This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa File: dc659b2e-e1ec-3398-a84f-1a0622493eed.roa (raw, json) Hash identifier: +XkBThHfcEaPaNG08p3GjkNvyNtBzrAFSFc4CZ5i8Dg= Subject key identifier: 1C:27:8D:4D:1B:8F:02:C4:11:8B:53:AF:71:B9:9B:3E:83:09:2A:CA Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584BF4B092AF969DD72111813440 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 14618 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:92:af:96:9d:d7:21:11:81:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=a9cd7bb9-380a-4984-8d36-aec1971879eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:01:b9:f0:8b:0b:b6:9e:b1:a1:c4:cb:98: 85:e8:7c:44:f6:5b:69:e4:08:bb:3c:c0:75:02:66: 39:40:70:9c:40:f9:9e:98:6d:3a:2c:87:68:c1:c5: dc:58:1c:3c:ed:57:28:09:55:e7:50:6e:13:86:a8: 19:da:66:7c:3f:18:e3:1e:64:9a:74:5a:d7:dd:82: a1:c2:70:4c:b0:e8:d5:9b:55:76:4f:b9:e1:25:30: fb:71:15:34:2a:4d:31:da:38:20:35:27:a3:e6:4a: 0f:ef:6f:dd:11:26:86:3f:be:41:25:6f:a0:25:85: b6:0e:e8:40:0e:2d:01:dd:a8:3c:66:43:7c:e8:0c: a1:71:d4:84:a1:51:d4:3b:d8:78:ae:64:db:d8:a3: b2:f8:9c:28:4b:b1:4b:cc:7f:a7:dd:6e:54:83:50: 5c:d5:a2:ae:61:93:3e:52:8b:b9:b0:c2:7f:cd:b3: 23:e5:65:3c:d1:68:20:c1:5a:58:99:8a:95:16:c0: 8b:34:ef:aa:9f:8b:ef:61:9a:28:7e:17:26:a1:fb: 93:ef:14:2b:3e:16:b3:c6:98:47:a8:56:1e:46:bc: c4:01:a6:13:4c:f7:9a:d2:8e:0e:3b:c1:a3:4a:56: e8:69:32:b3:98:dd:5a:69:f3:88:3d:6f:75:c2:5a: 55:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:27:8D:4D:1B:8F:02:C4:11:8B:53:AF:71:B9:9B:3E:83:09:2A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:28:4b:de:8e:61:bf:c7:d9:7a:f6:b7:21:d6:16:f8:40:3a: 3d:f0:b2:80:1d:07:c0:f8:12:44:b5:a8:a4:1f:38:a3:56:89: 2d:e6:e6:a9:0d:8a:1f:a0:2b:fb:7a:dc:64:b2:c8:08:76:bc: fd:a0:7b:65:77:e4:4f:c2:2b:40:a7:28:f1:38:b4:a3:e3:56: db:f6:c9:18:6c:d6:26:33:de:03:33:d5:ff:d3:7e:b1:d2:ea: be:07:c9:9b:ad:44:8d:0f:3f:3c:41:59:33:09:98:e3:a4:0e: f5:b0:b4:9d:9f:79:80:c7:47:40:15:cc:8e:ce:3d:f0:1b:0e: 31:f8:b5:77:1f:c0:08:fa:32:50:34:70:f1:9f:c8:67:6c:a0: 3c:af:fe:7f:66:fc:aa:19:0d:33:0c:08:fc:cb:d9:91:87:e8: 45:49:eb:47:66:05:bc:9f:30:6d:17:ef:a2:aa:f0:3e:7a:2d: 39:13:59:1c:5b:81:6e:6e:0e:0b:96:8a:7b:b2:bd:76:41:a4: ef:96:80:59:56:b7:2d:1b:12:8e:fc:bc:f3:cf:60:58:4e:2a: 00:44:20:0a:30:7a:6c:c7:e0:57:45:3f:88:ae:5f:7f:a2:2e: c6:4c:d4:41:db:7e:cf:f7:6d:8d:11:1b:af:be:e3:b2:ea:d4: 34:79:19:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sJKvlp3XIRGBNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTljZDdiYjktMzgwYS00OTg0LThkMzYtYWVjMTk3MTg3OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrwBufCLC7aesaHEy5iF6HxE9ltp5Ai7PMB1 AmY5QHCcQPmemG06LIdowcXcWBw87VcoCVXnUG4ThqgZ2mZ8PxjjHmSadFrX3YKh wnBMsOjVm1V2T7nhJTD7cRU0Kk0x2jggNSej5koP72/dESaGP75BJW+gJYW2DuhA Di0B3ag8ZkN86AyhcdSEoVHUO9h4rmTb2KOy+JwoS7FLzH+n3W5Ug1Bc1aKuYZM+ Uou5sMJ/zbMj5WU80WggwVpYmYqVFsCLNO+qn4vvYZoofhcmofuT7xQrPhazxphH qFYeRrzEAaYTTPea0o4OO8GjSlboaTKzmN1aafOIPW91wlpVtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwnjU0bjwLEEYtTr3G5mz6DCSrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZGM2NTliMmUtZTFlYy0z Mzk4LWE4NGYtMWEwNjIyNDkzZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4oS96OYb/H2Xr2tyHWFvhAOj3wsoAdB8D4EkS1qKQfOKNWiS3m5qkN ih+gK/t63GSyyAh2vP2ge2V35E/CK0CnKPE4tKPjVtv2yRhs1iYz3gMz1f/TfrHS 6r4HyZutRI0PPzxBWTMJmOOkDvWwtJ2feYDHR0AVzI7OPfAbDjH4tXcfwAj6MlA0 cPGfyGdsoDyv/n9m/KoZDTMMCPzL2ZGH6EVJ60dmBbyfMG0X76Kq8D56LTkTWRxb gW5uDguWinuyvXZBpO+WgFlWty0bEo78vPPPYFhOKgBEIAowemzH4FdFP4iuX3+i LsZM1EHbfs/3bY0RG6++47Lq1DR5Gds= -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:11 2025 by rpki-client