This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: k9u0gdc8JsX2EJ6kexWWXlsxZaBBK8lHIkoAiuQ3vH8= Subject key identifier: CA:BE:FB:B0:2B:16:4A:49:B1:04:02:42:8C:09:99:80:1E:AF:9A:0D Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584C0570AC284C98AD9511BAB880 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:ac:28:4c:98:ad:95:11:ba:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=916e8b8c-95d7-491f-b7b8-5afbd9b8f85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:92:dd:44:c3:fe:24:85:c3:25:e3:3c:6a: 01:97:9e:ae:a4:bb:e7:54:30:98:60:c1:9d:77:85: 08:55:86:e4:04:13:a5:57:b0:a1:3b:78:92:70:ba: f4:50:d9:ca:5a:77:25:11:2a:26:b4:c0:90:0c:fe: dd:ec:c2:63:11:84:a2:5a:78:d5:61:a5:ee:da:1d: bc:4a:55:22:38:e7:2b:f0:6c:83:0e:21:ad:ee:90: f9:6e:f7:a4:5d:08:68:4b:85:25:11:85:b9:79:9b: 36:3a:be:d2:f9:db:5f:b8:2a:9c:ab:00:fa:3d:41: 9e:fe:5f:e8:97:9d:cb:83:d3:45:36:23:9f:b5:a8: 39:90:36:f2:df:c4:22:4c:12:78:6e:45:3f:32:10: 58:ef:3b:c6:d0:c8:96:28:7d:98:0d:5d:07:7e:0c: a7:12:e4:c5:bc:ae:ba:83:19:e9:2d:68:f6:0c:44: ed:1b:e4:10:4e:8c:1c:b8:dc:43:da:14:83:a9:05: 44:ef:3c:40:b5:b6:90:4d:41:41:35:c9:c2:e7:1f: ca:73:f3:35:8b:c6:c5:28:cd:1a:58:d2:87:44:3b: fe:f3:3f:d8:75:a1:cd:33:2d:d4:1e:38:66:ac:a8: bd:b5:25:20:2c:0a:4e:e4:e7:77:de:ac:46:ee:b3: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:FB:B0:2B:16:4A:49:B1:04:02:42:8C:09:99:80:1E:AF:9A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0e:f5:cb:8e:66:70:df:c9:35:55:2f:40:df:7e:fb:85:76: 91:b5:21:8c:0d:d1:87:78:64:26:96:9d:2d:e7:ab:db:47:bf: 7d:ad:89:9e:47:b4:3f:ea:ba:27:51:79:65:00:c4:74:ca:e7: f9:ff:b7:5c:c5:4a:7d:7a:7e:e4:48:de:19:5c:6e:c7:d8:01: 2c:11:23:eb:55:28:5a:e4:55:c3:d6:05:ca:c9:d4:eb:97:bc: ed:d0:b5:f3:1b:0e:9c:75:e6:aa:32:5b:52:8a:ad:51:9d:77: 19:ad:f7:b2:90:b2:bf:b9:71:c6:95:40:e2:b3:32:50:88:15: 0f:84:8a:6e:89:9f:5c:30:f2:d6:14:26:33:57:e4:77:b1:0a: b1:a5:49:d3:e7:00:e2:d6:58:72:c7:98:7a:5f:a2:95:82:96: 2a:75:e9:e7:b6:14:14:b4:f4:ae:9b:ef:10:ff:16:90:92:8c: 0e:32:79:c9:e8:fb:47:3d:c5:df:3e:28:94:91:5e:c8:01:44: f7:0a:13:92:bb:b9:62:3e:67:de:4d:ce:0f:84:d2:b6:1c:98: 80:0a:62:93:c6:af:4d:db:a1:a0:f8:df:3c:82:1d:8a:d3:1c: 9b:5f:88:dd:c6:4f:14:f6:39:60:58:5a:6a:41:99:5a:b9:6e: 14:12:37:17 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEwFcKwoTJitlRG6uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk OTE2ZThiOGMtOTVkNy00OTFmLWI3YjgtNWFmYmQ5YjhmODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyeS3UTD/iSFwyXjPGoBl56upLvnVDCYYMGd d4UIVYbkBBOlV7ChO3iScLr0UNnKWnclESomtMCQDP7d7MJjEYSiWnjVYaXu2h28 SlUiOOcr8GyDDiGt7pD5bvekXQhoS4UlEYW5eZs2Or7S+dtfuCqcqwD6PUGe/l/o l53Lg9NFNiOftag5kDby38QiTBJ4bkU/MhBY7zvG0MiWKH2YDV0HfgynEuTFvK66 gxnpLWj2DETtG+QQTowcuNxD2hSDqQVE7zxAtbaQTUFBNcnC5x/Kc/M1i8bFKM0a WNKHRDv+8z/YdaHNMy3UHjhmrKi9tSUgLApO5Od33qxG7rM8kQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMq++7ArFkpJsQQCQowJmYAer5oNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6DvXLjmZw38k1VS9A3377hXaRtSGMDdGH eGQmlp0t56vbR799rYmeR7Q/6ronUXllAMR0yuf5/7dcxUp9en7kSN4ZXG7H2AEs ESPrVSha5FXD1gXKydTrl7zt0LXzGw6cdeaqMltSiq1RnXcZrfeykLK/uXHGlUDi szJQiBUPhIpuiZ9cMPLWFCYzV+R3sQqxpUnT5wDi1lhyx5h6X6KVgpYqdennthQU tPSum+8Q/xaQkowOMnnJ6PtHPcXfPiiUkV7IAUT3ChOSu7liPmfeTc4PhNK2HJiA CmKTxq9N26Gg+N88gh2K0xybX4jdxk8U9jlgWFpqQZlauW4UEjcX -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:30 2025 by rpki-client