This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json) Hash identifier: oktQW4HyvfSDc6NTxyaCqg4OPPhFNL32P8u+AMU8pnE= Subject key identifier: 85:D1:57:05:85:46:83:31:C4:C0:A2:AA:8B:B9:81:6F:EF:D4:83:9F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584C1630CED60AC922FFD2D34980 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 16417 IP address blocks: 139.138.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:ce:d6:0a:c9:22:ff:d2:d3:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=81e06fd7-87f3-4d90-81e6-c0a0f5aa3d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1f:ea:24:5b:8b:6d:30:bb:91:bb:0f:23:90: cf:58:9c:55:fc:1b:89:ac:c4:36:2f:09:8d:2d:84: 8f:5e:3c:02:0e:dc:f8:87:c4:ef:21:c1:53:27:90: b9:c9:50:1c:28:8b:5b:70:2d:1b:ad:8f:05:64:38: 08:fb:0d:4c:55:44:3f:73:ce:c9:e7:5d:c5:26:a4: a0:13:f0:5e:8b:7d:95:f1:ed:58:5c:91:c0:b4:12: 49:18:fa:09:41:b8:24:3f:fb:e2:50:9f:53:27:97: 53:9d:42:5f:04:66:3c:e9:d0:c4:2e:12:1d:da:31: 76:fb:98:d0:b8:e6:7b:73:1d:a1:f6:fa:26:1c:f6: 10:a1:68:ce:b5:1f:16:c0:ef:0a:bb:9f:c2:9d:90: c3:e2:3a:a0:7b:2c:25:6d:d2:54:d6:e3:8f:f0:e1: d3:ef:a1:01:ff:36:be:10:70:43:b6:c2:ea:10:27: a1:9c:34:fe:2c:a3:26:6a:1c:cf:de:2d:bc:f4:8e: 6e:8b:86:79:d9:76:e1:8f:b8:b6:46:c9:9c:2c:4b: fa:20:c9:f2:ee:99:5c:72:87:e7:bb:f4:b5:f4:d5: 27:cc:d3:33:ed:cc:8d:56:9d:af:71:e8:0c:53:9a: e8:62:ef:85:ba:97:c0:68:36:b1:9f:cc:70:e4:53: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:57:05:85:46:83:31:C4:C0:A2:AA:8B:B9:81:6F:EF:D4:83:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:2a:33:8f:9f:f4:c4:6f:17:a1:6a:48:05:a2:f0:0f:34:70: 2a:0f:8d:56:9c:36:4f:67:3d:46:23:63:25:b7:14:7c:49:9f: 61:d2:ad:00:c9:3e:c8:6f:01:26:55:53:83:a6:18:fe:84:86: c6:38:fa:91:d7:09:87:b1:05:9c:4d:d2:10:20:a4:52:e7:d8: b0:78:fa:04:f5:55:28:7a:63:58:ce:02:b3:b1:ec:ac:e3:cd: 9f:6f:8b:84:e5:5b:93:ad:b0:26:41:c6:70:79:13:59:b0:a6: 0c:3d:55:f9:74:16:dc:8f:02:71:d7:9d:60:e8:4f:9b:00:cb: a8:36:9d:50:ec:12:70:22:5f:ba:29:fa:63:02:56:e9:af:9f: 63:b8:48:f0:bc:9e:65:d7:b0:f5:b8:87:ce:e5:c9:f5:9d:92: f0:18:1b:a2:c2:ca:6a:39:b5:c0:3a:6a:8b:86:ad:bb:dc:04: e9:3f:2e:67:4b:ce:70:07:5b:a4:31:42:e9:bb:c7:d1:70:55: 8d:f6:2d:db:54:e3:d7:5a:38:73:84:18:25:a5:fa:84:3c:e8: 2d:03:9d:22:60:b6:bc:44:b6:fb:61:42:fe:c7:17:07:f0:8a: d4:b7:02:ab:f2:0c:60:5c:9e:0d:96:84:c1:44:55:97:6e:95: c4:f2:8d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMM7WCski/9LTSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ODFlMDZmZDctODdmMy00ZDkwLTgxZTYtYzBhMGY1YWEzZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB/qJFuLbTC7kbsPI5DPWJxV/BuJrMQ2LwmN LYSPXjwCDtz4h8TvIcFTJ5C5yVAcKItbcC0brY8FZDgI+w1MVUQ/c87J513FJqSg E/Bei32V8e1YXJHAtBJJGPoJQbgkP/viUJ9TJ5dTnUJfBGY86dDELhId2jF2+5jQ uOZ7cx2h9vomHPYQoWjOtR8WwO8Ku5/CnZDD4jqgeywlbdJU1uOP8OHT76EB/za+ EHBDtsLqECehnDT+LKMmahzP3i289I5ui4Z52Xbhj7i2RsmcLEv6IMny7plccofn u/S19NUnzNMz7cyNVp2vcegMU5roYu+FupfAaDaxn8xw5FPvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXRVwWFRoMxxMCiqou5gW/v1IOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsqM4+f9MRvF6FqSAWi8A80cCoPjVacNk9nPUYjYyW3FHxJn2HSrQDJ PshvASZVU4OmGP6EhsY4+pHXCYexBZxN0hAgpFLn2LB4+gT1VSh6Y1jOArOx7Kzj zZ9vi4TlW5OtsCZBxnB5E1mwpgw9Vfl0FtyPAnHXnWDoT5sAy6g2nVDsEnAiX7op +mMCVumvn2O4SPC8nmXXsPW4h87lyfWdkvAYG6LCymo5tcA6aouGrbvcBOk/LmdL znAHW6QxQum7x9FwVY32LdtU49daOHOEGCWl+oQ86C0DnSJgtrxEtvthQv7HFwfw itS3AqvyDGBcng2WhMFEVZdulcTyjfw= -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:04 2025 by rpki-client