This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a1a00f-6109-3172-8541-1e0d58ab807a.roa File: 89a1a00f-6109-3172-8541-1e0d58ab807a.roa (raw, json) Hash identifier: SHM5cSbMrPQDdT5hPX3iQZhaxO0HPMALwxMGf1gb6EQ= Subject key identifier: F3:3A:88:90:F0:B4:C3:31:E0:F8:7C:E6:1E:91:F7:FD:C4:9B:83:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E9196642550DB5C3CE2AA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a1a00f-6109-3172-8541-1e0d58ab807a.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33662 IP address blocks: 68.85.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:91:96:64:25:50:db:5c:3c:e2:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=6f4454eb-1f22-4911-81c2-91317945e96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:1d:42:e2:54:eb:88:2f:45:cf:49:85:23: 5a:a7:e3:7c:c8:d5:e1:0f:26:6b:9b:d0:b1:ad:79: 60:ed:44:3a:ee:4c:36:cc:9b:0c:f6:b2:22:fe:02: e2:79:6d:89:dd:94:b4:ea:db:32:40:0f:94:8c:8d: 8d:86:f9:92:e9:34:69:0e:5b:41:e1:9a:44:da:cb: 4b:fa:a2:4f:86:a3:9c:a8:4c:c2:5f:5c:0f:25:64: 5b:87:a3:67:d8:c0:e2:fc:7a:d8:b8:3a:35:be:e1: 58:61:88:cb:4a:e2:2c:1a:5b:d7:f9:73:81:72:b1: 0c:85:02:86:4f:55:d6:ca:d4:a9:50:f9:03:d2:f3: dc:51:d5:0e:a4:2a:76:95:29:36:a2:c6:7d:7b:6c: e2:e0:c3:cf:38:e1:3c:ce:ba:bf:e1:95:f8:88:ea: 56:3e:51:96:24:bd:1a:7a:4a:9b:ff:e6:3f:67:a5: af:29:c0:2c:7e:4b:61:21:2d:4d:a4:bf:3f:84:9f: 9d:a6:90:f0:86:6e:e6:21:4b:67:30:12:66:1a:77: 06:43:e2:be:69:66:43:b6:d4:2e:54:1e:94:ce:66: 9c:32:dd:84:f0:72:3b:74:4e:dc:33:b7:4e:ad:db: 86:af:3c:b5:43:a4:35:04:35:a4:6c:d2:40:27:38: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:88:90:F0:B4:C3:31:E0:F8:7C:E6:1E:91:F7:FD:C4:9B:83:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a1a00f-6109-3172-8541-1e0d58ab807a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:64:69:a1:e0:bd:d0:15:52:49:57:73:f9:8d:c5:34:c1:95: 3e:de:57:9c:cc:b8:09:f4:ac:c5:d0:ab:74:8c:67:e7:1a:f5: c7:9f:98:c4:33:33:8a:dd:e1:7b:83:dc:28:d8:17:89:70:d3: 80:9f:31:56:81:96:23:c2:93:12:67:fc:d9:9c:da:37:99:f2: 74:38:57:0a:7e:e4:aa:33:97:fc:f3:5a:7d:39:07:96:60:42: d3:76:a8:57:5b:e8:2d:7b:1e:15:e1:68:44:d6:8c:76:78:99: 25:4e:4e:39:ad:5e:2d:75:72:5c:73:d7:9c:e4:f1:98:7a:fb: 20:33:e5:b1:98:ea:d3:e9:a1:0d:bd:5b:8c:cf:a1:11:c5:5c: 2b:e8:54:e3:31:7e:23:98:82:56:16:e0:58:65:7e:91:b3:94: 6b:4c:5f:91:70:cc:af:db:30:e1:c2:e4:75:98:29:81:e7:9b: 2c:5d:60:82:ba:76:15:d7:9d:77:0c:50:f7:5f:41:11:75:65: 7d:40:58:a2:c9:0d:05:20:10:66:ca:94:a8:fb:37:cb:57:04: 7d:11:20:cc:80:c1:f5:f2:52:e5:39:68:2f:10:30:30:e7:0c: 1f:7e:3e:67:0f:7e:18:a0:2a:f4:66:61:04:34:d7:52:e9:7b: 2e:dd:1d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekZZkJVDbXDziqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NmY0NDU0ZWItMWYyMi00OTExLTgxYzItOTEzMTc5NDVlOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOsdQuJU64gvRc9JhSNap+N8yNXhDyZrm9Cx rXlg7UQ67kw2zJsM9rIi/gLieW2J3ZS06tsyQA+UjI2NhvmS6TRpDltB4ZpE2stL +qJPhqOcqEzCX1wPJWRbh6Nn2MDi/HrYuDo1vuFYYYjLSuIsGlvX+XOBcrEMhQKG T1XWytSpUPkD0vPcUdUOpCp2lSk2osZ9e2zi4MPPOOE8zrq/4ZX4iOpWPlGWJL0a ekqb/+Y/Z6WvKcAsfkthIS1NpL8/hJ+dppDwhm7mIUtnMBJmGncGQ+K+aWZDttQu VB6UzmacMt2E8HI7dE7cM7dOrduGrzy1Q6Q1BDWkbNJAJzjYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM6iJDwtMMx4Ph85h6R9/3Em4N5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlhMWEwMGYtNjEwOS0z MTcyLTg1NDEtMWUwZDU4YWI4MDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRkaaHgvdAVUklXc/mNxTTBlT7eV5zMuAn0rMXQq3SMZ+ca9cefmMQz M4rd4XuD3CjYF4lw04CfMVaBliPCkxJn/Nmc2jeZ8nQ4Vwp+5Kozl/zzWn05B5Zg QtN2qFdb6C17HhXhaETWjHZ4mSVOTjmtXi11clxz15zk8Zh6+yAz5bGY6tPpoQ29 W4zPoRHFXCvoVOMxfiOYglYW4FhlfpGzlGtMX5FwzK/bMOHC5HWYKYHnmyxdYIK6 dhXXnXcMUPdfQRF1ZX1AWKLJDQUgEGbKlKj7N8tXBH0RIMyAwfXyUuU5aC8QMDDn DB9+PmcPfhigKvRmYQQ011Lpey7dHbc= -----END CERTIFICATE-----Generated at Tue Dec 16 19:17:49 2025 by rpki-client