This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa File: d285b726-e3ef-3abf-8761-d6f1f21f4450.roa (raw, json) Hash identifier: 2yfr873Bv6dNQCAgFpklp49xLTSnijKxtFyo3XmVx14= Subject key identifier: 60:A6:7C:5D:EB:CF:E9:37:24:B2:60:B0:3D:BA:3E:77:55:CD:CA:C3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584C3EABBBD17E3E1303B4B7D400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 202 IP address blocks: 168.87.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:bb:d1:7e:3e:13:03:b4:b7:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=6887fe1b-f948-4b53-a085-4652634efe76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:b8:3e:84:c3:b7:9e:74:e3:af:ac:81:45: 65:36:07:07:ed:fa:50:6c:24:8a:f2:36:18:9c:4f: f1:bf:f6:40:20:fe:a9:53:08:2c:dd:6f:b5:8f:2f: 17:7e:4a:b6:95:34:4f:cc:55:49:a7:42:94:26:be: ee:6c:d6:13:7a:9d:a4:3a:ab:cf:6b:ba:93:27:59: b3:4a:fe:d9:bf:b6:42:4f:a0:a1:18:ba:ee:de:f1: ce:1c:d9:84:40:0a:e0:73:0a:c7:5c:14:6d:51:99: 52:30:67:68:3b:c1:8f:e8:c7:8a:bc:59:00:fb:25: 5b:54:6b:d2:6a:2a:c6:3f:f0:fd:f4:a6:aa:81:b5: 83:a1:c7:04:3f:80:b0:b7:2d:b7:73:30:da:3e:19: 4d:3c:59:00:08:dc:cf:6c:b0:72:73:0d:86:b0:d3: 02:61:18:b5:9c:f9:d4:5d:92:3d:ed:81:84:b3:eb: 98:dc:a3:2b:f8:d3:5d:2b:31:22:80:7d:6b:a9:e6: d1:53:52:e4:c3:64:9e:eb:ce:04:25:e7:a2:01:09: 90:9a:0a:6b:2e:fb:b6:98:ef:b6:d1:ec:b2:df:84: 57:27:07:a5:88:e7:1b:6a:ac:34:fd:df:54:ca:dd: c4:b8:78:ad:cf:79:f6:2f:a4:db:1e:2e:00:7e:9f: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A6:7C:5D:EB:CF:E9:37:24:B2:60:B0:3D:BA:3E:77:55:CD:CA:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:15:dd:41:c6:02:92:8a:aa:3c:a6:11:93:37:08:eb:fd:82: 44:61:ca:1b:45:9d:e7:e5:2d:05:bd:8c:a1:7a:a9:69:4a:b0: 45:d6:ac:89:8f:ab:a4:77:9d:72:89:96:8b:8a:e3:ea:cd:52: 38:49:80:ab:db:4c:0c:a3:2a:a7:ad:77:9d:51:6b:ef:33:79: 82:71:0b:a2:12:68:72:f1:27:27:8f:83:31:b1:51:de:ee:74: 0d:b9:b0:2a:99:56:c2:fc:0c:69:09:3a:ea:85:15:12:dd:ba: 54:e9:75:12:88:0b:0d:85:1b:64:2d:75:dc:95:73:90:e5:a4: 81:b1:33:d5:5a:3c:9d:51:1a:90:8e:33:29:25:1b:7e:84:c5: 38:a0:19:ea:98:26:7f:97:22:da:9d:bd:91:8b:7b:98:72:a9: 32:84:1d:a9:1f:c6:48:f5:07:b2:1c:6c:f9:36:07:f8:5f:25: 04:a4:b9:7b:78:46:80:02:fe:b4:e8:34:f1:db:f1:b6:88:d9: 2f:3f:04:06:d3:ab:a8:82:d8:31:c6:83:c3:40:6d:6f:d2:44: 3b:12:6a:b8:24:f8:3c:0e:8f:da:01:1f:26:83:1a:11:6b:b1: 2b:ee:03:15:75:3f:71:2c:dc:d1:22:10:a4:07:f4:4f:30:97: dd:06:93:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q7vRfj4TA7S31AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk Njg4N2ZlMWItZjk0OC00YjUzLWEwODUtNDY1MjYzNGVmZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF64PoTDt55046+sgUVlNgcH7fpQbCSK8jYY nE/xv/ZAIP6pUwgs3W+1jy8Xfkq2lTRPzFVJp0KUJr7ubNYTep2kOqvPa7qTJ1mz Sv7Zv7ZCT6ChGLru3vHOHNmEQArgcwrHXBRtUZlSMGdoO8GP6MeKvFkA+yVbVGvS airGP/D99KaqgbWDoccEP4Cwty23czDaPhlNPFkACNzPbLBycw2GsNMCYRi1nPnU XZI97YGEs+uY3KMr+NNdKzEigH1rqebRU1Lkw2Se684EJeeiAQmQmgprLvu2mO+2 0eyy34RXJweliOcbaqw0/d9Uyt3EuHitz3n2L6TbHi4Afp/HEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCmfF3rz+k3JLJgsD26PndVzcrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDI4NWI3MjYtZTNlZi0z YWJmLTg3NjEtZDZmMWYyMWY0NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUV3UHGApKKqjymEZM3COv9gkRhyhtFneflLQW9jKF6qWlKsEXWrImP q6R3nXKJlouK4+rNUjhJgKvbTAyjKqetd51Ra+8zeYJxC6ISaHLxJyePgzGxUd7u dA25sCqZVsL8DGkJOuqFFRLdulTpdRKICw2FG2QtddyVc5DlpIGxM9VaPJ1RGpCO MyklG36ExTigGeqYJn+XItqdvZGLe5hyqTKEHakfxkj1B7IcbPk2B/hfJQSkuXt4 RoAC/rToNPHb8baI2S8/BAbTq6iC2DHGg8NAbW/SRDsSargk+DwOj9oBHyaDGhFr sSvuAxV1P3Es3NEiEKQH9E8wl90Gk7A= -----END CERTIFICATE-----Generated at Sat Jan 24 00:59:58 2026 by rpki-client