This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa File: 9996e972-6eae-3d44-ad69-6a057d20eca9.roa (raw, json) Hash identifier: sqkKN0/mR4DhQpiMLX8nXmFY17MwI21m6/i30GxmraA= Subject key identifier: 24:1F:F7:1C:77:D8:5C:0A:34:E7:A8:A7:D7:5C:2A:76:16:82:9D:44 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584BD1CAFA5B5F24B0ED10C9C440 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 18258 IP address blocks: 209.8.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:ca:fa:5b:5f:24:b0:ed:10:c9:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=0fb79e3b-26d8-4be5-a8ae-e6200faeb241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:cf:ec:ac:e2:8e:c1:f6:31:bb:bd:e1:f8: 03:87:f7:17:4d:b1:e8:dd:05:63:c8:33:11:97:26: d2:ef:1b:d9:e3:36:54:0f:66:ac:68:48:08:16:8b: de:33:96:62:59:a6:d4:34:f9:6b:74:21:ed:75:75: 72:fd:90:27:8d:0d:83:5b:c5:86:c8:80:ba:87:82: a5:22:70:0a:dc:d2:fb:49:b3:16:81:2f:cf:ec:71: d3:c8:76:e5:8c:be:90:da:ff:0d:29:55:93:a3:a3: 2f:99:19:12:be:eb:b7:9a:0a:55:1a:db:c9:67:cb: 22:36:98:63:79:ad:84:97:fe:03:43:01:41:14:78: b5:1b:ae:81:0e:73:e1:da:79:9f:7b:04:5d:f7:e7: e7:e7:4b:9d:ba:c0:42:d7:27:f3:c7:32:82:e5:49: 84:d0:5f:b2:d1:16:c5:dd:57:bc:86:47:cd:da:6a: a5:a4:da:db:b2:5c:5e:c0:82:5e:19:91:6d:45:6d: dc:3b:1b:d3:5f:c3:66:7a:e6:05:d1:56:58:68:45: 5b:0d:b4:82:18:86:36:1d:90:c6:5b:76:ae:80:a5: 86:67:0b:22:02:fd:98:f0:92:ff:bc:b0:64:98:4d: 5a:b4:53:ae:67:8b:04:6a:b2:c4:0f:9c:61:e4:b0: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:F7:1C:77:D8:5C:0A:34:E7:A8:A7:D7:5C:2A:76:16:82:9D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:35:e7:c5:a8:24:5a:01:6b:07:7e:aa:19:a1:c8:5a:24:e1: 20:26:1d:95:b2:ed:ee:f4:23:cf:4d:4d:b9:74:7f:3a:76:66: 1e:b1:97:77:ed:8c:0b:a5:a9:1a:ec:e9:45:9b:6e:b3:3c:7b: b6:7b:e1:67:e9:98:45:00:23:6a:83:c4:b8:83:73:96:4e:00: 3d:82:b8:82:90:5d:d2:41:ad:2a:28:0a:ef:63:6b:43:a6:fa: 8d:3e:86:81:21:fe:1a:e3:7e:ce:1c:e2:2a:7c:3a:68:71:8c: 70:11:fd:bc:e1:e5:8b:98:31:dc:7d:c5:7a:47:80:69:30:11: 2e:e3:5f:1b:78:75:dc:f2:7a:1f:6b:80:15:f6:fb:78:f6:14: a1:66:09:ca:0e:68:c2:68:44:87:b9:e8:20:81:29:cd:fe:2a: 54:ad:67:85:a4:5d:e2:f8:75:4d:25:c0:b6:ef:9f:8a:96:d6: 79:f6:69:5c:da:59:ce:f6:be:f1:df:a4:e4:86:b5:c0:91:6a: e3:a8:74:83:a0:b3:1b:e9:6c:5b:5c:0a:2c:14:bc:8e:4f:e3: 03:04:cc:56:26:33:dd:39:b2:e4:95:a9:91:f9:04:b9:14:a2: 87:b3:62:4d:89:08:ca:8f:79:95:d1:9b:27:c9:e8:80:73:76: 5a:86:a7:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyvpbXySw7RDJxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MGZiNzllM2ItMjZkOC00YmU1LWE4YWUtZTYyMDBmYWViMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoPP7KzijsH2Mbu94fgDh/cXTbHo3QVjyDMR lybS7xvZ4zZUD2asaEgIFoveM5ZiWabUNPlrdCHtdXVy/ZAnjQ2DW8WGyIC6h4Kl InAK3NL7SbMWgS/P7HHTyHbljL6Q2v8NKVWTo6MvmRkSvuu3mgpVGtvJZ8siNphj ea2El/4DQwFBFHi1G66BDnPh2nmfewRd9+fn50udusBC1yfzxzKC5UmE0F+y0RbF 3Ve8hkfN2mqlpNrbslxewIJeGZFtRW3cOxvTX8NmeuYF0VZYaEVbDbSCGIY2HZDG W3augKWGZwsiAv2Y8JL/vLBkmE1atFOuZ4sEarLED5xh5LCl2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQf9xx32FwKNOeop9dcKnYWgp1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOTk5NmU5NzItNmVhZS0z ZDQ0LWFkNjktNmEwNTdkMjBlY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc158WoJFoBawd+qhmhyFok4SAmHZWy7e70I89NTbl0fzp2Zh6xl3ft jAulqRrs6UWbbrM8e7Z74WfpmEUAI2qDxLiDc5ZOAD2CuIKQXdJBrSooCu9ja0Om +o0+hoEh/hrjfs4c4ip8OmhxjHAR/bzh5YuYMdx9xXpHgGkwES7jXxt4ddzyeh9r gBX2+3j2FKFmCcoOaMJoRIe56CCBKc3+KlStZ4WkXeL4dU0lwLbvn4qW1nn2aVza Wc72vvHfpOSGtcCRauOodIOgsxvpbFtcCiwUvI5P4wMEzFYmM905suSVqZH5BLkU ooezYk2JCMqPeZXRmyfJ6IBzdlqGpzg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:19 2025 by rpki-client