This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: TZfaO5n26zmLkVHF5NLLUN8jI/8DlvFZ3j2XrPImz10= Subject key identifier: E0:D2:FC:5F:7B:D4:F1:B6:D6:94:9A:B8:E9:FC:D2:9E:42:E9:D5:0B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584C1630CF300355832A3CC5F140 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:cf:30:03:55:83:2a:3c:c5:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=9e39e773-09a9-4460-8917-560fda00827b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:d2:f1:22:34:02:d7:3d:68:95:60:90:f7: e6:31:b5:49:7f:ff:48:d0:12:9e:e0:3a:35:3d:79: c8:98:ba:63:f3:70:61:49:3f:c5:66:5f:20:01:5b: c9:27:4c:ea:be:30:d7:9c:a5:03:ca:54:03:8d:43: 84:f8:fa:d7:6d:c9:e4:9d:c3:dc:e2:be:78:86:60: 15:b2:49:a6:3c:08:d4:5f:d2:8b:7d:ca:5c:6e:72: b9:28:38:34:00:9a:7d:71:8c:e8:d2:d5:e5:50:f5: 26:23:ad:57:a7:50:27:00:22:cf:f1:f8:15:02:10: 55:2e:b4:cc:f7:04:aa:25:6d:69:df:40:e9:c9:d3: c5:6f:06:32:20:f0:5c:e8:27:9b:3c:6d:2c:a0:e9: 46:d8:94:1b:ca:2a:23:0b:17:d9:5d:48:5c:99:bb: e8:d0:98:a4:00:52:a9:79:f0:13:cd:8c:27:37:c8: 5d:f9:0c:f2:2e:57:d5:6b:75:90:b4:37:c2:14:44: 78:a3:cc:7d:37:14:05:78:84:51:5e:c9:66:68:1f: 4d:bc:73:5a:3d:3c:dd:16:93:72:a5:12:8b:22:83: c5:82:1b:b7:2e:7a:3e:a5:b1:a3:c0:0e:cf:e9:90: 8d:d0:88:8b:02:18:38:7b:4b:73:a3:23:aa:f8:9e: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D2:FC:5F:7B:D4:F1:B6:D6:94:9A:B8:E9:FC:D2:9E:42:E9:D5:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:81:96:21:75:43:88:e7:5c:94:76:fb:b4:7b:d4:50:cb:95: 59:87:e8:fd:8c:4d:0d:81:77:30:9e:dd:fa:80:90:4c:0c:89: ab:48:67:a3:28:6b:98:21:cf:b0:86:74:0c:99:ca:9b:db:24: 0e:5e:4f:b7:ef:63:db:18:20:73:44:02:cb:11:df:90:c9:9d: 88:ad:f5:f9:9a:7d:9a:4e:2a:6b:93:c2:7c:e7:4c:8e:f6:c3: 19:1b:5a:19:a6:58:0e:50:5b:73:6e:fb:db:b9:f4:0c:59:a5: 5d:3f:b0:85:c9:f7:0a:d6:d1:00:e6:8e:49:35:c2:07:14:1f: 84:76:90:c1:2e:9e:98:b5:8a:8b:92:c7:40:93:1c:c2:9c:35: 4b:07:a0:d7:2b:51:52:1f:d2:1b:53:f7:10:2b:74:1e:31:8e: c6:3b:f4:f2:38:e6:d8:d4:52:f8:5b:b9:f0:68:11:c4:49:96: fb:ec:64:b1:e7:2a:a9:4c:c6:78:64:71:33:a9:2e:df:20:30: e4:09:a5:1c:79:6a:99:18:a6:a1:f9:06:d8:a5:5a:cd:2f:65: 28:ac:1d:01:5d:de:ff:7e:5a:30:d6:af:ea:5a:b4:1b:d5:b0: 5a:4b:e0:d6:c2:95:f8:21:85:3f:67:bd:ce:f5:43:c1:bc:0e: c6:5e:be:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMM8wA1WDKjzF8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk OWUzOWU3NzMtMDlhOS00NDYwLTg5MTctNTYwZmRhMDA4MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcHS8SI0Atc9aJVgkPfmMbVJf/9I0BKe4Do1 PXnImLpj83BhST/FZl8gAVvJJ0zqvjDXnKUDylQDjUOE+PrXbcnkncPc4r54hmAV skmmPAjUX9KLfcpcbnK5KDg0AJp9cYzo0tXlUPUmI61Xp1AnACLP8fgVAhBVLrTM 9wSqJW1p30DpydPFbwYyIPBc6CebPG0soOlG2JQbyiojCxfZXUhcmbvo0JikAFKp efATzYwnN8hd+QzyLlfVa3WQtDfCFER4o8x9NxQFeIRRXslmaB9NvHNaPTzdFpNy pRKLIoPFghu3Lno+pbGjwA7P6ZCN0IiLAhg4e0tzoyOq+J5nJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODS/F971PG21pSauOn80p5C6dULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGBliF1Q4jnXJR2+7R71FDLlVmH6P2MTQ2BdzCe3fqAkEwMiatIZ6Mo a5ghz7CGdAyZypvbJA5eT7fvY9sYIHNEAssR35DJnYit9fmafZpOKmuTwnznTI72 wxkbWhmmWA5QW3Nu+9u59AxZpV0/sIXJ9wrW0QDmjkk1wgcUH4R2kMEunpi1iouS x0CTHMKcNUsHoNcrUVIf0htT9xArdB4xjsY79PI45tjUUvhbufBoEcRJlvvsZLHn KqlMxnhkcTOpLt8gMOQJpRx5apkYpqH5BtilWs0vZSisHQFd3v9+WjDWr+patBvV sFpL4NbClfghhT9nvc71Q8G8DsZevro= -----END CERTIFICATE-----Generated at Wed Dec 17 17:05:02 2025 by rpki-client