This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/84223cd4-3460-3134-a2be-3d2a41e5851c.roa File: 84223cd4-3460-3134-a2be-3d2a41e5851c.roa (raw, json) Hash identifier: 2SbVDU2ud2NI2WwRNwXtIS+OC9HvQV2lx0CERzV2OmA= Subject key identifier: 4D:D3:43:2E:BA:4C:F3:D5:A8:57:38:5D:AE:BC:29:BF:09:8B:BB:72 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C321BD1E0E3B76037F0E7E980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/84223cd4-3460-3134-a2be-3d2a41e5851c.roa Signing time: Mon 15 Dec 2025 14:00:38 +0000 ROA not before: Mon 15 Dec 2025 14:00:38 +0000 ROA not after: Sun 15 Mar 2026 13:00:38 +0000 asID: 401776 IP address blocks: 68.167.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:1b:d1:e0:e3:b7:60:37:f0:e7:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 15 14:00:38 2025 GMT Not After : Mar 15 13:00:38 2026 GMT Subject: CN=1a1fb95a-7f65-4683-bb5f-0011bd05b4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:05:9c:27:87:bd:df:e1:d3:91:e1:c3:79:4a: ad:88:de:0b:70:32:ac:34:b6:cd:e7:c5:90:36:cc: 59:4b:c4:bf:12:2c:ea:4e:c5:44:89:71:92:da:e2: e6:b8:4e:32:8b:87:e5:c7:6c:4f:2c:7b:f6:fe:69: 90:b7:96:2b:9e:cf:ac:7b:36:ed:a4:90:ce:21:2a: 0a:f6:1e:e2:70:78:54:e7:5c:77:2d:8d:cc:7c:f0: ec:b8:88:25:b9:a9:88:3c:c3:ff:f2:bf:07:c1:15: cc:1f:30:f2:a2:68:cc:33:e6:c3:57:55:b2:89:af: 02:b9:8f:32:c8:4f:c7:af:a3:88:ae:82:36:db:d7: 7e:12:e5:9c:76:0f:1d:98:d9:b1:37:7a:1c:57:30: 8f:2c:07:23:d7:b4:10:ca:af:39:45:3e:0b:b3:69: 38:8e:00:33:87:f7:64:4e:d9:ae:d3:d6:49:9a:96: c2:54:77:0c:a6:be:3c:81:55:1c:7a:f6:65:f7:5f: 59:09:93:d1:f7:e4:cd:9e:7f:02:92:98:41:71:29: 49:80:a0:14:3f:23:43:e7:bb:08:f2:9f:5f:9e:a5: 06:e2:86:3d:c9:77:b9:97:e8:46:c9:b6:42:c6:8f: fd:7a:a9:75:42:7b:6d:c7:8c:06:9a:da:ed:dc:1a: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:43:2E:BA:4C:F3:D5:A8:57:38:5D:AE:BC:29:BF:09:8B:BB:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/84223cd4-3460-3134-a2be-3d2a41e5851c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a2:70:be:2b:ee:32:37:e1:73:a3:33:10:61:5e:84:0d:a4: 5d:25:d5:5e:eb:e7:20:e7:6b:8f:b0:f5:e9:56:a1:44:ae:90: 53:8c:23:92:cd:41:e6:0f:06:4a:bb:aa:b6:4a:24:32:98:56: 45:5e:a7:93:31:48:ec:29:33:7d:80:5f:34:01:4c:3d:a7:b0: 89:4d:68:b9:8a:2b:84:35:57:02:f1:e6:96:92:f0:e3:77:cb: be:74:e7:75:42:2f:0c:6b:81:2f:8c:f9:cd:4b:e6:03:2a:4d: 51:ca:6f:3a:7c:69:0d:12:03:28:a2:ae:85:22:1b:6d:c2:79: be:dd:16:5d:9f:01:b3:56:6a:f2:20:5f:fb:fe:dd:ad:c9:07: 6d:21:7b:f8:f2:c0:90:e1:86:0f:31:31:b2:52:33:62:ab:c2: 45:89:f0:0f:52:4d:78:cf:0c:46:74:e4:0e:44:17:ac:6b:49: 7f:8e:01:2b:19:32:65:1b:9c:e0:59:94:9e:50:e1:bc:83:f0: 98:57:35:a7:22:62:c6:0f:96:f4:3b:d5:25:eb:b5:c6:be:6c: 38:73:60:da:c1:a0:42:89:06:9b:e6:2e:1a:21:5a:11:56:35: 8b:c5:b3:ee:79:de:67:93:44:53:7b:8b:a1:de:a3:1b:1f:72: d5:ba:1e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwyG9Hg47dgN/Dn6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxNTE0MDAzOFoXDTI2MDMxNTEzMDAzOFowLzEtMCsGA1UEAxMk MWExZmI5NWEtN2Y2NS00NjgzLWJiNWYtMDAxMWJkMDViNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwWcJ4e93+HTkeHDeUqtiN4LcDKsNLbN58WQ NsxZS8S/EizqTsVEiXGS2uLmuE4yi4flx2xPLHv2/mmQt5Yrns+sezbtpJDOISoK 9h7icHhU51x3LY3MfPDsuIgluamIPMP/8r8HwRXMHzDyomjMM+bDV1Wyia8CuY8y yE/Hr6OIroI229d+EuWcdg8dmNmxN3ocVzCPLAcj17QQyq85RT4Ls2k4jgAzh/dk Ttmu09ZJmpbCVHcMpr48gVUcevZl919ZCZPR9+TNnn8CkphBcSlJgKAUPyND57sI 8p9fnqUG4oY9yXe5l+hGybZCxo/9eql1Qnttx4wGmtrt3Bp5nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3TQy66TPPVqFc4Xa68Kb8Ji7tyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODQyMjNjZDQtMzQ2MC0z MTM0LWEyYmUtM2QyYTQxZTU4NTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqicL4r7jI34XOjMxBhXoQNpF0l1V7r5yDna4+w9elWoUSukFOMI5LN QeYPBkq7qrZKJDKYVkVep5MxSOwpM32AXzQBTD2nsIlNaLmKK4Q1VwLx5paS8ON3 y75053VCLwxrgS+M+c1L5gMqTVHKbzp8aQ0SAyiiroUiG23Ceb7dFl2fAbNWavIg X/v+3a3JB20he/jywJDhhg8xMbJSM2KrwkWJ8A9STXjPDEZ05A5EF6xrSX+OASsZ MmUbnOBZlJ5Q4byD8JhXNaciYsYPlvQ71SXrtca+bDhzYNrBoEKJBpvmLhohWhFW NYvFs+553meTRFN7i6HeoxsfctW6Hrs= -----END CERTIFICATE-----Generated at Sat Dec 20 09:36:08 2025 by rpki-client