This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8f1cffcb-9816-3f9f-91b6-483caacd8a2d.roa File: 8f1cffcb-9816-3f9f-91b6-483caacd8a2d.roa (raw, json) Hash identifier: 8bvvvNNUcYycWZURLhgHwHMxZO+54pRox6AEMGV3R1M= Subject key identifier: B9:5A:C8:3E:BE:8F:07:F5:FD:82:75:B4:7B:0A:5A:27:69:72:C8:88 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C0140FACF7EDBED7271AE6A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8f1cffcb-9816-3f9f-91b6-483caacd8a2d.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 23473 IP address blocks: 66.253.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:fa:cf:7e:db:ed:72:71:ae:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=c75a7d97-2929-4587-aa5d-ecc82b6ecf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:d0:a4:51:38:07:26:24:4f:34:4f:f3:ed: f0:ac:72:9d:b7:38:ff:0f:4a:1c:ae:68:c0:8a:aa: 2f:6d:a3:7e:2f:64:62:90:8f:e5:f7:36:9a:a9:65: 83:60:0c:7e:e7:90:6f:94:9d:f5:2b:b0:57:da:85: 7e:a4:08:c1:48:a8:46:f0:06:15:a6:f3:48:f3:9e: c8:14:d7:42:b1:25:b3:e2:5b:50:be:ae:c9:a7:53: ce:10:32:74:60:5a:47:71:8e:42:b2:59:16:16:23: 84:44:2b:af:47:e1:fd:ae:00:cc:4e:73:b6:ea:98: 4c:d9:4b:7b:07:f2:6e:b6:28:e4:a2:d0:b3:f8:4e: 57:ec:6e:79:bd:31:69:e1:a8:d4:67:45:f5:f6:21: d7:c6:4a:8a:85:06:a5:a9:2d:3e:b7:eb:05:4e:2f: 9b:bc:f7:c5:f3:59:9e:19:d5:e5:eb:1a:e9:c9:3c: f6:57:a5:1d:a4:3f:09:7e:5d:35:ce:0c:ca:23:4a: f9:93:d4:7a:ee:9b:91:7c:36:90:f6:e6:03:3d:8c: fa:48:72:fe:c2:3c:59:4a:87:1f:a2:7a:ef:b6:5f: 83:df:68:77:5e:22:98:fd:80:49:c6:df:ce:8f:84: df:61:88:09:aa:c5:21:dc:b0:32:7c:76:69:eb:b5: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5A:C8:3E:BE:8F:07:F5:FD:82:75:B4:7B:0A:5A:27:69:72:C8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8f1cffcb-9816-3f9f-91b6-483caacd8a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f6:b9:b9:da:9d:0c:c7:1e:bd:1e:0f:ff:2f:ec:cd:dd:88: 09:fc:eb:01:1a:c5:81:50:95:9f:a9:b5:5b:06:5b:53:e7:73: 9d:a5:2c:55:b1:98:f6:70:66:01:9c:ef:60:18:17:28:ee:69: 11:77:a8:8c:62:04:62:57:29:b7:b5:0a:0b:ad:43:df:f2:5b: 41:a0:40:ee:37:f6:93:4b:19:c7:ec:43:ba:35:bd:b7:81:30: 3e:96:d5:cd:60:33:4f:5b:f7:d4:69:cb:a4:46:65:b0:e4:6a: 14:87:22:d5:4b:49:73:d7:8d:bf:91:85:e2:d5:b7:56:34:91: 30:88:98:bc:ff:93:18:f9:76:99:0b:cd:26:5a:63:32:f2:0b: 64:a0:c3:2f:38:7e:02:be:33:ca:01:45:2e:4b:ee:e3:f8:df: c2:9d:91:41:ca:8d:79:e6:cf:02:69:f7:5c:8c:d1:74:3d:e6: fe:7f:10:d9:f6:2c:0d:d9:03:fb:e4:99:5d:a6:7d:5e:9b:fc: 58:5b:3e:d0:9d:71:ad:77:2d:cf:94:84:1b:06:e9:f1:c8:ce: d8:09:db:e2:20:9f:66:09:74:f6:f8:31:0c:20:77:f3:60:cc: c6:f3:e4:5b:93:04:7b:c5:e6:0c:8d:42:24:81:6a:ec:98:5d: ec:21:5f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQPrPftvtcnGuaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk Yzc1YTdkOTctMjkyOS00NTg3LWFhNWQtZWNjODJiNmVjZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9bQpFE4ByYkTzRP8+3wrHKdtzj/D0ocrmjA iqovbaN+L2RikI/l9zaaqWWDYAx+55BvlJ31K7BX2oV+pAjBSKhG8AYVpvNI857I FNdCsSWz4ltQvq7Jp1POEDJ0YFpHcY5CslkWFiOERCuvR+H9rgDMTnO26phM2Ut7 B/JutijkotCz+E5X7G55vTFp4ajUZ0X19iHXxkqKhQalqS0+t+sFTi+bvPfF81me GdXl6xrpyTz2V6UdpD8Jfl01zgzKI0r5k9R67puRfDaQ9uYDPYz6SHL+wjxZSocf onrvtl+D32h3XiKY/YBJxt/Oj4TfYYgJqsUh3LAyfHZp67WPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlayD6+jwf1/YJ1tHsKWidpcsiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOGYxY2ZmY2ItOTgxNi0z ZjlmLTkxYjYtNDgzY2FhY2Q4YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP2ubnanQzHHr0eD/8v7M3diAn86wEaxYFQlZ+ptVsGW1Pnc52lLFWx mPZwZgGc72AYFyjuaRF3qIxiBGJXKbe1CgutQ9/yW0GgQO439pNLGcfsQ7o1vbeB MD6W1c1gM09b99Rpy6RGZbDkahSHItVLSXPXjb+RheLVt1Y0kTCImLz/kxj5dpkL zSZaYzLyC2Sgwy84fgK+M8oBRS5L7uP438KdkUHKjXnmzwJp91yM0XQ95v5/ENn2 LA3ZA/vkmV2mfV6b/FhbPtCdca13Lc+UhBsG6fHIztgJ2+Ign2YJdPb4MQwgd/Ng zMbz5FuTBHvF5gyNQiSBauyYXewhX78= -----END CERTIFICATE-----Generated at Sat Dec 6 16:05:37 2025 by rpki-client