This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa File: 7f02fce9-3961-3b18-8795-ab236c2e0478.roa (raw, json) Hash identifier: vA10OdJPe6kNH8vykZWaBl1nxGhsF7OqOMRlPzVPUHg= Subject key identifier: AF:75:15:83:EF:58:C3:09:89:D8:AD:93:FE:63:D9:FC:E1:89:03:90 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584BF4B092ECE084026A2132DB80 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 170.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:92:ec:e0:84:02:6a:21:32:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=9f2d7087-4fed-4587-8168-3f7fab03a727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:42:27:27:93:63:d4:70:ca:52:ac:7c:e4: 06:47:57:dd:29:29:1e:69:f7:2f:f2:b2:64:9e:22: 37:9d:cd:07:8b:c6:38:96:91:5f:7a:37:bc:17:c2: 62:37:ff:1a:be:4e:38:57:70:15:d2:34:a3:66:da: 3a:50:19:d4:45:9e:05:ee:c9:12:c2:5e:92:89:7c: ac:56:43:fb:6d:26:37:34:1b:f6:ba:40:fb:8f:15: c3:f4:66:19:b2:b4:dc:4c:6f:2d:92:c5:1b:e7:db: 82:55:33:7f:83:d8:70:f0:0d:2c:cb:eb:7f:4f:ac: fa:66:5d:34:55:7f:08:c2:f1:47:9a:37:fe:c6:c2: 87:cf:a7:fa:5d:dd:fe:90:c6:86:10:cc:41:0c:38: 56:14:ae:42:d6:e2:15:01:63:8a:44:8b:3a:bf:48: 3a:ad:ea:5b:b9:4f:71:01:30:d2:69:cd:3d:79:51: 87:52:eb:71:1e:1b:8b:5e:e7:e9:a1:a5:b0:d3:70: a3:dc:7b:66:76:03:66:7e:34:ce:b1:5e:b7:5a:19: 62:be:2f:c4:3c:12:0b:85:9f:3a:96:8f:64:19:33: da:24:5c:0f:f5:f0:8c:d9:9d:ce:c8:3a:da:dc:39: 40:78:9b:4c:86:3f:13:f7:52:b9:b8:20:e9:4c:a8: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:75:15:83:EF:58:C3:09:89:D8:AD:93:FE:63:D9:FC:E1:89:03:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:2b:69:0d:aa:57:6b:45:d5:2e:91:8b:1a:dc:b0:a0:31:91: 12:6a:3f:2e:3c:b5:fd:87:55:c9:86:4b:9f:be:53:f3:ab:61: 54:37:c2:c4:3b:98:85:b6:28:28:bc:8a:5a:57:1d:2c:54:70: 8f:b7:f3:75:8c:5b:25:29:e6:37:c3:58:f6:e7:a5:5c:41:12: c3:f1:f3:1c:3b:01:41:e7:21:ac:e4:0a:45:92:38:44:41:7d: 4c:76:1f:b6:cb:c0:45:15:c5:ab:67:06:0a:1f:83:30:e9:42: e8:ee:6f:49:3a:4b:7e:b9:c2:68:f4:05:31:e5:2f:b4:2f:e3: a3:6c:ba:61:23:84:f8:f5:a7:9d:4c:4e:9b:77:ae:66:7a:3a: 7e:4a:ff:c0:be:4e:57:88:87:ea:58:31:f2:95:d9:78:22:1b: a0:e2:88:33:8c:c2:01:e2:eb:a7:eb:52:e3:0b:a7:71:6f:8f: 49:c1:75:83:5d:44:ed:db:b6:0f:75:03:c9:41:6f:3d:cf:fc: 86:16:98:17:b1:22:cc:08:38:3b:a1:d8:9c:4d:2e:66:bf:94: 78:19:bb:da:40:ed:cf:fa:e0:6e:61:8a:34:88:80:8a:fd:48: a3:29:86:10:a7:f0:08:27:62:c7:a4:d3:82:54:e4:96:4c:80: b8:d8:a0:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sJLs4IQCaiEy24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk OWYyZDcwODctNGZlZC00NTg3LTgxNjgtM2Y3ZmFiMDNhNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYZCJyeTY9RwylKsfOQGR1fdKSkeafcv8rJk niI3nc0Hi8Y4lpFfeje8F8JiN/8avk44V3AV0jSjZto6UBnURZ4F7skSwl6SiXys VkP7bSY3NBv2ukD7jxXD9GYZsrTcTG8tksUb59uCVTN/g9hw8A0sy+t/T6z6Zl00 VX8IwvFHmjf+xsKHz6f6Xd3+kMaGEMxBDDhWFK5C1uIVAWOKRIs6v0g6repbuU9x ATDSac09eVGHUutxHhuLXufpoaWw03Cj3HtmdgNmfjTOsV63Whlivi/EPBILhZ86 lo9kGTPaJFwP9fCM2Z3OyDra3DlAeJtMhj8T91K5uCDpTKj05QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK91FYPvWMMJiditk/5j2fzhiQOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvN2YwMmZjZTktMzk2MS0z YjE4LTg3OTUtYWIyMzZjMmUwNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUraQ2qV2tF1S6RixrcsKAxkRJqPy48tf2HVcmGS5++U/OrYVQ3wsQ7 mIW2KCi8ilpXHSxUcI+383WMWyUp5jfDWPbnpVxBEsPx8xw7AUHnIazkCkWSOERB fUx2H7bLwEUVxatnBgofgzDpQujub0k6S365wmj0BTHlL7Qv46NsumEjhPj1p51M Tpt3rmZ6On5K/8C+TleIh+pYMfKV2XgiG6DiiDOMwgHi66frUuMLp3Fvj0nBdYNd RO3btg91A8lBbz3P/IYWmBexIswIODuh2JxNLma/lHgZu9pA7c/64G5hijSIgIr9 SKMphhCn8AgnYsek04JU5JZMgLjYoLo= -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:32 2025 by rpki-client