This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04f5d97e-f971-31ef-b9cc-933ec160c84c.roa File: 04f5d97e-f971-31ef-b9cc-933ec160c84c.roa (raw, json) Hash identifier: rNrSFrZbHt4XDhf4Rjdp0b7lmgeUgyLlevHtz6tR4tY= Subject key identifier: 0C:3B:00:47:6B:7F:AD:9A:D0:7F:08:4C:8B:1C:0B:35:A2:0D:7E:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD109DC0C0E7AE745C13D280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04f5d97e-f971-31ef-b9cc-933ec160c84c.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:9d:c0:c0:e7:ae:74:5c:13:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=6ff0b964-0047-4245-80d4-4d7b195b4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:fc:73:16:c4:94:94:5a:d4:58:4e:1e:da: 4c:e2:75:06:ae:58:08:5a:92:46:3d:bb:5e:09:92: 9a:35:fd:61:79:f1:32:fc:9f:f4:a5:21:93:b1:69: 0e:33:07:23:a4:c8:a6:2c:30:b7:29:f3:3d:c5:e0: fd:e3:77:d8:7d:f5:53:4d:47:64:8a:de:70:55:9e: 7a:9d:d9:ba:dd:23:84:06:20:98:43:6f:ba:40:28: e6:37:52:8d:94:d6:1b:f2:56:80:c5:9c:1d:d3:56: f0:fb:2c:97:ad:b0:6f:39:33:8a:80:3c:18:f3:9c: e9:f1:76:fb:68:23:7f:ce:74:42:11:cb:0f:a5:ce: 99:f3:cb:0f:6f:d0:d7:20:0c:eb:db:5e:9c:14:75: 92:f8:18:07:6f:07:c9:38:47:33:29:46:42:eb:bb: 3b:6a:3f:5e:c5:03:65:f3:54:c2:fd:08:f6:97:3d: 03:e8:a6:15:af:2e:1d:1b:00:3f:5c:41:00:00:3c: 1f:80:cc:5f:96:39:10:89:73:ba:6a:22:b9:b8:59: 9d:7e:a5:c0:a9:24:d6:7a:74:b2:3b:ee:7d:8a:c4: c9:76:80:c2:0b:a5:df:ed:3b:4c:f7:45:02:b1:49: 03:9f:0e:e3:ad:a2:7f:82:a6:0c:f5:69:7a:8c:f1: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:00:47:6B:7F:AD:9A:D0:7F:08:4C:8B:1C:0B:35:A2:0D:7E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04f5d97e-f971-31ef-b9cc-933ec160c84c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e8:cc:dc:c4:43:77:5f:ed:1f:08:f1:a9:24:db:07:7b:57: 08:15:d6:bf:11:b6:76:fd:b1:f4:c1:76:db:e6:a0:41:01:0c: cc:54:da:e5:f0:eb:a3:1a:57:9a:6b:7a:d0:c0:91:e4:6f:57: 45:93:4d:b2:1e:dd:e4:85:a5:bf:5e:34:80:09:b1:e8:36:53: ab:c0:d8:c0:b7:7c:0b:63:15:a5:c1:90:ec:9d:43:68:22:1b: 74:78:0d:4c:4d:91:7c:2f:6e:44:58:71:e0:de:35:a2:04:4f: 6c:d3:8b:ed:6f:37:c5:a0:b2:8f:4d:e2:3b:8c:12:95:22:a7: 24:ac:e3:79:b9:75:b2:ed:7e:45:d9:93:d9:09:15:5c:df:e9: e5:6c:7e:43:e4:ad:73:96:23:56:8a:ed:69:69:a1:9b:f2:36: 34:b5:62:97:0d:c0:a8:40:89:42:89:aa:15:84:97:4a:db:f0: 12:19:a4:6e:4f:70:98:ec:e4:bb:81:72:e8:e9:26:06:ec:2a: 77:f5:3d:58:40:b9:20:16:7b:e6:5b:7f:4f:16:d4:ac:49:31: c6:a1:a0:b5:b0:8a:13:a2:08:c9:09:64:fd:00:46:05:1a:8a: 1f:29:cb:37:23:70:c6:ed:b1:3f:cb:70:2d:bd:8b:4b:83:03: db:a6:2c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EJ3AwOeudFwT0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk NmZmMGI5NjQtMDA0Ny00MjQ1LTgwZDQtNGQ3YjE5NWI0Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE78cxbElJRa1FhOHtpM4nUGrlgIWpJGPbte CZKaNf1hefEy/J/0pSGTsWkOMwcjpMimLDC3KfM9xeD943fYffVTTUdkit5wVZ56 ndm63SOEBiCYQ2+6QCjmN1KNlNYb8laAxZwd01bw+yyXrbBvOTOKgDwY85zp8Xb7 aCN/znRCEcsPpc6Z88sPb9DXIAzr216cFHWS+BgHbwfJOEczKUZC67s7aj9exQNl 81TC/Qj2lz0D6KYVry4dGwA/XEEAADwfgMxfljkQiXO6aiK5uFmdfqXAqSTWenSy O+59isTJdoDCC6Xf7TtM90UCsUkDnw7jraJ/gqYM9Wl6jPHFEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw7AEdrf62a0H8ITIscCzWiDX4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDRmNWQ5N2UtZjk3MS0z MWVmLWI5Y2MtOTMzZWMxNjBjODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAM8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnozNzEQ3df7R8I8akk2wd7VwgV1r8Rtnb9sfTBdtvmoEEBDMxU2uXw 66MaV5pretDAkeRvV0WTTbIe3eSFpb9eNIAJseg2U6vA2MC3fAtjFaXBkOydQ2gi G3R4DUxNkXwvbkRYceDeNaIET2zTi+1vN8Wgso9N4juMEpUipySs43m5dbLtfkXZ k9kJFVzf6eVsfkPkrXOWI1aK7WlpoZvyNjS1YpcNwKhAiUKJqhWEl0rb8BIZpG5P cJjs5LuBcujpJgbsKnf1PVhAuSAWe+Zbf08W1KxJMcahoLWwihOiCMkJZP0ARgUa ih8pyzcjcMbtsT/LcC29i0uDA9umLKk= -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:44 2025 by rpki-client