This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d428b89e-baea-3608-825b-dced89531417.roa
File: d428b89e-baea-3608-825b-dced89531417.roa (raw, json)
Hash identifier: 2YFKo9BDY0a3IiRMkTs8dmYfYOSrj1UXN2vzoYCP27g=
Subject key identifier: 7E:0A:02:0E:02:7A:2D:CE:78:3E:BB:FB:D2:1E:FE:C8:6C:A2:EB:6D
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584BCC35BFDB1744493BE8DCEB00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d428b89e-baea-3608-825b-dced89531417.roa
Signing time: Sun 09 Nov 2025 02:00:31 +0000
ROA not before: Sun 09 Nov 2025 02:00:31 +0000
ROA not after: Sat 07 Feb 2026 02:00:31 +0000
asID: 23473
IP address blocks: 66.253.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cc:35:bf:db:17:44:49:3b:e8:dc:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Nov 9 02:00:31 2025 GMT
Not After : Feb 7 02:00:31 2026 GMT
Subject: CN=5472bb27-4f0f-46ce-909b-acce0914a310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:39:e6:cf:b2:f7:c7:01:3a:ab:26:c5:30:
9b:13:e2:64:42:67:be:0a:67:06:4a:c2:82:6c:2f:
c8:dc:ec:64:22:65:4c:c2:1d:ca:96:29:42:df:18:
62:de:3c:05:7a:59:9d:bc:2e:db:a0:b9:2d:aa:36:
88:e5:76:98:1c:ba:27:e5:5e:9d:e6:96:e8:77:49:
24:ae:2e:f6:2c:12:ce:1a:6f:a9:06:3a:f3:7c:e6:
d2:ab:af:1b:64:27:5d:10:f3:b8:75:7e:1d:84:86:
7e:01:53:07:7a:7c:a3:0f:e4:0d:82:b4:11:bd:b2:
3b:a7:22:eb:4a:6a:67:c9:4e:a3:fa:73:b8:ee:05:
f1:b2:5d:99:b4:62:a5:0d:00:ab:ab:55:51:4b:12:
16:11:f4:20:4f:c0:77:3b:fc:fd:80:04:6f:13:bd:
11:a8:fe:eb:aa:0e:3e:8f:ad:a5:22:e1:88:d4:6e:
6a:07:ed:79:92:11:f3:88:c0:7f:37:45:ae:05:d4:
67:94:cd:2b:aa:e1:08:fa:aa:fe:c6:e2:24:f7:72:
b8:86:e6:c8:63:c9:cc:4f:d3:f5:10:70:2f:fd:ea:
d1:c2:cf:87:86:53:ee:d6:b0:ed:10:2b:a1:aa:98:
02:eb:2e:0c:f5:48:88:11:ac:58:58:f2:9c:5d:33:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:02:0E:02:7A:2D:CE:78:3E:BB:FB:D2:1E:FE:C8:6C:A2:EB:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d428b89e-baea-3608-825b-dced89531417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:28:cb:63:d1:0c:3a:92:94:3f:e1:d8:80:46:6c:f8:f8:d3:
ee:ed:39:5d:3c:c0:c0:e0:b5:fa:56:64:d0:47:48:2a:e0:34:
c8:9b:cd:fc:43:8f:09:d6:49:ca:e8:f9:ca:f1:bd:8d:c8:fd:
09:ef:f2:f6:95:e0:2b:2a:54:73:77:5b:5f:c9:d6:7a:b0:98:
16:af:bb:64:23:da:94:43:7d:54:40:2a:5f:b2:45:2c:cb:81:
63:88:d5:bf:47:ba:30:b9:02:2c:28:17:87:a8:ce:2d:4d:3c:
64:4c:33:55:34:6d:8d:53:a9:50:7d:6f:b7:1b:86:83:ae:c8:
89:97:cb:ff:3d:e7:ef:46:c6:78:f2:f0:9f:f7:9e:ba:2f:0e:
e1:6c:df:17:d3:80:b8:3f:74:12:aa:cc:4e:51:59:c2:cd:e1:
c7:b0:8c:b6:1b:71:7b:9a:8e:53:f2:af:2b:05:b0:f2:91:17:
b0:20:cb:58:a3:20:55:94:3a:0b:6e:fd:57:e0:33:09:a9:71:
19:a6:05:31:7d:33:73:df:04:d2:f8:1a:9c:33:31:ef:47:93:
d2:5b:dd:99:aa:94:a1:ca:5b:7e:0c:b9:91:7d:f6:83:1c:0b:
6d:32:45:07:bf:50:e8:63:68:a3:a1:7c:64:df:b4:13:e4:2f:
aa:69:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 12:01:08 2025 by rpki-client