This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa File: 07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa (raw, json) Hash identifier: hYmirD9r9iF+IJvQ2pvhJNotpgdqKxfJrIFoUdc614o= Subject key identifier: 6A:93:56:26:44:43:03:AD:CA:EC:BA:BF:6B:3E:5A:35:F2:40:63:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140B96A52F0B04FAEE36E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:b9:6a:52:f0:b0:4f:ae:e3:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=a8a55dab-3b35-4445-87d4-aa50ecdf4e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:39:8f:7d:61:8d:e5:ac:82:a9:58:8c:41: 73:4a:75:40:6e:07:fc:eb:dd:9e:82:87:b1:0f:0b: cb:da:9b:46:76:41:1e:e1:86:13:3a:b5:c6:8c:98: 0e:e2:49:83:64:f7:4e:78:c3:b3:07:6d:7c:41:7b: e5:d5:bf:87:0d:8c:9f:00:83:d1:c7:5d:c0:1e:33: 75:94:6e:36:67:8f:2b:df:c7:ae:f2:07:5a:36:0f: ef:db:b4:7f:90:03:47:d0:a8:67:28:72:0d:ec:28: 90:1a:1b:e0:87:b3:d1:2d:53:88:00:47:9c:32:19: 2d:8f:95:df:2e:58:e2:d1:57:fb:d8:fe:b1:99:ed: 96:e1:32:cb:bd:e7:21:d9:77:8e:34:c1:80:23:b6: bb:58:75:4e:96:ed:ca:c7:eb:05:f7:e8:03:94:51: 30:1f:30:a5:c6:57:48:21:1b:3b:aa:82:76:51:9d: 3d:a5:49:d2:6b:c4:da:e0:b2:fd:ce:c0:46:d5:44: cf:8c:4b:77:d9:cd:7d:14:37:e0:4f:79:e9:af:37: 14:30:a9:24:5b:57:f0:fe:77:13:c9:cc:47:53:79: 23:aa:fd:09:2d:6d:0d:00:cd:73:53:73:91:ca:94: bc:91:f9:55:38:83:f7:cd:54:99:80:2c:b3:11:a2: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:93:56:26:44:43:03:AD:CA:EC:BA:BF:6B:3E:5A:35:F2:40:63:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07afebdd-8071-35f2-97f4-fdb820ba1b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2d:e0:8f:f9:86:3c:2c:cf:75:26:62:a7:76:bc:5a:66:12: d6:0d:45:6d:ed:cd:e4:01:22:79:02:aa:c6:03:5c:a3:42:90: 7e:7d:6d:6f:c9:9e:32:50:36:1b:d1:fa:65:bc:a1:0a:19:c3: 8b:e5:75:05:13:fa:e2:20:f4:f6:77:77:d9:b5:c6:bc:88:45: 53:0a:da:24:55:82:fc:d5:34:35:51:d7:05:24:89:06:df:30: b6:47:1f:5f:0c:36:f3:1f:20:83:9f:e1:85:b5:b8:90:be:c5: 23:1d:6c:05:59:bf:92:ec:14:8a:1e:03:f2:a1:99:02:ed:c9: 3a:b3:3e:23:b8:dd:d9:1b:8c:46:06:74:0e:ab:ce:38:c4:03: 99:24:56:9f:01:4e:e4:e8:96:84:a5:41:7a:1c:44:49:1b:33: 04:e6:ec:a9:ff:9d:13:5c:7f:85:0c:89:98:aa:6a:1f:c3:fa: 4e:4a:76:e8:15:46:a8:68:d4:55:af:aa:5e:1e:a6:1d:f6:b8: af:d0:e0:52:d4:5f:07:6e:e9:24:eb:e5:eb:21:2e:bb:70:d9: 0a:ee:bd:c4:62:c8:21:75:34:98:c9:b3:d6:d6:17:2b:e3:78: 25:ed:09:67:8f:5c:ed:82:ca:8c:21:ff:b4:e6:e7:aa:54:c5: aa:42:30:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQLlqUvCwT67jboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk YThhNTVkYWItM2IzNS00NDQ1LTg3ZDQtYWE1MGVjZGY0ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbg5j31hjeWsgqlYjEFzSnVAbgf8692egoex DwvL2ptGdkEe4YYTOrXGjJgO4kmDZPdOeMOzB218QXvl1b+HDYyfAIPRx13AHjN1 lG42Z48r38eu8gdaNg/v27R/kANH0KhnKHIN7CiQGhvgh7PRLVOIAEecMhktj5Xf Llji0Vf72P6xme2W4TLLvech2XeONMGAI7a7WHVOlu3Kx+sF9+gDlFEwHzClxldI IRs7qoJ2UZ09pUnSa8Ta4LL9zsBG1UTPjEt32c19FDfgT3nprzcUMKkkW1fw/ncT ycxHU3kjqv0JLW0NAM1zU3ORypS8kflVOIP3zVSZgCyzEaLOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqTViZEQwOtyuy6v2s+WjXyQGM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdhZmViZGQtODA3MS0z NWYyLTk3ZjQtZmRiODIwYmExYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgt4I/5hjwsz3UmYqd2vFpmEtYNRW3tzeQBInkCqsYDXKNCkH59bW/J njJQNhvR+mW8oQoZw4vldQUT+uIg9PZ3d9m1xryIRVMK2iRVgvzVNDVR1wUkiQbf MLZHH18MNvMfIIOf4YW1uJC+xSMdbAVZv5LsFIoeA/KhmQLtyTqzPiO43dkbjEYG dA6rzjjEA5kkVp8BTuToloSlQXocREkbMwTm7Kn/nRNcf4UMiZiqah/D+k5KdugV Rqho1FWvql4eph32uK/Q4FLUXwdu6STr5eshLrtw2QruvcRiyCF1NJjJs9bWFyvj eCXtCWePXO2Cyowh/7Tm56pUxapCMEQ= -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:39 2025 by rpki-client