This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fd7f6f46-fa35-3c8f-8ca3-b06df3e20c22.roa
File: fd7f6f46-fa35-3c8f-8ca3-b06df3e20c22.roa (raw, json)
Hash identifier: jum+6HKTo/Ngf08qECLk3ZebGycj/Vs7HwnEQ5svsx8=
Subject key identifier: CE:84:32:23:90:DF:86:44:AB:BD:66:EC:ED:1C:CE:DE:F9:B8:F7:5C
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C14CB7C18E94065E609AF32A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fd7f6f46-fa35-3c8f-8ca3-b06df3e20c22.roa
Signing time: Fri 05 Dec 2025 02:00:30 +0000
ROA not before: Fri 05 Dec 2025 02:00:30 +0000
ROA not after: Thu 05 Mar 2026 02:00:30 +0000
asID: 23473
IP address blocks: 68.234.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:14:cb:7c:18:e9:40:65:e6:09:af:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 5 02:00:30 2025 GMT
Not After : Mar 5 02:00:30 2026 GMT
Subject: CN=a3f02d94-6e7c-40e2-943a-3334c8abcd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:bf:b0:5d:84:a3:0c:1c:6d:06:6a:e7:70:
94:91:5f:f4:39:01:67:f9:e9:ad:a1:47:e5:0d:20:
d3:84:90:01:e5:bd:4e:5e:72:06:4c:17:cf:38:be:
8b:39:1f:49:19:9f:89:7d:28:89:19:e6:d6:4c:9d:
21:fc:48:ea:23:e9:ad:57:a7:82:19:6a:66:6b:9d:
b9:78:8b:5d:10:23:c7:20:4c:35:5a:c3:fb:84:2b:
de:1e:29:92:d4:51:17:1c:57:a4:cb:65:a7:51:a0:
f9:8c:da:f1:fd:74:07:c7:85:17:70:6c:da:68:bb:
2f:13:4d:3f:82:3b:cc:88:01:25:7d:57:47:b9:0a:
68:41:b9:5e:b4:f0:cb:51:ca:c4:ba:ce:3e:79:7d:
b9:f0:cf:92:53:82:fb:95:cc:7b:3e:52:90:dc:dd:
29:67:62:d6:39:4b:34:50:82:06:af:10:bc:a8:0c:
61:3d:cb:f9:8b:3f:bd:10:51:c7:bc:db:89:6a:d9:
b6:7c:be:a4:ab:62:44:44:0f:60:fa:26:40:2f:33:
6e:03:4c:06:1a:46:95:2a:0e:6a:0a:47:05:77:3a:
26:0e:d5:d3:19:16:26:a7:8a:59:84:01:66:1b:d1:
b2:02:64:11:b3:05:e2:cc:eb:9c:1c:7f:e5:a3:8d:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:32:23:90:DF:86:44:AB:BD:66:EC:ED:1C:CE:DE:F9:B8:F7:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fd7f6f46-fa35-3c8f-8ca3-b06df3e20c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:c4:b0:36:1f:5e:15:71:1b:b8:63:18:45:69:57:2b:f5:8d:
6a:60:96:54:11:83:69:5e:72:8c:ea:61:5e:3a:45:75:95:11:
b3:3f:5c:f9:79:36:03:7d:21:30:fb:48:00:72:0e:cc:14:51:
56:91:2c:f1:6a:27:f3:35:ca:d1:e6:5e:c8:95:5f:96:18:0d:
71:fd:38:b5:67:de:9d:e0:a9:37:f6:c1:07:99:4f:fe:79:bf:
98:9a:f5:e8:48:7e:dd:74:5d:5c:b9:af:36:6a:da:18:85:5b:
1f:23:00:ae:a4:4d:66:84:a5:2e:a4:65:00:91:e0:2e:57:21:
8c:2e:36:af:b3:ea:86:ad:83:75:b6:c0:10:ee:31:a8:a8:46:
83:f9:d3:b4:ff:98:cc:45:11:39:7d:b9:d9:9c:70:d0:f3:b4:
5e:1b:db:f0:15:82:fe:2c:25:43:90:f9:2c:f8:cb:e1:a7:68:
4b:ef:4c:62:ce:26:c3:f3:6e:ea:27:1f:77:d1:41:eb:54:35:
db:8b:ca:c3:f3:13:2f:b6:f8:bb:60:03:7d:5b:81:46:da:28:
2a:13:a3:fb:33:b3:d9:b8:86:56:26:7d:15:11:0c:fc:26:76:
53:1b:f0:41:1d:6f:5c:e7:f7:ea:d4:ab:4d:cb:14:c6:3d:11:
14:e0:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:44:04 2025 by rpki-client