This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa File: bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa (raw, json) Hash identifier: ywJBnmH0Vs7ex0RfgtuftG9GKNYWoUyvPnl+5NSNh7c= Subject key identifier: 8E:9D:70:F5:84:E8:E2:61:46:FB:C9:76:2A:EC:F9:E7:83:A7:48:19 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C0C6B688FEB27C6487FCCE180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 23473 IP address blocks: 68.234.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:68:8f:eb:27:c6:48:7f:cc:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=4f1b3b2e-129c-440a-9a03-dc5664c83644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:bf:98:eb:86:b1:f1:6e:43:5e:ef:4a:89: 12:3e:4c:52:26:45:42:7a:3f:c9:dd:1d:e2:d5:0c: 43:e3:24:6e:4d:b0:3a:74:58:64:e8:89:cf:c8:19: bb:c1:44:34:f8:40:45:d5:16:52:96:43:fc:27:7f: a2:2a:fc:14:00:a8:5f:4c:49:7f:ce:f4:d4:92:30: c7:24:1a:fb:fd:64:a8:ff:be:c6:79:f9:7d:94:57: 44:d7:e6:56:b3:41:3a:15:f7:51:42:1a:72:ea:0a: 80:26:ed:67:00:15:1a:b5:eb:4b:88:53:f1:f2:46: ef:fa:9b:9c:29:4c:e9:2f:48:ad:68:02:8d:ba:5a: 6f:af:da:22:1e:08:e3:3e:99:1c:84:b4:12:fb:9f: 59:01:9d:92:08:b6:89:8d:0b:75:60:94:80:53:f6: ca:bd:a5:d4:d5:72:ec:2e:b8:d8:32:44:83:52:e4: da:a4:f7:58:ac:63:8f:8b:f4:2c:4b:be:d7:86:10: a2:60:26:ae:59:c6:d5:48:67:2a:e7:d4:19:0b:dc: b5:14:dd:dc:16:6e:b0:64:a7:36:14:10:1c:2c:53: 28:ee:8c:a7:46:d1:74:31:eb:ac:73:ad:5f:03:6e: 80:29:70:21:cc:28:f2:4e:43:d8:25:0c:93:16:cd: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9D:70:F5:84:E8:E2:61:46:FB:C9:76:2A:EC:F9:E7:83:A7:48:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:51:8d:fe:3e:74:9d:ee:a2:7e:c0:d9:ef:32:62:f0:44:6f: d7:e0:f0:7a:e6:5f:20:d2:0c:d6:06:37:2f:99:72:46:80:25: f4:61:92:0b:44:1b:8c:23:d3:19:63:71:bd:c6:e6:03:44:cb: a3:0c:42:1d:69:24:ae:68:ee:35:2e:63:41:d5:fe:8c:00:c8: ad:55:8c:0e:23:27:76:5f:59:2c:f0:96:ce:02:54:b1:e0:84: a8:47:1c:04:e0:96:a4:00:c5:ee:cb:3e:6f:22:65:dc:8b:f9: 33:56:b2:99:67:31:1f:1e:e1:ef:8e:e3:b0:81:bf:fa:ca:82: 3d:45:b8:94:f4:7f:e9:0b:7d:e0:25:a8:84:ee:c1:56:25:a5: c0:24:63:7e:fc:6e:08:83:2f:5d:af:3e:6f:cf:28:d7:4c:5f: 2a:ad:e2:f0:4d:5f:1a:0c:00:84:c1:83:35:63:06:c1:3c:21: 58:9e:d4:36:88:bd:5a:df:94:bc:40:64:49:38:a2:8e:c4:ae: 53:f6:c1:3d:13:02:a2:94:c9:22:09:a0:f1:8d:d4:92:52:2b: 06:a6:0e:48:a1:45:a9:54:52:4c:84:58:62:4b:11:fe:9d:0b: be:d7:47:a1:31:ad:2e:de:0f:93:65:f5:7e:9e:a4:b7:f8:57: c8:06:88:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa2iP6yfGSH/M4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk NGYxYjNiMmUtMTI5Yy00NDBhLTlhMDMtZGM1NjY0YzgzNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm2/mOuGsfFuQ17vSokSPkxSJkVCej/J3R3i 1QxD4yRuTbA6dFhk6InPyBm7wUQ0+EBF1RZSlkP8J3+iKvwUAKhfTEl/zvTUkjDH JBr7/WSo/77Gefl9lFdE1+ZWs0E6FfdRQhpy6gqAJu1nABUatetLiFPx8kbv+puc KUzpL0itaAKNulpvr9oiHgjjPpkchLQS+59ZAZ2SCLaJjQt1YJSAU/bKvaXU1XLs LrjYMkSDUuTapPdYrGOPi/QsS77XhhCiYCauWcbVSGcq59QZC9y1FN3cFm6wZKc2 FBAcLFMo7oynRtF0Meusc61fA26AKXAhzCjyTkPYJQyTFs2YUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6dcPWE6OJhRvvJdirs+eeDp0gZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmI4MTYwNDMtNzY4Ni0z MjkwLThhODEtZTdkOWE2Y2MzZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZRjf4+dJ3uon7A2e8yYvBEb9fg8HrmXyDSDNYGNy+ZckaAJfRhkgtE G4wj0xljcb3G5gNEy6MMQh1pJK5o7jUuY0HV/owAyK1VjA4jJ3ZfWSzwls4CVLHg hKhHHATglqQAxe7LPm8iZdyL+TNWsplnMR8e4e+O47CBv/rKgj1FuJT0f+kLfeAl qITuwVYlpcAkY378bgiDL12vPm/PKNdMXyqt4vBNXxoMAITBgzVjBsE8IVie1DaI vVrflLxAZEk4oo7ErlP2wT0TAqKUySIJoPGN1JJSKwamDkihRalUUkyEWGJLEf6d C77XR6ExrS7eD5Nl9X6epLf4V8gGiAs= -----END CERTIFICATE-----Generated at Sat Dec 6 15:15:07 2025 by rpki-client