This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa File: f7b3b4db-44c1-3096-8bf9-01bfba232028.roa (raw, json) Hash identifier: LLex98/RVkJyfebzewC9TIRMY0E6BPCYvIHvK3vgkqk= Subject key identifier: 94:57:BF:6F:8B:DB:2D:BC:E2:96:B6:27:46:78:2A:AE:18:FF:A8:ED Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584BEDB5DF6E6D344EA065C60900 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 63023 IP address blocks: 67.220.66.0/23 maxlen: 24 67.220.70.0/23 maxlen: 24 67.220.72.0/22 maxlen: 24 67.220.80.0/24 maxlen: 24 67.220.82.0/24 maxlen: 24 67.220.85.0/24 maxlen: 24 67.220.86.0/23 maxlen: 24 67.220.88.0/23 maxlen: 24 67.220.94.0/23 maxlen: 24 68.168.31.0/24 maxlen: 24 69.42.209.0/24 maxlen: 24 186.190.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:df:6e:6d:34:4e:a0:65:c6:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=a47befbd-74b9-4fdc-8625-3cb3d4334216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:11:1a:aa:26:eb:62:02:db:2f:27:d8:8e: 05:4e:7d:73:f6:08:52:b2:80:b7:c8:a4:0d:a3:a7: e4:98:cf:aa:c0:63:fa:d4:b6:30:1e:75:34:00:83: f3:c0:85:93:27:a1:88:d3:34:0d:0b:a5:c3:48:1f: 1f:e7:cf:40:0b:cc:46:da:83:a7:ec:25:59:65:51: bd:04:a1:53:4a:b6:b0:fe:e8:e1:57:71:b7:a5:95: 4a:b2:9f:79:0e:98:c9:6a:66:03:ea:76:c5:98:83: 4c:79:36:ec:e8:17:86:25:6e:18:88:3e:43:5e:7d: 82:a4:b6:34:31:6c:a8:55:d7:61:40:d0:73:57:2f: c1:88:f4:f3:4a:05:68:4d:55:4a:4d:15:ad:f5:13: 32:42:f5:f7:e5:2f:1a:69:4d:24:5e:73:62:6f:c4: ca:41:5e:9b:c7:30:55:93:0f:3f:fa:10:51:c2:b1: c1:96:8a:61:44:15:8b:a2:9f:3f:dd:ad:2e:a7:40: ce:03:ec:e8:f9:1e:94:2b:3a:90:57:12:80:4b:52: ba:f7:74:95:27:89:b6:36:64:80:35:6d:f7:a5:8e: 0f:80:37:98:2e:b3:7e:a0:1f:da:96:5d:8d:03:09: fa:6a:77:6f:76:d3:f8:fc:ec:ea:2d:65:22:20:a2: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:BF:6F:8B:DB:2D:BC:E2:96:B6:27:46:78:2A:AE:18:FF:A8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.66.0/23 67.220.70.0-67.220.75.255 67.220.80.0/24 67.220.82.0/24 67.220.85.0-67.220.89.255 67.220.94.0/23 68.168.31.0/24 69.42.209.0/24 186.190.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:8b:66:5f:fb:d9:15:36:ce:e4:31:68:23:9b:eb:ab:76:c1: f3:d5:85:de:a9:38:fd:a8:17:a0:e0:17:4b:c5:ea:34:0e:7b: 81:db:ea:af:56:f1:a5:b4:cf:34:a4:cf:32:d1:5a:56:ab:30: 81:0d:c3:aa:4e:02:3d:1f:21:29:9a:63:0a:92:11:10:7e:b6: 5f:59:13:ad:3c:40:21:80:58:23:b9:a8:e9:e8:5d:f0:32:90: 45:b7:70:62:09:e6:5d:2a:89:27:83:d2:53:18:c7:96:be:d7: d1:2e:01:d9:5e:d6:39:4b:06:bc:df:61:36:aa:68:af:5b:a4: e8:61:44:be:67:d9:cc:ae:75:c5:3c:eb:6a:41:74:f7:9f:77: 03:4f:09:85:21:c7:52:be:bf:fb:78:3c:fe:cf:ff:d1:72:8e: 78:cc:7e:a9:cb:00:cd:f0:ad:88:7a:c1:54:26:a7:fb:2d:51: 24:53:fe:86:19:9b:bd:7e:cf:fe:a2:f9:a0:a7:c5:37:8e:20: 39:98:dd:71:10:49:0a:6c:24:46:ce:94:b5:35:7a:40:b6:e7: b6:da:20:f0:bc:af:41:0d:f2:27:09:06:e4:07:7e:9b:22:3a: 77:10:3f:aa:4d:1d:15:99:60:fc:40:97:7d:54:14:03:bf:00: be:28:89:61 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEvttd9ubTROoGXGCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk YTQ3YmVmYmQtNzRiOS00ZmRjLTg2MjUtM2NiM2Q0MzM0MjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNQRGqom62IC2y8n2I4FTn1z9ghSsoC3yKQN o6fkmM+qwGP61LYwHnU0AIPzwIWTJ6GI0zQNC6XDSB8f589AC8xG2oOn7CVZZVG9 BKFTSraw/ujhV3G3pZVKsp95DpjJamYD6nbFmINMeTbs6BeGJW4YiD5DXn2CpLY0 MWyoVddhQNBzVy/BiPTzSgVoTVVKTRWt9RMyQvX35S8aaU0kXnNib8TKQV6bxzBV kw8/+hBRwrHBlophRBWLop8/3a0up0DOA+zo+R6UKzqQVxKAS1K693SVJ4m2NmSA NW33pY4PgDeYLrN+oB/all2NAwn6andvdtP4/OzqLWUiIKLbrwIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFJRXv2+L2y284pa2J0Z4Kq4Y/6jtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjdiM2I0ZGItNDRjMS0z MDk2LThiZjktMDFiZmJhMjMyMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQBQ9xCMAwD BAFD3EYDBAJD3EgDBABD3FADBABD3FIwDAMEAEPcVQMEAUPcWAMEAUPcXgMEAESo HwMEAEUq0QMEALq+1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDAi2Zf+9kVNs7kMWgjm+urdsHz1YXeqTj9 qBeg4BdLxeo0DnuB2+qvVvGltM80pM8y0VpWqzCBDcOqTgI9HyEpmmMKkhEQfrZf WROtPEAhgFgjuajp6F3wMpBFt3BiCeZdKokng9JTGMeWvtfRLgHZXtY5Swa832E2 qmivW6ToYUS+Z9nMrnXFPOtqQXT3n3cDTwmFIcdSvr/7eDz+z//Rco54zH6pywDN 8K2IesFUJqf7LVEkU/6GGZu9fs/+ovmgp8U3jiA5mN1xEEkKbCRGzpS1NXpAtue2 2iDwvK9BDfInCQbkB36bIjp3ED+qTR0VmWD8QJd9VBQDvwC+KIlh -----END CERTIFICATE-----Generated at Thu Nov 27 21:47:14 2025 by rpki-client