This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa
File: bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa (raw, json)
Hash identifier: +8KxMYVxng+1n8J74IlonKyVCOiOxpnzO1Pt4cR5KUo=
Subject key identifier: CD:36:9B:3D:C8:ED:08:A7:93:7B:EE:24:89:19:83:62:91:29:16:18
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C14CB7C50BF3575C46C8B2660
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa
Signing time: Fri 05 Dec 2025 02:00:30 +0000
ROA not before: Fri 05 Dec 2025 02:00:30 +0000
ROA not after: Thu 05 Mar 2026 02:00:30 +0000
asID: 23473
IP address blocks: 68.234.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:14:cb:7c:50:bf:35:75:c4:6c:8b:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 5 02:00:30 2025 GMT
Not After : Mar 5 02:00:30 2026 GMT
Subject: CN=d42bf21b-7b3e-4f9c-bca5-753fa13bf7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:ea:01:92:36:27:57:b2:f3:d0:0b:f7:50:
e0:4f:00:b8:51:2d:85:85:3d:6c:f9:fc:b9:49:ea:
4e:ec:42:a3:ae:aa:e3:6b:fb:f2:f3:e6:f5:af:72:
bb:5d:53:93:6b:8e:5e:12:56:53:24:f2:f0:dd:7a:
2a:92:55:42:fd:25:56:9d:48:0a:da:9d:54:72:ad:
34:4d:c7:dc:25:2b:34:38:2e:03:b1:22:37:2a:c4:
01:14:4f:df:f2:d3:13:47:18:c2:e3:1a:9c:e1:24:
5e:3b:93:6f:2b:88:c6:93:c6:e1:57:e1:b6:a4:b5:
6f:b3:28:22:46:00:ea:3d:08:89:47:ec:82:3d:2f:
29:43:8b:ce:66:1c:e8:88:eb:02:62:f0:76:42:72:
92:18:15:80:d5:ce:9e:1e:58:36:ba:77:8e:76:50:
27:a6:da:85:ac:42:8f:af:bc:a5:99:b2:c5:0e:5b:
fc:c8:08:9e:c3:88:d6:31:50:fe:bc:3c:c6:a7:b3:
a3:73:4f:95:32:9e:5d:c4:37:81:77:91:33:7f:90:
46:53:87:b9:83:9d:69:b5:40:f6:9b:d0:67:1f:e0:
f8:0a:65:7a:7c:6d:6d:65:79:e3:93:03:a0:6a:45:
b4:1b:f4:85:a6:62:a0:bd:f4:8b:4a:fc:78:10:14:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:9B:3D:C8:ED:08:A7:93:7B:EE:24:89:19:83:62:91:29:16:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:5e:91:86:0e:3b:f4:4e:64:df:4c:cf:74:f0:12:6e:3b:fb:
52:10:12:9f:e6:b7:f8:f9:fd:fb:c6:72:39:0d:9f:b4:1c:c9:
16:5f:09:3b:a5:f8:75:6d:11:0e:c4:78:26:b5:91:2b:da:af:
c5:d9:ac:85:be:a7:8f:6f:8b:e1:b8:ac:8b:dc:cc:90:e3:d8:
18:a7:c1:9f:74:5e:1e:c4:62:1f:44:dc:c7:b4:0a:bf:e0:24:
62:06:a1:8a:fb:9f:80:45:ce:57:70:11:e1:ae:8f:1d:ba:35:
5c:0c:f3:53:49:16:cc:0f:a2:70:00:51:7b:e3:9b:bc:b3:5e:
ae:32:62:c4:58:83:c9:99:70:71:6e:d4:1e:f5:2a:05:3a:9f:
22:b0:a4:50:b4:80:d1:c8:80:a0:13:0b:ca:c2:7c:6a:aa:01:
33:49:62:20:18:d0:e9:bc:fa:95:dc:6e:67:6d:64:6c:64:f4:
18:74:ab:e0:91:8d:f7:7d:45:71:fc:77:21:5b:90:fc:56:d5:
62:80:32:58:3f:fa:fa:da:90:96:94:2a:14:31:15:b5:8a:40:
06:0e:9e:e0:a6:58:02:e1:d0:fa:12:66:c6:8b:99:19:15:fa:
cf:70:3c:13:c2:d6:4b:ea:2d:26:fb:34:9e:db:51:ad:f5:b8:
bd:e2:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:02:50 2025 by rpki-client