This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/386b9d44-5f9b-3a9f-9949-68add7cd5ebb.roa File: 386b9d44-5f9b-3a9f-9949-68add7cd5ebb.roa (raw, json) Hash identifier: QxMXhE4dcntvf08gM8wOTZN8Q9ZMYCRCeektLedT4xE= Subject key identifier: 0F:50:AE:7B:82:78:99:68:DB:E2:F6:FA:99:93:A9:F4:DE:38:D4:DD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C0C6B68C734DD96A808D21480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/386b9d44-5f9b-3a9f-9949-68add7cd5ebb.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 23473 IP address blocks: 68.234.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:68:c7:34:dd:96:a8:08:d2:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=6a2106ab-5917-42dd-a102-dc86de8f3942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:9f:41:bf:a2:81:17:50:c5:78:db:e0:e3: 69:0a:22:8d:03:c9:53:8a:14:b7:ae:15:d4:ba:21: f7:6a:f9:f3:10:b5:8f:98:a2:76:4b:b7:0e:3a:bf: 06:e0:08:82:5f:e7:b2:da:ee:83:75:a0:91:45:ea: 31:f8:85:f0:10:a0:8d:a0:5c:7a:6e:2e:43:19:9e: 74:12:42:79:76:31:4b:d4:19:e0:90:59:8b:33:e0: 83:54:4c:2d:86:70:68:f1:62:a6:ca:68:18:4c:7d: fe:6a:c9:f0:ff:bb:68:25:4b:b7:f9:a6:f4:74:a6: 6e:68:32:a2:44:b4:e5:e8:0a:06:a6:92:26:42:99: 49:53:f8:54:a1:e9:70:b6:c8:e5:09:95:87:7a:6a: 9f:9d:4b:b3:92:bc:a9:4b:9d:b4:65:4d:aa:87:a5: 63:cf:fe:43:48:f2:36:0b:05:7d:0d:26:c6:01:53: a1:6b:dd:06:00:6e:18:a9:23:c3:67:25:ca:dc:4b: 2e:07:a4:89:2f:e9:13:e4:87:a7:ac:08:73:d6:99: 9f:47:b0:4f:da:1e:b1:81:07:82:a8:4e:e8:10:e3: 28:dc:92:07:79:ce:3a:3f:48:9a:d2:7a:03:75:91: 34:03:f8:71:36:18:a8:7a:e9:dd:61:96:ce:05:03: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:50:AE:7B:82:78:99:68:DB:E2:F6:FA:99:93:A9:F4:DE:38:D4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/386b9d44-5f9b-3a9f-9949-68add7cd5ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:29:b9:cf:48:4c:8a:de:d0:a7:d6:b2:7c:2a:d2:ca:07:8f: 19:a0:8e:3c:11:6d:90:35:11:2d:62:64:0b:e0:68:d8:db:f6: 83:94:6f:13:43:03:76:45:c4:76:c2:65:16:f0:e9:d8:5e:5c: 3b:36:4b:e3:1c:f3:91:ba:0c:fd:66:b5:e5:f1:35:7a:d4:09: 33:71:04:53:88:cb:cb:b6:1d:b6:b2:24:b6:3e:35:67:70:d9: 0d:ca:8b:53:b8:eb:d0:54:a4:4c:3a:59:c6:72:91:53:67:07: 7f:2d:f4:06:32:9e:78:e5:76:a3:71:a1:00:90:93:64:70:1d: ea:1f:79:0d:53:1e:ba:6a:37:f5:e4:e3:89:50:52:5f:d7:34: e0:23:d3:e4:1e:2e:32:c0:91:e5:1c:a2:90:c5:21:ad:f8:0c: fa:ae:8b:0b:72:a6:97:5b:fa:f3:5d:37:d4:f4:bf:fc:c6:18: 08:6e:93:4c:38:7c:c2:b6:8b:f3:a2:6c:72:99:21:60:7b:4e: 00:9f:ec:d6:3e:20:88:00:16:ed:01:51:12:7a:a1:aa:41:d3: e0:a8:5a:18:c8:db:01:28:b9:05:73:ed:ab:6d:32:b2:f2:a4: 7d:ff:cc:e7:a2:cf:73:fe:8c:bc:0e:da:bc:b4:06:9d:7f:bd: c3:04:2f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa2jHNN2WqAjSFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk NmEyMTA2YWItNTkxNy00MmRkLWExMDItZGM4NmRlOGYzOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpOfQb+igRdQxXjb4ONpCiKNA8lTihS3rhXU uiH3avnzELWPmKJ2S7cOOr8G4AiCX+ey2u6DdaCRReox+IXwEKCNoFx6bi5DGZ50 EkJ5djFL1BngkFmLM+CDVEwthnBo8WKmymgYTH3+asnw/7toJUu3+ab0dKZuaDKi RLTl6AoGppImQplJU/hUoelwtsjlCZWHemqfnUuzkrypS520ZU2qh6Vjz/5DSPI2 CwV9DSbGAVOha90GAG4YqSPDZyXK3EsuB6SJL+kT5IenrAhz1pmfR7BP2h6xgQeC qE7oEOMo3JIHec46P0ia0noDdZE0A/hxNhioeundYZbOBQPMNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9QrnuCeJlo2+L2+pmTqfTeONTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzg2YjlkNDQtNWY5Yi0z YTlmLTk5NDktNjhhZGQ3Y2Q1ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0puc9ITIre0KfWsnwq0soHjxmgjjwRbZA1ES1iZAvgaNjb9oOUbxND A3ZFxHbCZRbw6dheXDs2S+Mc85G6DP1mteXxNXrUCTNxBFOIy8u2HbayJLY+NWdw 2Q3Ki1O469BUpEw6WcZykVNnB38t9AYynnjldqNxoQCQk2RwHeofeQ1THrpqN/Xk 44lQUl/XNOAj0+QeLjLAkeUcopDFIa34DPquiwtyppdb+vNdN9T0v/zGGAhuk0w4 fMK2i/OibHKZIWB7TgCf7NY+IIgAFu0BURJ6oapB0+CoWhjI2wEouQVz7attMrLy pH3/zOeiz3P+jLwO2ry0Bp1/vcMELxg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:03 2025 by rpki-client