This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
File: 887961af-3aed-3506-bd33-2d162c0a8179.roa (raw, json)
Hash identifier: f1NrJKwQUaI7kPzyFRbsoT5WJI4l9t908zX6mG6hZPE=
Subject key identifier: F6:29:D4:48:53:27:72:C2:1A:98:97:49:10:B0:4C:E3:2B:A5:E8:E0
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584BCC35BDB2ACE9CED897605840
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
Signing time: Sun 09 Nov 2025 02:00:31 +0000
ROA not before: Sun 09 Nov 2025 02:00:31 +0000
ROA not after: Sat 07 Feb 2026 02:00:31 +0000
asID: 23473
IP address blocks: 66.253.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cc:35:bd:b2:ac:e9:ce:d8:97:60:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Nov 9 02:00:31 2025 GMT
Not After : Feb 7 02:00:31 2026 GMT
Subject: CN=0a584ecf-ea77-4a98-8225-7c02e5c5f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:1b:ce:22:53:3f:8e:50:f0:a2:11:0a:1e:
f1:81:31:c0:be:00:54:e6:b9:47:e7:24:19:27:10:
ed:a3:75:9a:ac:be:2a:d7:3a:9c:dd:45:b7:c1:58:
a5:04:55:dd:dc:a1:26:ff:27:9a:2e:01:64:d8:1e:
fa:5e:a0:5d:ce:9c:6c:ea:68:56:9b:0e:04:45:b2:
28:a4:76:ad:42:18:c1:5a:1d:e7:7a:e4:f5:51:ce:
22:7f:86:aa:bd:be:78:71:af:db:4a:ae:bb:f6:a4:
5a:29:fa:75:2e:de:3d:e9:36:df:22:89:8d:f8:df:
55:65:fe:b6:c6:a1:d5:72:80:6c:57:fb:40:80:55:
e1:6b:5f:8a:44:41:71:57:5d:6b:ca:a1:e1:7b:c5:
84:e4:c2:8f:97:22:e7:66:0f:49:b5:fa:b9:8c:0b:
de:2e:81:4e:5d:b3:60:66:19:b2:67:7e:2d:0d:69:
a2:82:39:f9:8f:45:45:17:a2:b1:55:ac:c6:67:24:
93:02:9b:a2:b3:bc:24:c1:77:7b:c6:1a:e0:e9:0f:
bf:08:4c:c0:04:14:9e:6c:b6:58:4b:0a:5a:65:94:
f3:07:71:86:ae:a5:03:07:f1:98:28:a8:52:6f:8e:
21:0c:34:d6:34:46:79:f7:dd:c9:60:6f:46:d6:04:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:D4:48:53:27:72:C2:1A:98:97:49:10:B0:4C:E3:2B:A5:E8:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:fb:90:20:3b:15:14:8b:d9:35:65:6c:a1:f8:77:fb:39:57:
f8:32:90:18:f1:aa:34:e3:62:2b:29:aa:16:25:9f:74:76:fb:
e3:a6:77:8b:16:a0:ea:d7:ef:ad:6e:29:a7:07:82:58:b8:7c:
41:a6:9b:c6:01:f5:02:0f:07:24:a9:7e:96:b7:00:95:1b:3e:
5d:f8:60:a2:32:4b:d2:f2:9b:2f:70:45:61:20:98:6d:1e:cd:
d2:c0:6d:2e:42:93:eb:3e:1d:9b:f4:86:2f:47:cb:a9:b8:4d:
c1:13:c7:0e:ff:5a:06:8c:5f:9f:5d:5b:7e:44:40:23:0a:58:
b2:6b:42:29:d9:bd:74:58:f7:b6:57:fd:18:da:5a:54:57:37:
93:2f:0d:1d:55:c1:c2:72:69:ac:28:98:da:be:85:9b:98:51:
61:b3:16:b3:ad:2c:95:a1:14:1c:0f:87:a3:e6:74:5f:7b:af:
3f:87:97:49:90:3c:e1:ba:b8:23:2f:52:48:5b:a6:1e:b3:46:
b3:e5:bf:3a:c9:bc:ff:74:99:00:35:9f:93:85:6f:4e:c9:1e:
76:95:93:79:ba:dc:43:af:3f:07:fa:e7:8a:87:7f:ed:83:e2:
6d:25:de:95:51:b9:f9:39:d4:94:f2:a4:4d:0b:df:c6:05:ff:
d6:b4:21:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 11:32:37 2025 by rpki-client