This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa File: 04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa (raw, json) Hash identifier: 9eSU8Aj79zzMFM6Cm/fdw8US8Uz0L+ocdy6Z5yxsM0o= Subject key identifier: 30:73:B1:52:30:26:FA:78:26:C4:77:1D:EA:5C:25:16:E7:55:E6:B9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD8C5C4332BEADD1C57FEB800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 203 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:c4:33:2b:ea:dd:1c:57:fe:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=29964f32-87c1-4b6a-ab35-1444f68bc2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:82:8b:e2:37:48:21:5a:8c:b0:91:2e:20: e0:37:10:3f:a4:6e:9c:17:7a:c0:66:00:56:ea:5a: 67:6d:e3:3e:98:1f:7e:a1:a4:10:da:c7:3d:b1:9b: 51:e4:e0:f4:19:b2:26:24:48:65:2e:39:da:b4:0e: e1:fe:4a:33:27:da:88:17:60:a9:18:9a:98:19:77: 9c:9f:57:a1:c6:22:a3:42:d6:aa:67:71:ab:f7:f9: 09:64:1f:44:d2:74:18:d4:79:b7:4a:b5:2b:03:fb: 86:4f:20:1d:5f:10:51:3b:73:47:db:bf:fa:43:75: 3a:6a:d7:51:ed:c6:d8:5a:d6:92:e6:92:f2:7d:31: a2:b1:da:1f:e1:95:6a:28:48:8e:4c:ce:65:dd:a5: d4:72:18:b2:23:f0:fb:09:32:5a:de:7f:c7:f9:27: 1a:1d:0c:af:d0:04:fb:ba:76:ee:69:b6:98:b0:de: f0:14:2a:cf:18:36:fe:7f:c6:3a:5e:1e:8b:27:9a: dc:dc:8d:84:21:e3:13:52:2e:81:07:06:21:54:2d: 55:ca:d1:84:2d:2b:cc:0d:ba:0c:48:a3:78:39:d4: 18:2f:c6:2f:d5:7d:df:15:2b:36:ca:6a:b8:68:25: fb:f0:1e:e7:38:62:7e:d8:ff:d8:2c:13:f5:3f:66: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:73:B1:52:30:26:FA:78:26:C4:77:1D:EA:5C:25:16:E7:55:E6:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:32:00:01:c6:23:ab:50:8a:f0:2e:95:9c:f3:6e:65:cf:8d: 1d:05:55:00:bb:5d:32:79:9b:ae:a0:c6:11:0e:91:a2:8e:56: f9:da:80:14:2c:82:e2:11:c8:d9:12:28:6e:11:48:b7:20:83: 68:54:ba:08:a5:3b:81:01:8a:12:98:0d:54:19:93:36:e7:8b: 94:96:5e:5a:f3:25:7b:e8:d7:01:19:ec:4a:cb:f3:84:98:db: 3e:22:7e:eb:9e:ae:a8:09:fd:83:d4:58:9a:0a:10:62:ad:31: 67:43:64:4d:8a:83:dd:56:0d:65:f5:54:17:55:09:b2:12:d4: ea:3c:d4:f7:0b:cf:a3:72:64:be:a3:6a:e3:45:85:0d:a7:68: a5:01:98:29:2b:45:33:2b:ba:16:9b:87:39:15:8e:7e:9d:e7: 45:2f:e9:9b:9c:26:ed:41:a0:eb:2b:78:e7:e3:a7:69:dd:b8: aa:79:af:f6:66:96:6f:8e:66:4d:1b:f8:3e:d5:11:0b:b6:a9: c5:9f:26:13:53:42:a3:fc:51:6c:cf:3b:7f:f3:1c:ee:90:8c: fd:f5:fc:69:ab:6b:bc:89:b5:56:19:54:cf:ba:36:75:31:ea: da:22:4a:95:65:94:19:3d:bd:90:b8:6f:de:87:99:b0:7b:61: a5:53:b4:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcQzK+rdHFf+uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk Mjk5NjRmMzItODdjMS00YjZhLWFiMzUtMTQ0NGY2OGJjMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72Ci+I3SCFajLCRLiDgNxA/pG6cF3rAZgBW 6lpnbeM+mB9+oaQQ2sc9sZtR5OD0GbImJEhlLjnatA7h/kozJ9qIF2CpGJqYGXec n1ehxiKjQtaqZ3Gr9/kJZB9E0nQY1Hm3SrUrA/uGTyAdXxBRO3NH27/6Q3U6atdR 7cbYWtaS5pLyfTGisdof4ZVqKEiOTM5l3aXUchiyI/D7CTJa3n/H+ScaHQyv0AT7 unbuabaYsN7wFCrPGDb+f8Y6Xh6LJ5rc3I2EIeMTUi6BBwYhVC1VytGELSvMDboM SKN4OdQYL8Yv1X3fFSs2ymq4aCX78B7nOGJ+2P/YLBP1P2YBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBzsVIwJvp4JsR3HepcJRbnVea5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDRiYzRmZTAtODU5YS0z ZGJmLWJhYTYtYTk4NGVmYThlNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4yAAHGI6tQivAulZzzbmXPjR0FVQC7XTJ5m66gxhEOkaKOVvnagBQs guIRyNkSKG4RSLcgg2hUugilO4EBihKYDVQZkzbni5SWXlrzJXvo1wEZ7ErL84SY 2z4ifuuerqgJ/YPUWJoKEGKtMWdDZE2Kg91WDWX1VBdVCbIS1Oo81PcLz6NyZL6j auNFhQ2naKUBmCkrRTMruhabhzkVjn6d50Uv6ZucJu1BoOsreOfjp2nduKp5r/Zm lm+OZk0b+D7VEQu2qcWfJhNTQqP8UWzPO3/zHO6QjP31/Gmra7yJtVYZVM+6NnUx 6toiSpVllBk9vZC4b96HmbB7YaVTtJ0= -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:15 2025 by rpki-client