This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa File: 87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa (raw, json) Hash identifier: UpWlbgnF8rSvDZMITv0LUBUXu7uuZpfuk1vbgyAadBE= Subject key identifier: DC:42:7B:4E:1E:D7:E5:96:EC:4B:2E:A1:60:46:A5:5D:92:C4:54:0F Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584BEDB5CD7F5903C7BB53B908C0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 36407 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:cd:7f:59:03:c7:bb:53:b9:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=327b3035-1dc7-4ec0-95a6-f72cd52fc046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:4c:8f:2b:f9:45:a3:e1:a9:83:95:c8:40: 5a:67:75:4d:00:a8:c7:6f:38:4c:a0:ac:33:a6:0e: a6:ab:c7:6a:0d:bf:4e:13:bf:ef:21:5b:41:70:0c: b1:50:9d:61:5e:ce:ad:37:19:69:88:10:20:8d:d7: 8e:c8:84:22:ba:20:ea:79:bf:a3:8e:da:5a:66:84: b3:4e:4f:9c:a7:5c:12:a4:df:9d:51:5b:03:82:ef: 18:67:ad:7b:a0:b8:7d:c0:5e:38:f5:71:4e:a8:b1: 39:af:34:7c:5b:66:40:6d:7e:ca:7a:e2:40:f3:47: f3:25:79:8c:a7:47:3b:54:7f:7a:93:ad:97:bf:45: a4:a0:0f:31:2a:64:5a:10:a5:b2:4f:ba:08:2c:94: ea:14:d8:94:ab:21:a2:50:94:f8:a0:a5:c3:a1:87: bd:f9:51:77:2a:0f:4d:62:4d:9c:d4:fe:3b:2d:64: 2f:0b:d0:ae:73:a6:ba:2f:0b:8f:9c:d9:76:15:3e: e5:af:9e:0f:7e:86:89:70:ee:4d:6f:d4:91:48:ac: 54:5a:39:d5:42:d2:42:7a:7c:51:28:71:59:0a:40: 91:cc:8c:69:9e:1a:5b:98:e9:36:0f:10:e9:1f:b5: 42:36:86:8e:70:57:c8:db:ff:99:22:e8:f6:33:b2: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:42:7B:4E:1E:D7:E5:96:EC:4B:2E:A1:60:46:A5:5D:92:C4:54:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:aa:c3:95:95:b7:4a:cc:b1:df:94:2c:d4:3d:cb:8d:41:11: ce:a6:4b:3a:8a:c3:6c:4b:7e:95:db:98:3c:3d:b2:c7:3a:44: ea:4c:14:23:a4:3d:8f:ff:ed:64:17:df:d4:30:89:59:c7:58: 24:52:c9:64:38:4b:cb:53:30:30:e9:02:30:8d:b9:30:11:5a: c2:bc:11:f5:7b:1f:37:f4:23:ba:e0:57:cf:d0:66:ea:f1:c8: d5:b0:e9:54:bd:d7:d0:71:5e:9f:69:91:4f:88:71:33:3a:c0: 2c:83:18:77:c9:a9:76:07:9c:4b:93:bc:51:46:16:5a:f0:74: fe:f7:68:64:57:a3:71:8d:3d:2f:47:f5:5f:7c:bd:65:93:55: 2d:c1:e7:fd:00:05:2e:cb:c4:17:e1:35:76:bb:3b:2a:fb:b7: 72:7d:83:39:ba:e1:ed:31:2d:bb:cf:15:0c:3b:e5:30:32:eb: b6:7b:1c:a7:3b:dc:8a:89:0a:7b:f7:c3:55:0f:90:94:7a:eb: be:57:58:f6:56:41:35:da:c5:75:03:4b:83:38:19:48:6b:af: 10:29:6b:ce:f5:45:19:4a:d9:b8:21:4b:d7:70:6f:1c:c3:73: 44:67:dd:51:6c:9f:e2:be:55:cb:0d:b4:48:31:b8:66:d5:20: 2c:77:22:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttc1/WQPHu1O5CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk MzI3YjMwMzUtMWRjNy00ZWMwLTk1YTYtZjcyY2Q1MmZjMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHNMjyv5RaPhqYOVyEBaZ3VNAKjHbzhMoKwz pg6mq8dqDb9OE7/vIVtBcAyxUJ1hXs6tNxlpiBAgjdeOyIQiuiDqeb+jjtpaZoSz Tk+cp1wSpN+dUVsDgu8YZ617oLh9wF449XFOqLE5rzR8W2ZAbX7KeuJA80fzJXmM p0c7VH96k62Xv0WkoA8xKmRaEKWyT7oILJTqFNiUqyGiUJT4oKXDoYe9+VF3Kg9N Yk2c1P47LWQvC9Cuc6a6LwuPnNl2FT7lr54PfoaJcO5Nb9SRSKxUWjnVQtJCenxR KHFZCkCRzIxpnhpbmOk2DxDpH7VCNoaOcFfI2/+ZIuj2M7K4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxCe04e1+WW7EsuoWBGpV2SxFQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvODdhNWY1NzEtM2NmYS0z NGM2LThlYzItMTEwZWU3MTQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmqw5WVt0rMsd+ULNQ9y41BEc6mSzqKw2xLfpXbmDw9ssc6ROpMFCOk PY//7WQX39QwiVnHWCRSyWQ4S8tTMDDpAjCNuTARWsK8EfV7Hzf0I7rgV8/QZurx yNWw6VS919BxXp9pkU+IcTM6wCyDGHfJqXYHnEuTvFFGFlrwdP73aGRXo3GNPS9H 9V98vWWTVS3B5/0ABS7LxBfhNXa7Oyr7t3J9gzm64e0xLbvPFQw75TAy67Z7HKc7 3IqJCnv3w1UPkJR6675XWPZWQTXaxXUDS4M4GUhrrxApa871RRlK2bghS9dwbxzD c0Rn3VFsn+K+VcsNtEgxuGbVICx3Ii0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:03 2025 by rpki-client