This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/643297e7-3241-31d9-8ffa-28a2dafec2b0.roa File: 643297e7-3241-31d9-8ffa-28a2dafec2b0.roa (raw, json) Hash identifier: AqYcqaWiaK3H5EfkhS7+x19qhhmM/Q5xeT61s4dKNgo= Subject key identifier: B5:7C:E7:9D:24:C7:A9:7F:51:CD:73:04:2F:64:B8:85:61:CF:2F:8B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C0140FA8D5AE6A57A2667E880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/643297e7-3241-31d9-8ffa-28a2dafec2b0.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 23473 IP address blocks: 66.253.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:fa:8d:5a:e6:a5:7a:26:67:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=7a89d508-da03-4b66-97e7-bd3e065f293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:db:7e:19:b7:39:0b:6b:be:42:a4:ef:33: 13:f1:b6:86:3e:71:f2:f3:9a:1c:05:e2:e9:87:c0: 79:0d:13:fa:a4:cb:c8:d0:8f:7a:88:f3:34:d3:d3: 05:09:48:22:96:76:f4:54:4f:c4:49:e2:76:47:74: c5:9b:a1:ff:aa:d1:98:77:07:8b:4d:8d:f2:53:49: 3b:cf:23:67:71:e0:24:cf:6c:6d:c9:a9:db:cb:d5: b9:30:b0:c9:c4:3d:fd:0b:d8:84:46:50:cc:15:42: 11:ea:1d:ac:1e:d9:fa:03:27:f3:e8:5b:28:63:b6: 30:1a:91:32:92:0c:9c:9c:41:94:08:5f:f3:72:95: 01:da:d1:cf:20:d0:f9:15:4c:82:37:69:f4:e6:af: 95:76:d2:0b:cd:ed:64:9f:60:93:cd:27:df:46:a9: b0:17:67:e3:2a:61:35:f4:89:14:bc:3a:59:53:ae: d2:5d:b6:dc:8a:b6:d9:3c:44:21:d6:e0:bd:65:7f: 59:54:c3:9b:ab:5a:ec:16:10:6c:05:bd:10:23:62: a7:a5:60:f0:f6:fa:c0:70:ad:3b:7c:c0:45:01:e8: d1:77:78:f3:30:0c:65:f4:b5:d2:1e:7c:41:03:5b: cf:ec:bd:d7:1a:1a:f8:bf:ff:9e:23:1e:56:b3:4d: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7C:E7:9D:24:C7:A9:7F:51:CD:73:04:2F:64:B8:85:61:CF:2F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/643297e7-3241-31d9-8ffa-28a2dafec2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ba:7d:5c:36:2b:ca:96:8d:6f:75:54:cd:6e:75:50:d4:b6: 02:6c:e8:12:db:fb:07:a8:95:b9:7d:cc:b5:71:7b:ac:e3:1c: c8:6a:f6:84:fb:c0:82:1f:10:76:a9:9e:83:5c:26:8f:4c:7b: fb:13:a5:6f:32:1e:3a:13:3e:cc:8c:d0:f4:c1:ba:8a:91:e7: 89:2c:74:94:89:cd:59:f1:a7:2c:ca:d8:93:b1:a6:a6:95:e1: 6d:18:45:9e:17:5d:92:d0:47:0e:f8:bf:c5:94:b6:e7:1e:69: 46:a8:3d:20:e2:39:9e:92:d1:5a:a7:7a:d1:6e:03:3a:be:cf: 1a:8b:6a:9c:0f:7f:5b:6b:f1:32:89:c5:df:63:f2:8a:a5:16: 1d:33:26:5d:cb:56:ff:42:cf:96:e2:83:07:fb:66:fb:63:13: ba:fd:ab:51:d6:18:13:80:a3:45:37:1b:95:7c:ce:bf:1b:fb: 87:f5:ae:42:66:10:a3:54:c4:08:14:0d:86:99:ea:7f:d3:a1: 98:38:e7:98:57:0e:ab:e1:9b:45:c4:87:8e:27:aa:54:bd:33: 64:d8:ce:ab:5d:87:2f:d3:58:63:53:fb:cd:9a:e9:12:53:31: ac:2c:7f:88:63:cd:e7:ad:d9:1f:65:7d:47:32:7d:07:ba:c8: 7b:dd:d1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQPqNWualeiZn6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk N2E4OWQ1MDgtZGEwMy00YjY2LTk3ZTctYmQzZTA2NWYyOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvjbfhm3OQtrvkKk7zMT8baGPnHy85ocBeLp h8B5DRP6pMvI0I96iPM009MFCUgilnb0VE/ESeJ2R3TFm6H/qtGYdweLTY3yU0k7 zyNnceAkz2xtyanby9W5MLDJxD39C9iERlDMFUIR6h2sHtn6Ayfz6FsoY7YwGpEy kgycnEGUCF/zcpUB2tHPIND5FUyCN2n05q+VdtILze1kn2CTzSffRqmwF2fjKmE1 9IkUvDpZU67SXbbcirbZPEQh1uC9ZX9ZVMObq1rsFhBsBb0QI2KnpWDw9vrAcK07 fMBFAejRd3jzMAxl9LXSHnxBA1vP7L3XGhr4v/+eIx5Ws00QZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV8550kx6l/Uc1zBC9kuIVhzy+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNjQzMjk3ZTctMzI0MS0z MWQ5LThmZmEtMjhhMmRhZmVjMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi6fVw2K8qWjW91VM1udVDUtgJs6BLb+weolbl9zLVxe6zjHMhq9oT7 wIIfEHapnoNcJo9Me/sTpW8yHjoTPsyM0PTBuoqR54ksdJSJzVnxpyzK2JOxpqaV 4W0YRZ4XXZLQRw74v8WUtuceaUaoPSDiOZ6S0VqnetFuAzq+zxqLapwPf1tr8TKJ xd9j8oqlFh0zJl3LVv9Cz5bigwf7ZvtjE7r9q1HWGBOAo0U3G5V8zr8b+4f1rkJm EKNUxAgUDYaZ6n/ToZg455hXDqvhm0XEh44nqlS9M2TYzqtdhy/TWGNT+82a6RJT Mawsf4hjzeet2R9lfUcyfQe6yHvd0Tw= -----END CERTIFICATE-----Generated at Sat Dec 20 09:43:22 2025 by rpki-client