This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa File: 40b5c67a-9ac0-3589-acab-9c3b29acdede.roa (raw, json) Hash identifier: luNIx5D+UiBN3K58E1Wq4CY4y95qEt8ltJsBpNJwYc4= Subject key identifier: 89:B1:42:42:0C:E9:5B:04:93:9D:A3:66:C1:A1:99:DF:FD:EA:FF:63 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584C29BB943C245E7624C56F03F0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 132121 IP address blocks: 168.87.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:94:3c:24:5e:76:24:c5:6f:03:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=a28217a1-a281-4e3d-aec0-72e67849af9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:78:87:05:2c:d5:56:73:30:3c:8f:48:32: 27:d8:0a:6c:4c:1f:ab:9e:af:b7:a6:99:7a:7e:14: 69:a8:77:0c:8f:7c:fb:b6:f4:32:71:0b:fd:c0:52: 99:71:d4:32:1a:26:e2:ca:18:52:f7:75:50:0d:bf: 7c:94:75:22:82:88:bb:ba:a7:51:c7:99:a1:cd:d1: e5:d2:19:03:38:bf:36:51:ef:4f:c1:e6:60:cb:43: a2:2b:0b:41:e0:0e:11:e7:0d:4b:5d:5c:d7:e0:c6: 8b:03:ef:92:b7:79:e0:f2:84:36:e0:92:c4:d6:cf: 34:4f:ed:60:73:b6:06:da:0f:8a:90:64:eb:d5:35: 92:16:d9:1e:49:03:b9:91:b5:95:6e:e6:31:cd:24: f9:ec:fd:d4:65:ca:41:4f:bd:93:5e:10:6d:a3:aa: 50:cb:6e:b4:fd:4a:82:00:4a:e1:d8:4a:7e:1b:34: c9:d8:84:38:72:62:a1:58:4d:ae:95:8d:bd:06:0c: e6:4a:91:8b:5b:09:b8:24:79:c0:30:4d:49:37:44: c6:57:9f:bf:6b:83:50:80:13:28:46:df:84:d9:25: c7:40:80:31:8b:c8:e9:f4:f3:db:49:9b:54:72:7e: b6:be:f0:2f:49:0a:69:e3:98:fb:9a:df:7a:7a:8a: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B1:42:42:0C:E9:5B:04:93:9D:A3:66:C1:A1:99:DF:FD:EA:FF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c4:8e:02:37:29:d1:35:bc:e5:a1:fc:57:90:a5:29:55:77: aa:c3:a3:1c:63:8e:e2:72:24:47:53:e1:9f:86:04:a2:25:14: 63:73:4d:3a:3a:f5:f0:2e:ed:5f:b8:17:d2:d9:45:05:52:d6: b8:5e:1e:23:a2:eb:9d:30:6e:1d:6e:12:15:8d:3a:e0:8b:fa: d8:cb:ae:a5:99:bb:b5:03:ae:1b:8c:fd:b0:cb:80:22:b4:4c: 7d:7f:d4:e0:90:50:0c:70:f0:b0:51:0e:77:71:48:93:42:92: 24:58:b1:d7:ab:1e:99:30:b5:2b:50:06:4e:2d:96:87:2f:e0: 98:c3:e0:33:1c:1c:74:16:6d:56:fe:92:a8:bf:a8:88:2e:6d: d7:82:46:b9:89:e0:20:9c:ec:e6:bd:57:2f:f7:19:60:98:61: 0c:d8:f3:c4:1f:32:90:88:0b:b6:8e:e8:60:12:7b:35:e4:80: 20:57:b2:d3:83:8a:37:5a:14:0d:14:3f:63:f6:d8:a1:e5:94: f8:38:22:5c:84:8f:48:17:c8:39:81:19:98:a1:5f:3e:3a:82: ca:90:34:bd:b3:32:3a:92:e0:7e:49:3d:43:80:20:46:05:0b: 09:27:cf:84:e3:73:1e:3f:d3:24:4e:48:c0:0f:0c:be:3a:3a: 9e:80:ae:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu5Q8JF52JMVvA/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk YTI4MjE3YTEtYTI4MS00ZTNkLWFlYzAtNzJlNjc4NDlhZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle54hwUs1VZzMDyPSDIn2ApsTB+rnq+3ppl6 fhRpqHcMj3z7tvQycQv9wFKZcdQyGibiyhhS93VQDb98lHUigoi7uqdRx5mhzdHl 0hkDOL82Ue9PweZgy0OiKwtB4A4R5w1LXVzX4MaLA++St3ng8oQ24JLE1s80T+1g c7YG2g+KkGTr1TWSFtkeSQO5kbWVbuYxzST57P3UZcpBT72TXhBto6pQy260/UqC AErh2Ep+GzTJ2IQ4cmKhWE2ulY29BgzmSpGLWwm4JHnAME1JN0TGV5+/a4NQgBMo Rt+E2SXHQIAxi8jp9PPbSZtUcn62vvAvSQpp45j7mt96eoq+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImxQkIM6VsEk52jZsGhmd/96v9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDBiNWM2N2EtOWFjMC0z NTg5LWFjYWItOWMzYjI5YWNkZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3EjgI3KdE1vOWh/FeQpSlVd6rDoxxjjuJyJEdT4Z+GBKIlFGNzTTo6 9fAu7V+4F9LZRQVS1rheHiOi650wbh1uEhWNOuCL+tjLrqWZu7UDrhuM/bDLgCK0 TH1/1OCQUAxw8LBRDndxSJNCkiRYsderHpkwtStQBk4tlocv4JjD4DMcHHQWbVb+ kqi/qIgubdeCRrmJ4CCc7Oa9Vy/3GWCYYQzY88QfMpCIC7aO6GASezXkgCBXstOD ijdaFA0UP2P22KHllPg4IlyEj0gXyDmBGZihXz46gsqQNL2zMjqS4H5JPUOAIEYF Cwknz4Tjcx4/0yROSMAPDL46Op6Arto= -----END CERTIFICATE-----Generated at Tue Dec 23 04:57:49 2025 by rpki-client