This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa File: 8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa (raw, json) Hash identifier: STCpwKZzJWhRTzKSLv8yLTKmoZJLusooVeraTDOgNps= Subject key identifier: 23:9C:B5:72:84:00:02:CC:09:2A:54:BF:D7:C4:B0:03:B6:DE:5A:AC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BE820830D90D5426D34D64C20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 202 IP address blocks: 168.87.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:83:0d:90:d5:42:6d:34:d6:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=fb3752fd-54bf-45af-8dfb-55a7a45c9bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:4f:93:0a:c4:ba:50:bf:37:eb:4b:5f:38: 49:c7:e8:e2:84:96:d8:83:bb:8b:8b:57:cb:1c:05: 34:bd:b1:ba:a4:46:3e:6c:b3:ad:95:d1:61:62:20: 57:71:ee:c1:3e:65:03:fb:69:6c:06:77:7f:ba:39: 84:35:bb:be:bb:a4:5c:bb:21:99:59:13:3b:0f:75: af:ca:9f:ab:ed:43:39:54:44:56:a6:49:06:c2:e3: 2c:00:76:ca:06:10:4d:37:e1:88:0a:6d:9d:a0:a5: 4c:77:92:58:bd:d7:e0:63:a5:21:dc:13:41:9a:83: bc:bd:f0:a5:33:a9:36:da:de:5c:8a:cb:3a:ef:9a: cf:75:c2:ce:0d:6b:27:f3:1f:4f:f2:c1:93:f1:8a: 1c:2f:0d:27:52:f1:b2:e5:b1:d7:b8:a3:6b:4a:f2: e9:4c:3d:b8:a9:1d:cd:04:91:e6:53:20:4a:6d:c0: a4:20:0b:c2:31:30:f7:74:8e:2b:cd:c8:02:60:15: 76:80:97:b9:1e:08:09:c0:09:5b:15:f2:74:82:0e: 5c:e3:d8:68:74:79:8b:eb:5a:38:58:f1:bd:f8:59: cf:bb:e3:72:a8:3a:61:c8:d0:5b:4d:2e:9a:e1:f6: 17:39:24:c7:21:bb:4b:44:b5:22:e8:c2:01:e7:5f: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9C:B5:72:84:00:02:CC:09:2A:54:BF:D7:C4:B0:03:B6:DE:5A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8843c9af-14b6-3c5a-92fe-77b2a6d68e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f0:e4:52:31:a4:ed:97:2e:38:c6:0a:b3:1e:8d:54:7c:3f: 03:52:d7:9d:cf:25:46:6d:cd:26:bb:87:35:e6:99:17:80:b7: e1:a4:0a:aa:3c:c3:66:57:70:b0:9e:c4:28:b4:87:5f:08:60: 26:b3:2c:29:87:6d:fc:0a:84:fa:c8:09:fd:f6:e6:23:b6:fd: 18:a2:9b:c2:45:24:c5:66:e7:c5:cf:79:91:53:73:ba:54:91: 22:ca:98:0b:c0:96:46:99:39:fd:2f:b9:89:19:26:c9:fd:07: 5a:3b:ae:14:f6:90:83:1e:b4:20:5d:0d:a2:15:53:3b:02:67: 26:88:a0:23:75:42:74:e4:26:19:a7:6d:af:69:47:37:d6:02: ee:43:a2:0d:1e:c8:f2:88:5f:48:eb:00:f6:68:a8:39:74:a7: b6:c2:cf:60:56:a4:38:ce:eb:34:15:9a:12:2d:b6:9a:83:03: 50:72:95:77:bc:36:e8:79:33:26:34:d7:ea:23:1d:8e:23:51: d4:71:48:0b:c9:d2:20:31:1f:19:50:6c:04:15:83:c9:4a:e9: 03:9d:5b:73:24:f5:20:cd:a7:0d:63:6a:a1:41:fd:f7:ed:23: 6d:15:fa:50:e2:d8:d0:87:ed:d0:a4:98:74:5a:f7:55:01:d9: 3c:4b:15:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIIMNkNVCbTTWTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk ZmIzNzUyZmQtNTRiZi00NWFmLThkZmItNTVhN2E0NWM5YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoRPkwrEulC/N+tLXzhJx+jihJbYg7uLi1fL HAU0vbG6pEY+bLOtldFhYiBXce7BPmUD+2lsBnd/ujmENbu+u6RcuyGZWRM7D3Wv yp+r7UM5VERWpkkGwuMsAHbKBhBNN+GICm2doKVMd5JYvdfgY6Uh3BNBmoO8vfCl M6k22t5ciss675rPdcLODWsn8x9P8sGT8YocLw0nUvGy5bHXuKNrSvLpTD24qR3N BJHmUyBKbcCkIAvCMTD3dI4rzcgCYBV2gJe5HggJwAlbFfJ0gg5c49hodHmL61o4 WPG9+FnPu+NyqDphyNBbTS6a4fYXOSTHIbtLRLUi6MIB5185rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOctXKEAALMCSpUv9fEsAO23lqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODg0M2M5YWYtMTRiNi0z YzVhLTkyZmUtNzdiMmE2ZDY4ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfw5FIxpO2XLjjGCrMejVR8PwNS153PJUZtzSa7hzXmmReAt+GkCqo8 w2ZXcLCexCi0h18IYCazLCmHbfwKhPrICf325iO2/Riim8JFJMVm58XPeZFTc7pU kSLKmAvAlkaZOf0vuYkZJsn9B1o7rhT2kIMetCBdDaIVUzsCZyaIoCN1QnTkJhmn ba9pRzfWAu5Dog0eyPKIX0jrAPZoqDl0p7bCz2BWpDjO6zQVmhIttpqDA1BylXe8 Nuh5MyY01+ojHY4jUdRxSAvJ0iAxHxlQbAQVg8lK6QOdW3Mk9SDNpw1jaqFB/fft I20V+lDi2NCH7dCkmHRa91UB2TxLFZg= -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:40 2025 by rpki-client