This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa File: f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa (raw, json) Hash identifier: mD2H+qBOLAtO4lpvkhzWPzAPV2ZdA6RaRHf7dTTECC4= Subject key identifier: D1:F1:6D:54:4A:B0:3C:FD:0D:61:4E:D3:97:17:B8:99:E1:B7:90:B8 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584BE555D2977C0FBE15B610A380 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 62563 IP address blocks: 67.220.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:d2:97:7c:0f:be:15:b6:10:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=bb0dcf95-7fc8-44bf-9d44-c7e44714899b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8c:70:f1:4b:83:39:78:8d:7a:f7:26:17:6e: c1:16:02:03:11:a1:18:db:88:bf:30:af:5d:28:c8: 1e:b9:6b:2c:ac:ca:c4:7b:c0:1b:8f:8d:a2:79:75: 82:7d:16:4f:68:80:0e:47:72:17:db:58:93:9b:04: fd:18:cc:2f:c6:c7:9f:e3:d5:96:47:04:91:23:3d: 03:05:d8:60:6e:40:78:26:9e:32:46:d4:94:e1:db: 89:95:bc:ae:6b:7b:4c:a7:82:21:f2:8d:c1:e2:98: 62:7e:03:cc:fe:23:0a:bd:a7:3c:9e:0d:a5:f5:da: d3:c5:fa:51:b3:e8:76:55:ec:43:ba:7d:7e:bb:3e: 43:57:24:db:1c:d6:91:de:e4:37:db:25:f7:90:91: dd:d8:39:5c:16:74:14:1e:23:e4:61:b5:62:7c:8f: 4f:18:cf:9f:fd:d9:86:d5:fc:44:06:32:d3:f6:85: 1f:e0:0b:65:42:5e:00:1d:2d:55:e0:b3:4a:1b:c7: 77:3d:6b:8a:d2:d5:b2:19:2b:c6:8a:45:d2:18:ce: 56:88:e5:3c:15:c7:c5:8a:a0:21:21:89:96:ac:08: ee:72:70:3b:5a:9b:c3:eb:b3:28:08:cb:5f:72:f5: 16:db:9c:5a:69:09:29:a4:0c:32:d0:67:72:d9:59: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:6D:54:4A:B0:3C:FD:0D:61:4E:D3:97:17:B8:99:E1:B7:90:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fd:1e:74:af:33:65:04:c2:3c:a9:09:e6:47:aa:b9:d6:3b: 4b:41:45:1b:56:08:c7:0f:68:54:a9:fb:14:a1:b7:ba:77:52: 24:1a:4e:9e:99:5a:f4:4d:5b:cb:c5:58:de:6d:1c:3d:8e:5f: bb:b6:25:22:9c:8e:9f:62:93:16:15:32:19:97:b3:80:41:39: b4:26:1d:74:e3:6d:7c:e0:06:ca:d3:f4:e8:d7:b2:de:bb:16: d3:ae:b0:53:a8:92:d1:53:89:9e:e7:d0:d1:0d:51:4d:cb:c8: 02:ce:e8:84:12:54:38:ea:62:b3:54:15:7d:0c:7e:1e:e8:d8: 9b:63:9d:7c:9d:9c:87:75:fc:a2:d5:8b:ae:87:18:87:e7:f1: b1:54:8c:5d:63:6b:95:8f:c9:41:ab:3a:00:10:2b:92:4f:c3: cb:21:e9:d4:c7:23:5e:cb:7f:9c:e6:96:be:17:03:3b:1d:a5: 87:f8:dd:5e:f1:7e:f8:65:a0:33:5f:3f:ed:85:6a:a4:18:fe: 14:ba:9d:78:55:d7:0b:2a:9b:0e:72:48:87:ef:37:90:72:c3: be:0b:5c:9b:51:ce:63:26:7c:b0:25:08:7f:03:a3:fc:75:ec: e9:68:20:46:e8:23:a0:d6:95:00:0c:c3:86:86:6c:39:de:56: 39:17:47:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVdKXfA++FbYQo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk YmIwZGNmOTUtN2ZjOC00NGJmLTlkNDQtYzdlNDQ3MTQ4OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4xw8UuDOXiNevcmF27BFgIDEaEY24i/MK9d KMgeuWssrMrEe8Abj42ieXWCfRZPaIAOR3IX21iTmwT9GMwvxsef49WWRwSRIz0D BdhgbkB4Jp4yRtSU4duJlbyua3tMp4Ih8o3B4phifgPM/iMKvac8ng2l9drTxfpR s+h2VexDun1+uz5DVyTbHNaR3uQ32yX3kJHd2DlcFnQUHiPkYbVifI9PGM+f/dmG 1fxEBjLT9oUf4AtlQl4AHS1V4LNKG8d3PWuK0tWyGSvGikXSGM5WiOU8FcfFiqAh IYmWrAjucnA7WpvD67MoCMtfcvUW25xaaQkppAwy0Gdy2VmZywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHxbVRKsDz9DWFO05cXuJnht5C4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjg1ZGNiMGEtM2Y5ZS0z YWFhLTk4MTgtZWYwY2ZmNzRiNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH9HnSvM2UEwjypCeZHqrnWO0tBRRtWCMcPaFSp+xSht7p3UiQaTp6Z WvRNW8vFWN5tHD2OX7u2JSKcjp9ikxYVMhmXs4BBObQmHXTjbXzgBsrT9OjXst67 FtOusFOoktFTiZ7n0NENUU3LyALO6IQSVDjqYrNUFX0Mfh7o2JtjnXydnId1/KLV i66HGIfn8bFUjF1ja5WPyUGrOgAQK5JPw8sh6dTHI17Lf5zmlr4XAzsdpYf43V7x fvhloDNfP+2FaqQY/hS6nXhV1wsqmw5ySIfvN5Byw74LXJtRzmMmfLAlCH8Do/x1 7OloIEboI6DWlQAMw4aGbDneVjkXR+s= -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:10 2025 by rpki-client