This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c371c45-577e-3aff-a4f4-bac2d1c53a65.roa File: 3c371c45-577e-3aff-a4f4-bac2d1c53a65.roa (raw, json) Hash identifier: AXgse32RuU8ssR3t29/fjUBOnOQd1fw8Be2V5dVbc1A= Subject key identifier: BB:30:78:3F:6B:95:2E:BA:71:95:43:60:C3:46:D4:72:C5:CD:89:05 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BCC35BD7F2D8176DB01EA5C80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c371c45-577e-3aff-a4f4-bac2d1c53a65.roa Signing time: Sun 09 Nov 2025 02:00:31 +0000 ROA not before: Sun 09 Nov 2025 02:00:31 +0000 ROA not after: Sat 07 Feb 2026 02:00:31 +0000 asID: 23473 IP address blocks: 66.253.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cc:35:bd:7f:2d:81:76:db:01:ea:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Nov 9 02:00:31 2025 GMT Not After : Feb 7 02:00:31 2026 GMT Subject: CN=cdd11cd1-852d-4bb5-955a-2b736a310136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:f3:17:24:c8:59:ba:6b:d9:06:bf:e1:dd: 5b:93:bb:e3:d3:3d:f0:aa:a1:1d:30:bf:80:32:47: f6:35:65:d1:ed:7e:cf:a5:2e:98:5d:0a:f4:4d:3b: b7:44:ef:de:7c:c9:1b:9d:04:a2:a4:03:66:ed:d2: f0:ae:e8:62:b8:f5:5a:de:14:ea:55:dc:64:15:77: bd:3e:e4:94:3a:f7:26:ce:85:9d:5f:fd:c8:f4:64: 40:3f:d8:7d:79:79:5b:a9:71:ef:ed:f9:21:a4:c6: d4:a5:05:57:76:b0:44:24:e4:5b:4f:96:92:a9:be: 03:87:b1:1c:b7:48:ff:d6:0b:ae:a0:86:a4:63:bd: f0:ad:1f:c3:1e:14:c7:60:9b:61:ec:f2:2e:19:c2: 82:fb:49:c0:b3:61:ec:b1:f6:4a:fd:86:19:40:d7: 04:0c:1d:8a:72:c7:9d:5e:a7:49:14:90:6e:91:77: 09:e0:85:a7:48:03:51:d6:02:50:d0:1b:01:ff:54: 5e:9f:88:73:53:99:ad:0b:09:ed:dd:63:d3:a1:13: 52:7a:07:81:cb:3a:4d:4f:76:14:07:89:83:cc:74: 47:f6:55:fe:c8:30:97:35:8b:11:f5:d7:c1:09:1d: 7e:25:5e:fd:db:c8:1e:e7:20:26:9f:8c:6c:6b:0a: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:78:3F:6B:95:2E:BA:71:95:43:60:C3:46:D4:72:C5:CD:89:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c371c45-577e-3aff-a4f4-bac2d1c53a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bf:f1:e8:d7:92:85:a3:49:5d:0e:58:47:d8:56:d5:a5:1a: 08:49:f2:fe:9d:00:ba:e0:79:3d:d2:71:ad:0d:d9:9e:89:90: 9d:3d:39:27:dd:cc:9f:89:ac:52:89:87:11:ba:96:0e:fe:21: 51:11:28:23:5a:3a:88:c1:a2:2d:3e:d8:db:4f:54:1b:85:63: e6:a7:6e:18:bc:2b:a4:84:76:e2:d8:92:4b:a9:03:98:cd:d7: 00:10:13:c1:99:1b:af:d8:28:ef:5f:7e:b8:6c:57:a0:87:2c: 7d:7e:d1:9d:6f:b3:9f:77:fe:aa:5e:91:82:a9:c7:0d:67:84: f6:de:ac:af:57:fc:ac:1d:d3:43:ff:8a:b7:82:36:24:d1:d7: fc:1e:80:ce:e7:84:86:91:4c:c9:77:cf:bd:b8:8e:9e:e6:8d: dc:4c:e3:a8:8c:3b:ad:e6:98:2e:1b:13:31:ad:8f:61:5a:1f: 61:71:22:69:76:bb:6d:08:ae:36:10:29:dc:9e:19:de:50:a2: 1f:72:b3:d9:f6:04:2a:89:60:b8:01:8b:ac:cc:9c:2f:15:0a: fe:88:09:88:47:b9:ce:76:2d:0a:4f:93:e5:0c:57:11:54:53: 4a:2a:c3:7b:02:e8:57:ee:53:8d:d2:1a:14:1d:60:f6:e0:77: 6c:22:7b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvMNb1/LYF22wHqXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk Y2RkMTFjZDEtODUyZC00YmI1LTk1NWEtMmI3MzZhMzEwMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiPzFyTIWbpr2Qa/4d1bk7vj0z3wqqEdML+A Mkf2NWXR7X7PpS6YXQr0TTu3RO/efMkbnQSipANm7dLwruhiuPVa3hTqVdxkFXe9 PuSUOvcmzoWdX/3I9GRAP9h9eXlbqXHv7fkhpMbUpQVXdrBEJORbT5aSqb4Dh7Ec t0j/1guuoIakY73wrR/DHhTHYJth7PIuGcKC+0nAs2HssfZK/YYZQNcEDB2Kcsed XqdJFJBukXcJ4IWnSANR1gJQ0BsB/1Ren4hzU5mtCwnt3WPToRNSegeByzpNT3YU B4mDzHRH9lX+yDCXNYsR9dfBCR1+JV7928ge5yAmn4xsawqQXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsweD9rlS66cZVDYMNG1HLFzYkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2MzNzFjNDUtNTc3ZS0z YWZmLWE0ZjQtYmFjMmQxYzUzYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC/8ejXkoWjSV0OWEfYVtWlGghJ8v6dALrgeT3Sca0N2Z6JkJ09OSfd zJ+JrFKJhxG6lg7+IVERKCNaOojBoi0+2NtPVBuFY+anbhi8K6SEduLYkkupA5jN 1wAQE8GZG6/YKO9ffrhsV6CHLH1+0Z1vs593/qpekYKpxw1nhPberK9X/Kwd00P/ ireCNiTR1/wegM7nhIaRTMl3z724jp7mjdxM46iMO63mmC4bEzGtj2FaH2FxIml2 u20IrjYQKdyeGd5Qoh9ys9n2BCqJYLgBi6zMnC8VCv6ICYhHuc52LQpPk+UMVxFU U0oqw3sC6FfuU43SGhQdYPbgd2wie+I= -----END CERTIFICATE-----Generated at Wed Nov 26 11:30:06 2025 by rpki-client