This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa
File: a3de630d-0204-3526-b6ce-a52f3bdce272.roa (raw, json)
Hash identifier: 3wOYp1GlyV1zoYcwwSYStqR+tgBCkMoDzqaiaTqri4Y=
Subject key identifier: 7B:26:21:5B:F3:46:F1:89:E7:ED:F2:A8:6D:5C:86:32:DB:E9:5D:6B
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584C1630D4E0A5D624CBE8AB1300
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa
Signing time: Fri 05 Dec 2025 14:00:38 +0000
ROA not before: Fri 05 Dec 2025 14:00:38 +0000
ROA not after: Thu 05 Mar 2026 14:00:38 +0000
asID: 16417
IP address blocks: 68.232.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 19 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:16:30:d4:e0:a5:d6:24:cb:e8:ab:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Dec 5 14:00:38 2025 GMT
Not After : Mar 5 14:00:38 2026 GMT
Subject: CN=6a40ad1e-53e1-4672-8cbf-6f9577859e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:a2:35:60:28:2d:70:e8:12:31:a2:3c:1f:
fe:8e:97:ed:a8:57:e6:0d:e1:dc:27:4f:0c:ef:2b:
de:cd:c2:c1:ee:4d:da:1b:55:5f:d6:07:75:6a:04:
b4:c0:02:c8:59:91:50:7e:ab:43:3f:8c:c9:f6:16:
e0:78:2f:b9:e2:3a:54:f1:b4:21:76:11:40:7c:82:
f1:04:d3:99:df:f9:7f:69:35:0b:0a:bf:1a:f9:92:
6d:67:20:af:7a:22:41:8a:24:e7:2a:35:b9:62:22:
6e:bb:33:34:23:d6:e3:34:f3:fa:1b:72:cb:14:c0:
3c:87:a5:51:b2:da:70:01:ae:9c:06:f3:5a:c3:05:
6d:48:5e:43:91:4b:98:9c:f3:20:81:b2:8f:3e:bb:
51:36:de:b8:2a:63:22:8e:af:18:fe:1f:d4:7b:2c:
8b:9a:95:23:8e:23:14:dc:b6:36:7e:cf:dc:1f:b1:
52:ea:3c:f0:51:c8:b4:f5:7d:b7:a2:4f:03:58:2c:
df:13:e8:86:95:fe:cc:2d:ca:6e:6c:31:3f:51:39:
81:00:ed:29:e8:84:95:56:17:53:64:b1:7a:29:90:
25:5e:fe:ba:37:95:ed:c2:c4:b0:aa:c8:a4:e3:15:
56:1b:d2:40:a9:47:3b:be:46:1b:ef:04:b4:8a:a3:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:21:5B:F3:46:F1:89:E7:ED:F2:A8:6D:5C:86:32:DB:E9:5D:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:02:d1:ce:78:db:4e:a1:fb:e3:09:bb:72:f0:bb:75:7e:6f:
b1:4e:35:c2:5b:2b:9c:b4:cc:a1:4d:ce:cd:98:9c:b1:c9:32:
a9:78:b4:c9:33:08:24:e4:3d:7a:07:c3:06:5b:fe:c1:ed:12:
0d:16:fb:95:83:02:95:8d:10:f5:75:82:39:c4:26:4f:41:f1:
68:39:e5:0e:d7:5b:61:38:67:8d:01:9c:59:bd:17:53:85:8a:
b1:34:29:f6:84:e2:79:2a:2a:f0:bb:5d:5e:ae:14:01:aa:a3:
f9:fe:65:00:56:a1:f8:0c:d1:71:0d:4d:93:9f:b7:48:ae:c9:
d6:92:3a:d3:cb:a2:14:ea:fc:32:44:43:88:b8:41:8f:7c:55:
60:5c:77:e4:1a:c4:1b:3f:8a:db:9c:e0:e3:b2:4e:17:45:5c:
72:b1:73:e5:0d:c3:51:a3:3d:cc:e6:4b:0c:a1:95:b7:38:4e:
04:78:0c:96:f1:81:12:74:68:f5:0d:a9:b0:55:1e:cc:23:e1:
a0:0c:ff:0e:20:54:c1:73:53:a0:61:40:fc:2a:09:ce:8d:91:
89:39:74:35:a2:50:a1:1e:d5:7f:1d:de:79:ec:c5:0d:eb:ae:
f3:93:92:7d:91:48:c2:ce:cd:65:61:35:71:5b:c0:21:d8:ff:
fa:87:5f:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNTgpdYky+irEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk
NmE0MGFkMWUtNTNlMS00NjcyLThjYmYtNmY5NTc3ODU5ZTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3KiNWAoLXDoEjGiPB/+jpftqFfmDeHcJ08M
7yvezcLB7k3aG1Vf1gd1agS0wALIWZFQfqtDP4zJ9hbgeC+54jpU8bQhdhFAfILx
BNOZ3/l/aTULCr8a+ZJtZyCveiJBiiTnKjW5YiJuuzM0I9bjNPP6G3LLFMA8h6VR
stpwAa6cBvNawwVtSF5DkUuYnPMggbKPPrtRNt64KmMijq8Y/h/UeyyLmpUjjiMU
3LY2fs/cH7FS6jzwUci09X23ok8DWCzfE+iGlf7MLcpubDE/UTmBAO0p6ISVVhdT
ZLF6KZAlXv66N5XtwsSwqsik4xVWG9JAqUc7vkYb7wS0iqNnCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsmIVvzRvGJ5+3yqG1chjLb6V1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTNkZTYzMGQtMDIwNC0z
NTI2LWI2Y2UtYTUyZjNiZGNlMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMC0c54206h++MJu3Lwu3V+b7FONcJbK5y0zKFNzs2YnLHJMql4tMkz
CCTkPXoHwwZb/sHtEg0W+5WDApWNEPV1gjnEJk9B8Wg55Q7XW2E4Z40BnFm9F1OF
irE0KfaE4nkqKvC7XV6uFAGqo/n+ZQBWofgM0XENTZOft0iuydaSOtPLohTq/DJE
Q4i4QY98VWBcd+QaxBs/ituc4OOyThdFXHKxc+UNw1GjPczmSwyhlbc4TgR4DJbx
gRJ0aPUNqbBVHswj4aAM/w4gVMFzU6BhQPwqCc6NkYk5dDWiUKEe1X8d3nnsxQ3r
rvOTkn2RSMLOzWVhNXFbwCHY//qHX/g=
-----END CERTIFICATE-----
Generated at Wed Dec 17 17:04:42 2025 by rpki-client