This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/86a6890f-d387-332a-b975-7fe01a34a94c.roa File: 86a6890f-d387-332a-b975-7fe01a34a94c.roa (raw, json) Hash identifier: CTN3UJ8nMwoUWDCR9zZFrYxw/zaY8eBZwhuvli9Bl/w= Subject key identifier: 66:92:CF:F2:49:3E:4F:A9:8D:2A:02:97:F9:C2:5C:04:6D:A0:E9:C3 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BC27067D911D0C51C669C5200 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/86a6890f-d387-332a-b975-7fe01a34a94c.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 46215 IP address blocks: 216.89.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:67:d9:11:d0:c5:1c:66:9c:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=5ec85a24-a5dd-4e11-9dff-b77cb95a0e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:ca:f6:16:ef:06:33:17:63:5e:4e:9b:12: 25:c4:ab:6d:8c:fe:e3:9c:60:d1:54:51:ad:28:43: 84:68:6c:c4:f0:d6:1d:7d:6a:8d:a3:ef:db:a9:25: 85:3d:cb:5d:32:99:d5:fa:e3:30:39:10:af:ea:6b: e9:1a:e3:94:1c:88:3a:dd:c5:8f:ac:02:61:d5:85: ba:92:56:e8:74:35:01:0c:5f:56:95:cb:fd:06:e3: 9b:0c:f8:6e:22:b1:36:69:96:23:c1:d8:5f:28:ce: 54:22:c4:23:c6:5f:c0:65:1b:79:88:18:58:c4:52: aa:e3:3a:0d:d4:4d:b9:7f:24:28:34:81:42:8b:d6: e0:37:30:df:ca:b2:98:65:85:e8:ea:0d:d5:ec:d0: b8:39:e0:90:5a:c4:37:95:64:e6:31:6d:c9:69:b5: 6a:ed:d6:17:37:14:e9:24:0e:62:5f:e2:a5:73:18: a6:74:20:72:e2:93:ad:8c:bf:b4:27:94:f2:3a:c3: bb:b2:ed:d2:73:47:d4:10:67:9a:5d:0a:c7:b6:c6: 3f:11:d8:d3:ac:ac:c0:32:ca:9a:d4:f5:66:4d:2b: dc:7c:35:e1:9f:99:09:a3:86:64:fc:9b:f4:85:10: 43:d5:b6:9d:e0:6c:30:d3:39:d9:fe:e2:9f:ac:2e: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:92:CF:F2:49:3E:4F:A9:8D:2A:02:97:F9:C2:5C:04:6D:A0:E9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/86a6890f-d387-332a-b975-7fe01a34a94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 216.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:56:f6:48:ad:ae:43:c4:49:0e:bb:80:3c:44:3f:de:34:89: 77:77:2a:84:75:a9:2c:8b:72:41:6e:64:d2:1f:c5:40:ae:88: be:f9:21:31:bd:20:93:0e:59:14:d9:fa:ce:c5:11:38:99:36: 75:ee:71:56:dc:37:65:48:67:7a:58:e2:84:fa:2b:fe:32:10: 6c:48:8d:97:54:9c:84:5c:37:bc:5a:e3:d9:f3:08:88:43:f1: 19:76:cb:f2:3e:2f:40:fe:00:80:c3:1f:e3:29:84:de:05:7d: 2a:1b:1f:f0:78:71:da:6e:5f:06:8a:cf:a0:74:6c:6e:8a:ae: 4b:63:4b:2f:9f:a7:dc:55:cb:4e:b3:2b:f5:70:e8:de:e2:aa: d2:1a:89:65:95:cd:4e:2b:cf:0f:6b:70:a6:f9:90:33:87:cd: bc:ab:c3:86:77:5e:2c:d6:b8:f5:fa:e6:7a:30:b2:c5:ce:29: 71:b0:f1:97:2c:e1:95:df:a9:9f:5a:1d:1e:89:86:ef:40:09: 83:3f:63:88:26:f3:82:9d:77:dc:f7:fb:02:92:e6:d7:07:1f: 21:a4:b3:f3:62:c3:8d:b7:28:52:8c:09:87:f0:7b:5d:32:2a: e9:7f:a2:4e:f7:6f:92:51:8a:64:01:94:87:d7:3e:ff:20:86: a0:d3:23:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcGfZEdDFHGacUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NWVjODVhMjQtYTVkZC00ZTExLTlkZmYtYjc3Y2I5NWEwZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ILK9hbvBjMXY15OmxIlxKttjP7jnGDRVFGt KEOEaGzE8NYdfWqNo+/bqSWFPctdMpnV+uMwORCv6mvpGuOUHIg63cWPrAJh1YW6 klbodDUBDF9Wlcv9BuObDPhuIrE2aZYjwdhfKM5UIsQjxl/AZRt5iBhYxFKq4zoN 1E25fyQoNIFCi9bgNzDfyrKYZYXo6g3V7NC4OeCQWsQ3lWTmMW3JabVq7dYXNxTp JA5iX+KlcximdCBy4pOtjL+0J5TyOsO7su3Sc0fUEGeaXQrHtsY/EdjTrKzAMsqa 1PVmTSvcfDXhn5kJo4Zk/Jv0hRBD1bad4Gww0znZ/uKfrC5fOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaSz/JJPk+pjSoCl/nCXARtoOnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODZhNjg5MGYtZDM4Ny0z MzJhLWI5NzUtN2ZlMDFhMzRhOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpW9kitrkPESQ67gDxEP940iXd3KoR1qSyLckFuZNIfxUCuiL75ITG9 IJMOWRTZ+s7FETiZNnXucVbcN2VIZ3pY4oT6K/4yEGxIjZdUnIRcN7xa49nzCIhD 8Rl2y/I+L0D+AIDDH+MphN4FfSobH/B4cdpuXwaKz6B0bG6KrktjSy+fp9xVy06z K/Vw6N7iqtIaiWWVzU4rzw9rcKb5kDOHzbyrw4Z3XizWuPX65nowssXOKXGw8Zcs 4ZXfqZ9aHR6Jhu9ACYM/Y4gm84Kdd9z3+wKS5tcHHyGks/Niw423KFKMCYfwe10y Kul/ok73b5JRimQBlIfXPv8ghqDTI3g= -----END CERTIFICATE-----Generated at Tue Nov 25 14:35:51 2025 by rpki-client