This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa File: f888de86-3463-3a63-8174-d3a0f5ba50a4.roa (raw, json) Hash identifier: TxsoPb1hqv/Ny6nFSaElwBJab506oXKOvq8TaXxlJiY= Subject key identifier: 02:0E:F6:FA:8C:4A:18:34:5B:A0:3A:A5:B7:40:78:19:80:34:13:84 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C1366467679F097D8BBA43D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa Signing time: Thu 04 Dec 2025 14:00:39 +0000 ROA not before: Thu 04 Dec 2025 14:00:39 +0000 ROA not after: Wed 04 Mar 2026 14:00:39 +0000 asID: 5065 IP address blocks: 68.166.191.0/24 maxlen: 24 68.167.66.0/24 maxlen: 24 68.167.147.0/24 maxlen: 24 68.167.181.0/24 maxlen: 24 68.167.199.0/24 maxlen: 24 68.167.250.0/24 maxlen: 24 68.167.252.0/24 maxlen: 24 68.167.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:66:46:76:79:f0:97:d8:bb:a4:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 4 14:00:39 2025 GMT Not After : Mar 4 14:00:39 2026 GMT Subject: CN=b3705ce0-8648-421a-a0be-946934124212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:a1:62:29:7c:26:78:5c:fe:83:a6:5f:b2: 6d:a1:73:6f:cf:6e:ae:4a:ed:34:ca:98:66:21:a8: 64:7b:14:81:b6:81:59:c2:59:13:71:68:3a:30:85: 54:1b:55:03:06:49:8a:34:de:56:ab:b0:3a:bb:24: 7c:26:1c:8b:3b:5b:11:85:cb:58:d9:e7:ba:14:c6: b8:64:15:a1:81:57:8b:8d:7f:40:5b:16:35:94:79: ee:44:c9:37:13:c1:ac:73:ab:b1:c4:04:e2:7e:62: 54:04:fc:87:a8:4a:3e:34:6b:ad:c6:54:3f:87:1c: b4:56:f4:6d:cc:71:f2:7f:62:6a:27:66:39:ff:22: ce:0d:b4:41:47:07:28:2e:cf:71:65:f0:cf:a5:dd: 35:6c:85:47:b5:ab:74:4e:a4:38:6b:e3:72:08:dc: 29:56:7e:7b:2e:6b:20:6c:78:36:2d:60:f8:e9:01: 8c:b0:56:d6:98:f0:4a:24:b0:4d:b1:f9:1b:a3:8c: b0:3c:65:8e:69:6f:06:b5:dd:7b:49:aa:0e:8b:1b: 3c:c9:23:47:d0:e4:e9:ce:e8:5d:67:30:26:05:32: 61:cd:24:4b:a1:68:5c:43:56:7c:1f:bf:d7:f6:62: 2f:01:fe:f2:9e:ea:25:b4:80:a5:42:60:8b:32:65: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:F6:FA:8C:4A:18:34:5B:A0:3A:A5:B7:40:78:19:80:34:13:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.191.0/24 68.167.66.0/24 68.167.147.0/24 68.167.181.0/24 68.167.199.0/24 68.167.250.0/24 68.167.252.0/24 68.167.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c1:5d:5b:7a:70:91:2f:1d:60:f9:fb:7b:53:4f:64:c6:f1: 79:2c:47:62:10:45:97:dd:d3:bd:5e:a4:d9:4e:6b:ca:d2:5b: 96:72:eb:94:cd:49:a8:2e:45:98:a4:58:97:18:a2:03:0e:9f: 9e:12:36:00:7e:91:45:79:a8:ba:12:39:0a:e7:38:fd:06:f6: 1e:b3:79:72:0d:83:13:be:e2:2f:42:89:f3:b4:af:a9:d8:68: ae:f0:3e:26:79:c4:fd:70:16:7a:4e:18:e0:77:86:4c:20:a0: 16:fe:19:93:28:24:03:0c:84:e9:07:46:f9:ab:44:06:9b:e1: 0e:34:7f:64:ae:2d:7f:d0:9c:c7:19:9a:2a:73:88:5f:5f:4e: 1d:95:9b:ca:d2:08:f8:4e:f6:0f:24:e5:e9:a3:18:72:cb:03: 1c:c4:d1:cd:76:b8:92:e2:23:86:d9:38:bf:81:02:cf:8f:18: 8b:18:44:1d:d3:ee:7a:48:1a:21:5d:9d:b9:0e:d8:09:05:a4: 14:f3:77:7d:61:0b:6b:c3:f9:68:27:a0:5c:f0:c2:9b:8b:f7: 3f:23:4b:8e:94:2b:0f:54:c1:cd:b8:49:15:c8:c3:58:e3:a8: 44:e9:73:40:2c:90:76:2d:3f:c3:d8:9d:e2:b0:2e:cf:37:b7: 16:7c:a5:89 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEwTZkZ2efCX2LukPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk YjM3MDVjZTAtODY0OC00MjFhLWEwYmUtOTQ2OTM0MTI0MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmhYil8Jnhc/oOmX7JtoXNvz26uSu00yphm IahkexSBtoFZwlkTcWg6MIVUG1UDBkmKNN5Wq7A6uyR8JhyLO1sRhctY2ee6FMa4 ZBWhgVeLjX9AWxY1lHnuRMk3E8Gsc6uxxATifmJUBPyHqEo+NGutxlQ/hxy0VvRt zHHyf2JqJ2Y5/yLODbRBRwcoLs9xZfDPpd01bIVHtat0TqQ4a+NyCNwpVn57Lmsg bHg2LWD46QGMsFbWmPBKJLBNsfkbo4ywPGWOaW8Gtd17SaoOixs8ySNH0OTpzuhd ZzAmBTJhzSRLoWhcQ1Z8H7/X9mIvAf7ynuoltIClQmCLMmU8gwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFAIO9vqMShg0W6A6pbdAeBmANBOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjg4OGRlODYtMzQ2My0z YTYzLTgxNzQtZDNhMGY1YmE1MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQARKa/AwQA RKdCAwQARKeTAwQARKe1AwQARKfHAwQARKf6AwQARKf8AwQARKf+MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIbBXVt6cJEvHWD5+3tTT2TG8XksR2IQRZfd071epNlOa8rSW5Zy65TNSaguRZik WJcYogMOn54SNgB+kUV5qLoSOQrnOP0G9h6zeXINgxO+4i9CifO0r6nYaK7wPiZ5 xP1wFnpOGOB3hkwgoBb+GZMoJAMMhOkHRvmrRAab4Q40f2SuLX/QnMcZmipziF9f Th2Vm8rSCPhO9g8k5emjGHLLAxzE0c12uJLiI4bZOL+BAs+PGIsYRB3T7npIGiFd nbkO2AkFpBTzd31hC2vD+WgnoFzwwpuL9z8jS46UKw9Uwc24SRXIw1jjqETpc0As kHYtP8PYneKwLs83txZ8pYk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:03 2025 by rpki-client