This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa File: f1f9475f-12e5-3b89-a981-78a48392e1ea.roa (raw, json) Hash identifier: vsdWBJr6a0SetWxnrglKoG/hWIVAuBgs1XxnVwAdWeQ= Subject key identifier: 1C:A8:FC:9D:CD:E2:4E:13:E9:53:27:6D:2E:CE:34:F5:88:0C:F4:B3 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C14CB7B6A5D1A5685B15A3F40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 23473 IP address blocks: 68.234.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:7b:6a:5d:1a:56:85:b1:5a:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=91a02293-93e7-4056-9836-38758f716a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:cb:db:c5:bb:ed:07:67:2b:e2:c9:6b:2d: 5b:f1:9b:e6:77:b7:e4:cc:f3:5f:d8:04:2f:51:06: be:cc:d7:1e:73:77:65:0f:4b:0b:69:c8:16:06:59: f7:7a:17:e6:2b:9b:13:fc:b8:eb:16:c1:db:54:75: 07:ed:22:f7:cb:36:1e:e0:a1:7e:ce:eb:57:ce:d5: 33:c0:8d:f6:e2:2c:65:91:96:9d:3b:91:63:5b:74: 3a:cd:a6:e2:85:40:69:f8:92:22:d0:92:6e:2b:64: dd:31:81:7f:31:6d:ca:fc:41:c6:7a:83:df:1d:24: d9:5d:9c:05:c0:79:1a:d7:69:73:3c:ec:14:8f:91: a3:16:0f:db:d9:d8:3a:60:7e:4f:b0:24:4d:07:9a: a3:6f:7a:fa:8e:6b:a0:7a:89:d8:d2:67:8b:af:ff: 1c:7a:06:06:f7:dd:58:5e:be:f8:16:1e:9d:ee:39: 85:78:16:08:96:95:32:25:ed:00:de:bd:87:c8:df: a6:14:0b:6d:e9:ea:74:8a:75:7c:3d:d6:75:ac:9c: 89:1b:8c:0e:7d:9c:73:a6:94:35:40:b3:fe:08:2c: 14:67:de:29:28:f9:e4:76:2f:9d:b6:75:3a:e4:70: de:e1:d2:bd:8c:41:01:48:a9:a4:57:5b:3d:81:6e: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:FC:9D:CD:E2:4E:13:E9:53:27:6D:2E:CE:34:F5:88:0C:F4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b7:c6:bd:6e:0c:dc:1a:6d:e3:99:a6:dd:94:df:c8:03:bd: 15:25:8a:59:d7:a1:4f:33:81:a0:12:6a:1d:7d:dd:b1:c3:24: 75:68:f8:05:69:45:38:70:66:4b:cc:fe:da:e7:12:99:15:4a: 38:5d:46:f5:4a:d7:3e:86:d6:ce:af:d3:3b:3d:98:8a:1a:49: b4:f8:af:9b:fe:4b:e3:51:16:1d:1a:e1:12:20:f7:62:44:df: 91:11:d2:e1:0c:f7:d8:5f:f7:e0:21:dd:f4:dc:14:8c:1e:e6: 32:39:6e:ce:05:4b:23:f1:f8:02:a4:c8:c9:68:da:4a:28:37: 34:cc:fd:08:4d:8f:1d:c0:9d:3f:8e:41:95:e4:07:70:fc:cf: 33:b7:07:ad:e4:6d:73:85:17:23:71:6e:2c:71:b0:25:e0:fb: 62:a0:4d:14:e7:7f:16:32:80:16:34:e4:64:b1:fd:bc:3e:be: dc:58:fc:2a:9a:47:e9:89:5b:20:67:c1:6d:da:62:7d:ec:05: c9:4a:b2:42:c0:1f:ee:43:9f:8e:24:f8:d7:ac:ca:51:34:22: 7a:bb:23:ec:f5:7b:38:c4:e9:39:a8:49:83:47:24:5d:f6:a1: ca:e3:76:26:ee:cf:f0:b8:90:c1:57:03:a3:0b:75:82:19:9a: fc:0d:7b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUy3tqXRpWhbFaP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk OTFhMDIyOTMtOTNlNy00MDU2LTk4MzYtMzg3NThmNzE2YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ/L28W77QdnK+LJay1b8Zvmd7fkzPNf2AQv UQa+zNcec3dlD0sLacgWBln3ehfmK5sT/LjrFsHbVHUH7SL3yzYe4KF+zutXztUz wI324ixlkZadO5FjW3Q6zabihUBp+JIi0JJuK2TdMYF/MW3K/EHGeoPfHSTZXZwF wHka12lzPOwUj5GjFg/b2dg6YH5PsCRNB5qjb3r6jmugeonY0meLr/8cegYG991Y Xr74Fh6d7jmFeBYIlpUyJe0A3r2HyN+mFAtt6ep0inV8PdZ1rJyJG4wOfZxzppQ1 QLP+CCwUZ94pKPnkdi+dtnU65HDe4dK9jEEBSKmkV1s9gW4ElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByo/J3N4k4T6VMnbS7ONPWIDPSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjFmOTQ3NWYtMTJlNS0z Yjg5LWE5ODEtNzhhNDgzOTJlMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe3xr1uDNwabeOZpt2U38gDvRUlilnXoU8zgaASah193bHDJHVo+AVp RThwZkvM/trnEpkVSjhdRvVK1z6G1s6v0zs9mIoaSbT4r5v+S+NRFh0a4RIg92JE 35ER0uEM99hf9+Ah3fTcFIwe5jI5bs4FSyPx+AKkyMlo2kooNzTM/QhNjx3AnT+O QZXkB3D8zzO3B63kbXOFFyNxbixxsCXg+2KgTRTnfxYygBY05GSx/bw+vtxY/Cqa R+mJWyBnwW3aYn3sBclKskLAH+5Dn44k+NesylE0Inq7I+z1ezjE6TmoSYNHJF32 ocrjdibuz/C4kMFXA6MLdYIZmvwNe+4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:08 2025 by rpki-client