This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa
File: c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa (raw, json)
Hash identifier: 7iIyNqHeJhPmfg3RVWrR+aFE0FtwHCSn1FWcsfqwmX4=
Subject key identifier: 2A:BD:F6:E7:53:36:15:14:1A:8A:8F:C9:E7:42:B2:77:06:F3:2C:64
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BFD10CD33A15E62F4F8393F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa
Signing time: Wed 26 Nov 2025 14:00:39 +0000
ROA not before: Wed 26 Nov 2025 14:00:39 +0000
ROA not after: Tue 24 Feb 2026 14:00:39 +0000
asID: 701
IP address blocks: 68.238.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fd:10:cd:33:a1:5e:62:f4:f8:39:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 26 14:00:39 2025 GMT
Not After : Feb 24 14:00:39 2026 GMT
Subject: CN=cc388bbc-59a1-441f-a3f3-bea5a3758e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:90:32:7f:9a:94:19:89:8e:2d:c5:72:3c:
d7:44:d8:81:62:56:66:3c:f3:dc:41:f4:b8:9e:46:
01:ba:48:f6:71:2b:e9:e7:42:2b:24:37:2e:3c:11:
58:3b:b5:84:f4:f8:64:b0:c2:ad:4e:5d:d0:11:33:
2b:0b:ce:82:7e:d1:46:ad:85:60:95:51:1a:2f:82:
ce:a8:2e:0e:dd:73:f4:21:23:96:1b:02:ce:3f:c7:
b1:32:0a:c9:18:75:49:14:13:18:11:45:34:7e:f0:
88:9a:05:b3:f0:17:46:d9:f1:f7:52:29:4b:ce:f6:
9b:9b:96:3f:f1:d4:bc:db:d4:76:3b:de:f0:1f:a2:
11:b3:6e:3c:7f:e4:9e:df:54:90:39:5b:cd:4e:5f:
09:05:c5:f1:12:54:70:da:a7:e9:bb:09:ed:29:eb:
59:2d:b0:b1:00:0e:28:78:c8:5a:c7:88:11:1e:50:
7c:50:ef:e6:d2:6c:68:7b:33:fb:e0:ea:36:2e:d9:
a7:ac:57:fc:22:45:63:b0:4b:44:bf:2f:91:d7:9f:
e3:63:54:37:3a:3f:99:3f:5c:8f:fa:4b:b0:5d:53:
3a:1b:91:ab:f2:67:5a:bb:96:27:3e:11:83:66:ca:
1e:e8:f8:c1:d0:bd:66:5b:e3:56:7f:0d:21:75:14:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:F6:E7:53:36:15:14:1A:8A:8F:C9:E7:42:B2:77:06:F3:2C:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:1e:03:0d:bf:6d:92:d6:cc:8c:ce:fc:2e:3e:8a:52:9f:28:
aa:d0:0d:e4:26:fb:af:73:e9:94:15:55:74:b3:fa:78:a1:57:
42:67:4a:52:3e:a4:c2:c6:c4:5f:0c:7d:ad:78:4c:57:81:2d:
ed:6b:59:17:64:14:be:59:7e:7c:96:da:9c:e7:0a:ec:8c:1b:
2a:e6:63:c2:8b:3a:ca:7c:29:50:b3:97:b6:35:f0:32:32:cc:
8d:da:72:ac:49:70:a3:0d:6b:dc:5d:85:9d:3f:ff:65:76:06:
b2:e0:d1:19:75:a0:46:4f:7f:41:32:e9:d6:01:a1:1b:a5:98:
95:0d:f2:68:26:11:d7:96:e5:2d:f5:6d:87:5a:83:e8:33:42:
cc:3a:20:4b:10:3a:1b:c0:8a:a6:1e:76:3f:52:8e:eb:eb:5d:
e2:43:9d:80:ce:0d:fa:ad:98:ff:0d:08:e0:8d:45:c2:dd:06:
b0:3f:d9:f1:17:14:4a:0f:1e:51:1b:ac:3c:32:45:41:dc:47:
fb:f2:2b:46:83:46:86:25:8b:c8:11:5e:64:dc:25:ec:1a:fc:
03:78:e2:f1:c1:d0:33:7f:2f:7c:1f:2c:5c:f4:c1:68:df:63:
55:d2:33:0b:7e:e4:73:44:64:b5:ca:5b:28:e7:12:2f:02:cb:
80:03:b9:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EM0zoV5i9Pg5PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
Y2MzODhiYmMtNTlhMS00NDFmLWEzZjMtYmVhNWEzNzU4ZTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmmQMn+alBmJji3FcjzXRNiBYlZmPPPcQfS4
nkYBukj2cSvp50IrJDcuPBFYO7WE9PhksMKtTl3QETMrC86CftFGrYVglVEaL4LO
qC4O3XP0ISOWGwLOP8exMgrJGHVJFBMYEUU0fvCImgWz8BdG2fH3UilLzvabm5Y/
8dS829R2O97wH6IRs248f+Se31SQOVvNTl8JBcXxElRw2qfpuwntKetZLbCxAA4o
eMhax4gRHlB8UO/m0mxoezP74Oo2LtmnrFf8IkVjsEtEvy+R15/jY1Q3Oj+ZP1yP
+kuwXVM6G5Gr8mdau5YnPhGDZsoe6PjB0L1mW+NWfw0hdRREGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCq99udTNhUUGoqPyedCsncG8yxkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdjZGMzODgtYjdlYS0z
NjI4LTllYzktOGM4YTM2YTljMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4eAw2/bZLWzIzO/C4+ilKfKKrQDeQm+69z6ZQVVXSz+nihV0JnSlI+
pMLGxF8Mfa14TFeBLe1rWRdkFL5ZfnyW2pznCuyMGyrmY8KLOsp8KVCzl7Y18DIy
zI3acqxJcKMNa9xdhZ0//2V2BrLg0Rl1oEZPf0Ey6dYBoRulmJUN8mgmEdeW5S31
bYdag+gzQsw6IEsQOhvAiqYedj9SjuvrXeJDnYDODfqtmP8NCOCNRcLdBrA/2fEX
FEoPHlEbrDwyRUHcR/vyK0aDRoYli8gRXmTcJewa/AN44vHB0DN/L3wfLFz0wWjf
Y1XSMwt+5HNEZLXKWyjnEi8Cy4ADuT8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:18:32 2025 by rpki-client