4c:a9:58:dd:b5:9c:24:25:dc:48:76:c2:e4:a0:fb:71: 0f:4a:7b:ce:b4:a7:61:60:94:80:61:15:6c:f2:b6:ab:5a:ac: 94:e3:1d:a8:8f:0b:40:e3:d6:74:55:4d:0c:7d:82:b8:dc:36: 58:38:ae:00:f1:6c:22:a6:c9:3a:ca:ac:84:c5:29:03:12:e1: f5:f6:f2:a3:08:c7:95:5f:5b:6c:04:7d:4b:74:60:61:6a:6d: c7:87:86:2d:c3:b8:a7:b1:7a:65:08:6d:6e:48:c0:6c:c7:7a: e7:84:a2:f2:40:16:61:8c:61:08:4c:6f:38:2d:7b:84:cb:b2: f4:e8:d1:e8:24:c6:00:28:af:5a:a8:72:29:dd:71:32:d4:e9: d8:4f:a9:94:3d:eb:21:fe:b9:45:9a:51:3c:02:38:ff:45:c2: 3a:c1:e3:b7:1a:b9:99:ce:3f:d1:bf:70:97:96:8b:94:c6:22: ef:74:82:36:71:41:c6:26:70:dd:84:34:14:bb:6b:5a:b0:8a: 3c:69:b7:c7:80:be:18:cb:5c:23:70:e8:9c:74:0a:e5:e7:8f: 20:d7:f8:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EPdQ53GQPLrF09gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MzhkZTdkYjItODhhMy00NzIyLWE0NWMtNzVlMTU2Y2U3NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaKTIg61TumObVINInwyDIuF+oCXs9M4QzKD GuAf51kPNYzziINfpgtRjwXY2edRYL34XHs3/9CcOvEZAWjLN7sv2sLbbalDgp/P 5iIydhldekaXYrOkA06DEfrEqBbGOxhQlx3iT7sW1TZwusCutPkpyAAX69X+QvF+ VIJNsXNAropQ1n2kI+bRIPOc+5QrVbuJ+lW2y5Vj6ZqfiBx3hIOYlBqZfp2Ro5El 1GCufS+H04JRCdiK2TwnvymAlJ8Iyny1AyEKS6V5wUJRwWtbAysefuX54/HU2HuL c9el66qWMWkx0wTe3263I9lsIu6sAJd13MdvfImRxuNQf82JuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCp79kv2p+i8trkscextg2NAQDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODljZjhjYmYtMWIzZi0z NDIzLTgxN2YtNjUwZjJmMmFkMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZUOyhLnQaal7VpOjlutG1ETtFdnHBNIkbqBUKtzRLjazcHaiT9TKlY 3bWcJCXcSHbC5KD7cQ9Ke860p2FglIBhFWzytqtarJTjHaiPC0Dj1nRVTQx9grjc Nlg4rgDxbCKmyTrKrITFKQMS4fX28qMIx5VfW2wEfUt0YGFqbceHhi3DuKexemUI bW5IwGzHeueEovJAFmGMYQhMbzgte4TLsvTo0egkxgAor1qocindcTLU6dhPqZQ9 6yH+uUWaUTwCOP9FwjrB47cauZnOP9G/cJeWi5TGIu90gjZxQcYmcN2ENBS7a1qw ijxpt8eAvhjLXCNw6Jx0CuXnjyDX+Dg= -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:49 2025 by rpki-client