This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0947a066-f6be-3353-9a09-e236935e3beb.roa File: 0947a066-f6be-3353-9a09-e236935e3beb.roa (raw, json) Hash identifier: Utcdha+w5t2lpzpw9Kj4se9he2HzzIAnJ8q5gM3gFac= Subject key identifier: 12:2B:D1:9E:5D:12:15:1A:CB:07:BE:54:3B:32:38:D6:2C:16:48:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666986C966630E7D1382200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0947a066-f6be-3353-9a09-e236935e3beb.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.9.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:98:6c:96:66:30:e7:d1:38:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=8b712cc6-0d98-45f5-a5ab-9f98d181bfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:05:07:49:ee:6a:83:b3:4a:d5:87:26:00: 44:1e:44:37:31:e6:f2:73:46:d8:80:2a:dd:d4:08: 75:cd:73:5a:6a:8b:1a:3b:90:d5:eb:9b:2b:1e:ff: ca:c3:bd:f1:3f:b9:73:6c:ca:16:f1:fe:26:17:2a: 54:0e:4e:53:d3:f1:43:d4:24:7f:6b:4b:d9:32:c2: 56:60:76:e9:17:f3:32:32:26:06:a1:87:1b:99:a8: 08:40:2b:64:d8:ac:d6:95:d2:53:42:8b:3d:9d:70: a5:29:11:c1:c4:42:f5:74:a6:20:89:a6:46:60:b6: c4:fe:09:2b:2e:5d:19:e0:83:0c:79:0c:2d:9a:87: 2c:63:15:2c:67:b4:d6:c5:92:2d:8e:e7:76:82:94: e4:b3:3c:d2:97:2c:8a:2b:9a:03:d6:ec:97:4a:38: 46:91:59:8d:63:9a:ec:5b:0c:a2:38:18:f6:28:c3: 86:8a:a7:dd:1e:71:c5:ec:25:49:5f:56:d8:9d:0d: fb:2a:f9:a5:0f:32:d1:98:0c:26:e3:fe:07:89:d3: 54:cd:2c:37:d9:2a:1c:05:26:23:c2:62:77:27:65: 77:dd:62:31:ce:78:e9:6d:4c:be:cd:16:6c:ce:0a: 1e:0e:02:f9:cf:e3:e2:b8:d5:c4:6e:b7:99:69:1a: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:D1:9E:5D:12:15:1A:CB:07:BE:54:3B:32:38:D6:2C:16:48:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0947a066-f6be-3353-9a09-e236935e3beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:9a:8d:98:5d:7f:0e:c5:85:ad:f2:6a:d2:0b:f0:d1:15:83: 33:50:b9:1d:ee:64:76:52:a0:5a:ab:90:e5:a1:c5:43:eb:d7: e2:0f:80:be:77:69:3e:97:ee:85:61:f1:0c:e2:fb:69:dd:91: 60:89:3b:18:ec:14:31:c1:56:5f:e6:97:88:55:d9:51:05:d6: 2a:10:9e:a0:b1:a1:f9:fe:68:58:f6:31:d9:df:df:cc:24:5c: ad:6d:ec:44:b2:c4:dd:14:2d:86:12:ae:af:3a:be:bc:e1:95: dc:51:9f:a2:a9:e3:33:36:81:84:d6:fc:03:b1:3a:dd:28:90: 6d:80:0a:e4:e3:e7:fa:bc:06:f1:b5:f9:39:67:70:51:d6:85: 39:f9:16:de:46:a3:cb:b3:15:16:12:cd:98:4d:51:1f:b0:40: 44:8a:28:23:a4:62:68:2a:e8:f2:36:3d:1f:61:34:f2:d1:3a: 3f:b8:ea:dd:45:2c:0c:76:ab:2b:a2:cf:c3:f2:7a:3b:36:c5: 02:a4:bd:4e:49:c7:c7:6e:db:1a:aa:48:42:1e:8c:0a:b3:d4: e7:0d:83:92:a0:f1:53:6a:98:9b:72:ec:1d:8d:2b:6e:ed:f4: d4:f6:d8:2f:ee:26:d7:c1:2e:5f:2a:c7:8d:e6:a5:46:96:b8: 7d:a2:50:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZphslmYw59E4IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OGI3MTJjYzYtMGQ5OC00NWY1LWE1YWItOWY5OGQxODFiZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu8FB0nuaoOzStWHJgBEHkQ3Mebyc0bYgCrd 1Ah1zXNaaosaO5DV65srHv/Kw73xP7lzbMoW8f4mFypUDk5T0/FD1CR/a0vZMsJW YHbpF/MyMiYGoYcbmagIQCtk2KzWldJTQos9nXClKRHBxEL1dKYgiaZGYLbE/gkr Ll0Z4IMMeQwtmocsYxUsZ7TWxZItjud2gpTkszzSlyyKK5oD1uyXSjhGkVmNY5rs WwyiOBj2KMOGiqfdHnHF7CVJX1bYnQ37KvmlDzLRmAwm4/4HidNUzSw32SocBSYj wmJ3J2V33WIxznjpbUy+zRZszgoeDgL5z+PiuNXEbreZaRo43QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIr0Z5dEhUaywe+VDsyONYsFkjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk0N2EwNjYtZjZiZS0z MzUzLTlhMDktZTIzNjkzNWUzYmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6ajZhdfw7Fha3yatIL8NEVgzNQuR3uZHZSoFqrkOWhxUPr1+IPgL53 aT6X7oVh8Qzi+2ndkWCJOxjsFDHBVl/ml4hV2VEF1ioQnqCxofn+aFj2Mdnf38wk XK1t7ESyxN0ULYYSrq86vrzhldxRn6Kp4zM2gYTW/AOxOt0okG2ACuTj5/q8BvG1 +TlncFHWhTn5Ft5Go8uzFRYSzZhNUR+wQESKKCOkYmgq6PI2PR9hNPLROj+46t1F LAx2qyuiz8Pyejs2xQKkvU5Jx8du2xqqSEIejAqz1OcNg5Kg8VNqmJty7B2NK27t 9NT22C/uJtfBLl8qx43mpUaWuH2iUJ4= -----END CERTIFICATE-----Generated at Sun Jan 25 11:22:34 2026 by rpki-client