This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json) Hash identifier: g4oby2SZM2bfBaeJjsveqwkm/yMANPsIzanxzqN4AhE= Subject key identifier: D8:5A:77:E2:6E:83:C0:0A:2E:05:E3:28:14:68:CA:7D:66:21:4C:D1 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584C1A60C6EF85B899BF8800CF40 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 398420 IP address blocks: 208.89.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:c6:ef:85:b8:99:bf:88:00:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=8219c66f-eebb-4cd6-a022-4254c75214d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:32:b7:c1:dd:e9:5e:8b:f1:0f:78:e2:cc: c6:b5:3a:fc:a7:40:fd:f7:eb:a6:06:a3:99:d5:d6: 32:91:4d:9f:d3:8c:82:f7:0a:3d:80:c3:3a:62:b3: f6:fa:3a:43:bd:27:a6:42:ec:ef:46:4a:5b:18:57: 1c:6d:0d:76:d7:12:5d:8f:b7:75:49:af:b7:64:21: 9b:a4:c8:db:81:b1:4a:7a:4f:fe:86:40:99:51:6e: d7:2d:b2:d4:4c:23:24:1d:17:43:44:d0:4b:d5:ea: 25:e0:6a:f0:fe:c6:57:e9:87:c2:ff:eb:c9:94:c3: 9e:96:65:c4:ec:e9:cc:16:dd:42:aa:bb:48:1a:4f: 1f:d8:1d:95:33:e8:12:d0:14:84:32:45:cf:16:4b: a8:5e:57:6c:d8:c0:16:16:96:88:6a:34:f2:fa:f5: da:bd:10:41:b1:1f:c4:71:90:d8:ec:d6:2a:00:97: 80:c8:d5:85:49:3f:da:15:10:a7:6c:ec:74:db:01: ce:95:4f:5b:df:51:97:05:44:18:0a:7f:45:35:d4: 3c:70:a2:50:23:fe:eb:93:3e:ec:27:07:22:b9:74: 87:c3:09:fe:6f:96:5c:f0:9b:92:f5:b7:28:2f:a8: de:e0:63:9b:c5:24:c1:bf:a6:c0:e5:b8:ae:02:73: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5A:77:E2:6E:83:C0:0A:2E:05:E3:28:14:68:CA:7D:66:21:4C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7e:53:5a:b6:00:98:29:36:e8:39:f3:0f:c0:f7:71:c4:81: 96:93:00:64:25:09:64:e1:8b:c9:ea:2d:1d:85:1a:ea:3d:1a: 59:4f:e2:a6:77:99:da:93:ad:46:71:0c:d1:53:7a:87:95:b8: 41:ec:ed:f6:5e:a9:33:28:f8:60:16:91:4e:f6:f2:48:7d:0c: a1:5d:9e:8f:d4:65:a3:cb:94:f9:ee:88:a5:ef:3f:36:bc:be: 64:69:d2:19:32:97:7e:e1:cc:94:d1:e0:ee:c4:21:3b:62:1b: 93:7d:45:ff:f9:a5:cf:6a:e3:4f:a6:da:03:b2:39:a7:15:f2: b1:4b:2b:0a:bc:64:ff:c2:ca:0f:24:1e:97:59:59:93:11:8c: 05:cc:c8:b4:d1:0f:bc:c1:1f:cb:63:27:07:d6:02:94:bb:35: dc:df:87:42:cc:8f:1a:85:5e:eb:6b:72:5e:20:71:fc:d2:e2: a0:e3:f0:31:d1:f9:81:c4:54:8d:e0:41:a0:13:9f:ff:80:bb: a3:dc:3d:b6:3a:4a:55:f6:87:94:84:da:b0:18:c0:e9:a6:09: 12:6b:64:c1:98:ed:3f:b0:3e:a0:17:52:aa:93:6a:02:f6:70: b3:06:3a:5e:47:2e:cd:f8:d0:5a:c8:eb:c6:58:74:97:a4:22: 0a:9f:70:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYMbvhbiZv4gAz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk ODIxOWM2NmYtZWViYi00Y2Q2LWEwMjItNDI1NGM3NTIxNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoYyt8Hd6V6L8Q944szGtTr8p0D99+umBqOZ 1dYykU2f04yC9wo9gMM6YrP2+jpDvSemQuzvRkpbGFccbQ121xJdj7d1Sa+3ZCGb pMjbgbFKek/+hkCZUW7XLbLUTCMkHRdDRNBL1eol4Grw/sZX6YfC/+vJlMOelmXE 7OnMFt1CqrtIGk8f2B2VM+gS0BSEMkXPFkuoXlds2MAWFpaIajTy+vXavRBBsR/E cZDY7NYqAJeAyNWFST/aFRCnbOx02wHOlU9b31GXBUQYCn9FNdQ8cKJQI/7rkz7s JwciuXSHwwn+b5Zc8JuS9bcoL6je4GObxSTBv6bA5biuAnODCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhad+Jug8AKLgXjKBRoyn1mIUzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTA3YmQ4NjktNmE5Ni0z Y2RmLWIzZTMtMjlhNjJlYTkwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR+U1q2AJgpNug58w/A93HEgZaTAGQlCWThi8nqLR2FGuo9GllP4qZ3 mdqTrUZxDNFTeoeVuEHs7fZeqTMo+GAWkU728kh9DKFdno/UZaPLlPnuiKXvPza8 vmRp0hkyl37hzJTR4O7EITtiG5N9Rf/5pc9q40+m2gOyOacV8rFLKwq8ZP/Cyg8k HpdZWZMRjAXMyLTRD7zBH8tjJwfWApS7Ndzfh0LMjxqFXutrcl4gcfzS4qDj8DHR +YHEVI3gQaATn/+Au6PcPbY6SlX2h5SE2rAYwOmmCRJrZMGY7T+wPqAXUqqTagL2 cLMGOl5HLs340FrI68ZYdJekIgqfcMM= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:25 2025 by rpki-client