This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa File: af478d3d-02cc-354c-a27f-6b17372db688.roa (raw, json) Hash identifier: Xi3fEYQWtAgUXWCLkPsSxtXxIjggUyQ9E4VppplA4tM= Subject key identifier: F6:0E:94:6A:97:01:45:34:F8:76:B2:75:89:51:59:69:25:6A:7C:96 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584C14CB6790BCA549B3A2BEFB80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 3320 IP address blocks: 68.168.18.0/24 maxlen: 24 68.168.19.0/24 maxlen: 24 186.190.214.0/24 maxlen: 24 186.190.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:67:90:bc:a5:49:b3:a2:be:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=9f98ce03-b250-4723-9b1e-aa3683c089da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:b1:74:5f:5e:25:26:70:c6:8f:f2:89:b4: 33:a9:ef:b4:c4:0b:d0:84:83:73:5c:c3:d2:28:26: 30:d5:73:47:de:3b:71:a1:a7:95:41:e8:7f:20:97: e7:5f:9a:3f:ed:ee:e9:ef:6a:4f:95:f4:8c:8f:67: 0b:0e:b9:8b:71:34:8f:fc:0a:7e:4b:0d:33:b9:6c: 90:6a:32:c9:0d:46:33:d3:8c:9a:b8:56:78:d2:cb: b0:9b:c8:42:c5:20:93:13:db:4a:2a:2f:dd:de:d1: 90:19:bc:2d:84:45:d9:6d:26:e3:19:5f:30:02:70: 07:0c:ed:ef:70:f6:6c:70:26:1b:f8:fc:5e:98:d5: 98:1c:97:d0:a8:0a:2c:b2:2c:c7:b1:b3:e3:3f:ca: b3:2a:ab:c0:b0:69:45:01:17:c3:40:90:08:f0:9b: 09:5e:1b:f7:dc:64:38:c2:50:aa:bd:5e:14:e9:14: 4c:e8:98:68:02:c5:53:bd:71:f9:18:a4:0e:0e:ac: 9f:a1:f5:0e:08:af:74:3f:ca:fb:73:56:78:3b:67: db:ed:e0:04:98:00:69:c5:de:59:b3:fd:24:27:13: f4:5f:ac:ce:7d:26:6f:5b:98:c1:45:9c:0b:92:63: 20:0d:3e:01:11:2a:4d:ec:da:13:7c:9f:b7:2d:21: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0E:94:6A:97:01:45:34:F8:76:B2:75:89:51:59:69:25:6A:7C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.18.0/23 186.190.214.0/24 186.190.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fa:44:f6:c4:a6:89:f8:42:07:80:01:c8:ed:8d:39:3f:85: b8:48:e4:7a:14:e3:8e:72:15:07:8d:76:cc:51:11:a5:37:92: 85:cd:90:b7:03:c0:de:76:14:84:39:f2:39:d5:f2:3e:d8:f4: 67:17:fb:5f:57:ba:c7:72:3a:e9:30:21:52:6a:cb:fe:bf:53: 88:46:00:53:bb:b7:64:be:84:96:4b:7d:61:9c:68:79:39:7c: a8:ee:58:fb:d1:9f:32:b7:5e:4b:ad:07:a6:7a:84:4b:46:98: 5d:69:7d:8b:24:70:13:50:9e:8a:a2:08:2e:c1:e7:cd:cf:be: a7:56:36:e6:eb:b8:52:c8:da:22:4f:c4:34:ae:55:50:d0:05: 8c:f6:10:57:45:8a:74:0e:cc:1b:7f:f8:f6:97:c3:b3:8a:18: 15:78:87:66:ae:b6:0e:60:3a:84:28:98:17:e4:79:9f:92:50: e4:fe:24:24:98:b6:b1:97:ad:4f:22:dd:47:2c:09:bc:24:bf: 6c:a8:a0:c4:e3:0d:9e:e7:da:4e:a2:34:79:7b:49:43:a9:c3: 88:b6:02:42:fa:3a:7b:7f:4d:78:76:14:05:65:be:ad:ec:3d: 1f:f3:3e:08:b2:1c:5d:a4:f0:58:9b:8d:a0:9f:91:33:a9:45: c6:1b:d5:03 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEwUy2eQvKVJs6K++4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk OWY5OGNlMDMtYjI1MC00NzIzLTliMWUtYWEzNjgzYzA4OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNixdF9eJSZwxo/yibQzqe+0xAvQhINzXMPS KCYw1XNH3jtxoaeVQeh/IJfnX5o/7e7p72pPlfSMj2cLDrmLcTSP/Ap+Sw0zuWyQ ajLJDUYz04yauFZ40suwm8hCxSCTE9tKKi/d3tGQGbwthEXZbSbjGV8wAnAHDO3v cPZscCYb+PxemNWYHJfQqAossizHsbPjP8qzKqvAsGlFARfDQJAI8JsJXhv33GQ4 wlCqvV4U6RRM6JhoAsVTvXH5GKQODqyfofUOCK90P8r7c1Z4O2fb7eAEmABpxd5Z s/0kJxP0X6zOfSZvW5jBRZwLkmMgDT4BESpN7NoTfJ+3LSGm2wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPYOlGqXAUU0+HaydYlRWWklanyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYWY0NzhkM2QtMDJjYy0z NTRjLWEyN2YtNmIxNzM3MmRiNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBRKgSAwQA ur7WAwQAur7eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKP6RPbEpon4QgeAAcjtjTk/hbhI5HoU445yFQeN dsxREaU3koXNkLcDwN52FIQ58jnV8j7Y9GcX+19XusdyOukwIVJqy/6/U4hGAFO7 t2S+hJZLfWGcaHk5fKjuWPvRnzK3XkutB6Z6hEtGmF1pfYskcBNQnoqiCC7B583P vqdWNubruFLI2iJPxDSuVVDQBYz2EFdFinQOzBt/+PaXw7OKGBV4h2autg5gOoQo mBfkeZ+SUOT+JCSYtrGXrU8i3UcsCbwkv2yooMTjDZ7n2k6iNHl7SUOpw4i2AkL6 Ont/TXh2FAVlvq3sPR/zPgiyHF2k8FibjaCfkTOpRcYb1QM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:02 2025 by rpki-client