This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa File: 8b689cd5-478c-384f-aae2-5952f84246c8.roa (raw, json) Hash identifier: JR7/Uc+WWmdvxG1b2uydh0iAHbJiLTM2vdEbNfN7AB8= Subject key identifier: CE:13:31:FF:41:B4:77:19:06:37:9F:0C:ED:2C:74:01:40:15:73:CA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BECE5C854A869A19071A53B80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa Signing time: Thu 20 Nov 2025 19:01:27 +0000 ROA not before: Thu 20 Nov 2025 19:01:27 +0000 ROA not after: Wed 18 Feb 2026 19:01:27 +0000 asID: 393560 IP address blocks: 168.143.255.66/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:e5:c8:54:a8:69:a1:90:71:a5:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 20 19:01:27 2025 GMT Not After : Feb 18 19:01:27 2026 GMT Subject: CN=8c7765e3-fc1d-472c-8c28-843e3977f652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:31:1a:e7:77:5d:53:d4:1f:78:53:01:cf: 80:9f:b0:8b:9e:f8:92:0d:c8:68:69:33:d3:9c:c3: 92:c5:42:a8:09:96:a9:a4:5a:ce:1b:37:90:bd:e4: 03:b8:3d:e6:53:8a:1c:a9:21:da:6d:fe:52:19:7d: 4e:c0:39:2e:18:47:1c:b3:91:67:cb:7b:81:92:1a: 3a:93:01:2f:9a:b1:48:e9:6c:d1:b4:a1:85:48:50: 9d:ba:1b:26:0f:2d:70:85:fa:cf:69:33:a5:65:a9: 4e:20:c4:ff:f8:f5:a1:47:88:5b:53:f6:a1:1f:7d: 8f:03:41:7c:a3:6c:06:c4:50:7b:63:ab:d0:b2:3b: 83:94:25:40:39:36:fa:1a:d0:70:a8:3a:b2:11:72: 00:2c:b6:14:39:b2:0d:16:8f:cb:af:26:a5:78:47: cf:f4:68:80:cd:54:fe:14:6d:0d:35:5f:38:8c:51: f6:0f:1b:ab:52:52:ab:66:24:3b:1d:2f:54:73:47: 67:17:c4:d1:62:19:87:3e:2d:69:90:68:3c:52:66: 7b:2f:d2:db:92:b6:d9:0d:02:a1:a9:79:a7:29:ca: c3:8f:ff:11:63:37:a5:dd:e8:89:34:a6:bc:75:ff: 58:1e:9c:13:81:4f:e1:42:41:63:94:26:8c:b2:c7: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:13:31:FF:41:B4:77:19:06:37:9F:0C:ED:2C:74:01:40:15:73:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.255.66/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:03:88:7f:58:a3:97:ee:64:3d:a8:38:04:b3:9a:f9:ff:7e: a1:07:79:03:17:3c:db:48:15:77:69:84:75:b0:e0:53:5b:43: dd:e1:14:30:8d:20:8f:9c:69:0f:f4:be:00:2b:8e:06:e7:2a: cd:48:3a:43:54:4c:d9:e9:f0:db:08:80:bf:c3:c6:1f:c0:aa: 32:3b:ef:a8:ae:bc:ef:f1:fa:37:82:63:73:fe:05:9e:df:95: ca:44:c7:e2:c7:bc:12:b8:c2:20:ea:04:59:93:88:18:0a:88: 90:a9:2e:85:c9:ab:80:d4:62:df:9c:27:59:5b:9d:94:16:b6: b0:4d:d6:b3:20:4c:57:ff:91:8f:99:53:4f:52:9e:e0:07:57: c3:69:49:9d:7a:5f:2c:80:33:f6:a0:9d:0c:d6:ed:0d:9a:dd: 72:be:ae:06:f7:c4:1c:90:00:ca:bb:14:5e:dc:77:cd:bd:3f: ef:ee:db:3a:67:69:a1:43:2e:35:6b:fe:0c:e7:0c:63:36:f9: cc:91:7e:23:a8:37:d8:fe:26:29:7f:c6:60:82:99:4b:9a:61: 09:64:e3:5f:f8:22:c4:d1:c3:94:cd:15:13:80:88:17:9a:35: 7c:f2:e3:9e:e5:eb:23:95:83:c2:c6:5c:a7:ae:f3:a4:c2:32: 6b:b9:73:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvs5chUqGmhkHGlO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEyMDE5MDEyN1oXDTI2MDIxODE5MDEyN1owLzEtMCsGA1UEAxMk OGM3NzY1ZTMtZmMxZC00NzJjLThjMjgtODQzZTM5NzdmNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8IxGud3XVPUH3hTAc+An7CLnviSDchoaTPT nMOSxUKoCZappFrOGzeQveQDuD3mU4ocqSHabf5SGX1OwDkuGEccs5Fny3uBkho6 kwEvmrFI6WzRtKGFSFCduhsmDy1whfrPaTOlZalOIMT/+PWhR4hbU/ahH32PA0F8 o2wGxFB7Y6vQsjuDlCVAOTb6GtBwqDqyEXIALLYUObINFo/LryaleEfP9GiAzVT+ FG0NNV84jFH2DxurUlKrZiQ7HS9Uc0dnF8TRYhmHPi1pkGg8UmZ7L9LbkrbZDQKh qXmnKcrDj/8RYzel3eiJNKa8df9YHpwTgU/hQkFjlCaMssf7QQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM4TMf9BtHcZBjefDO0sdAFAFXPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGI2ODljZDUtNDc4Yy0z ODRmLWFhZTItNTk1MmY4NDI0NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAqI//QjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCkA4h/WKOX7mQ9qDgEs5r5/36hB3kDFzzbSBV3aYR1sOBTW0Pd4RQw jSCPnGkP9L4AK44G5yrNSDpDVEzZ6fDbCIC/w8YfwKoyO++orrzv8fo3gmNz/gWe 35XKRMfix7wSuMIg6gRZk4gYCoiQqS6FyauA1GLfnCdZW52UFrawTdazIExX/5GP mVNPUp7gB1fDaUmdel8sgDP2oJ0M1u0Nmt1yvq4G98QckADKuxRe3HfNvT/v7ts6 Z2mhQy41a/4M5wxjNvnMkX4jqDfY/iYpf8ZggplLmmEJZONf+CLE0cOUzRUTgIgX mjV88uOe5esjlYPCxlynrvOkwjJruXPv -----END CERTIFICATE-----Generated at Sat Nov 22 06:02:50 2025 by rpki-client