This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa File: 0cd4101d-7440-3066-bdaa-b77071b5318e.roa (raw, json) Hash identifier: 5hikdAmoODq9LdJxCJLrEKBJh5wSxET6JLFerGJUHpE= Subject key identifier: 2E:A4:B1:61:85:AA:64:8D:8C:44:A1:7D:22:85:42:7A:53:44:CF:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE761827F0D2D31B109659A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 70.172.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:18:27:f0:d2:d3:1b:10:96:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=8b3d4a6c-fff4-413c-95ca-f6448010059c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ff:29:c6:7f:82:4e:e0:54:6e:9d:02:d9:10: 5f:13:62:f3:4f:f3:bb:45:6e:9d:2f:99:30:0e:68: 25:49:2c:5f:bc:02:5f:e5:16:a6:5d:0a:7d:fb:44: c4:ee:1e:92:fc:82:88:e3:49:d9:b5:0b:8d:ab:03: d8:eb:be:90:1a:36:87:89:95:01:54:41:2b:a0:e3: 1f:8d:83:5b:88:d1:f9:5b:92:23:b1:de:6f:97:20: 0f:f7:fb:68:e9:01:00:b3:c4:5d:bf:c9:27:40:29: a1:46:93:6f:ff:be:ef:29:42:85:18:e6:fe:1b:e9: b9:db:2c:47:8e:f9:2a:e7:38:5b:59:3b:ed:d6:4b: 25:7a:75:0f:71:8a:60:0d:e6:68:fa:bc:e9:f5:dd: 6f:ae:cc:3c:a4:49:ef:e3:90:28:aa:02:18:4b:36: c1:3c:95:88:96:85:e0:d3:8e:18:4b:ed:12:32:91: bc:7a:d1:74:65:6a:74:f3:8b:6a:bd:cc:55:fe:e9: e0:fe:ea:dc:c6:2b:7c:3f:59:f7:ca:fe:ae:b6:de: 47:d5:57:86:fc:1e:ec:00:e3:3a:49:91:0f:a0:1d: cd:f1:c1:8a:b1:3f:9d:c2:8b:be:04:f0:05:fe:8d: 5c:3d:1d:2e:8e:70:8c:37:06:f4:c5:34:e6:da:e2: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A4:B1:61:85:AA:64:8D:8C:44:A1:7D:22:85:42:7A:53:44:CF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd4101d-7440-3066-bdaa-b77071b5318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:51:2e:5d:66:39:96:1c:0f:a2:5f:3c:45:d2:d4:81:f8:c3: 87:a3:31:67:c2:63:78:f5:76:c9:d7:02:70:33:1c:b5:13:d3: 58:a3:fc:fe:d8:ea:a1:a5:02:33:66:b5:44:56:74:0d:54:37: dd:e0:2c:14:f7:60:81:ef:a5:3c:09:8b:3b:f5:55:43:05:fc: 09:da:6b:67:ba:07:06:f7:f2:90:60:27:6d:bf:6a:52:35:48: ee:d0:a4:81:10:52:5c:c4:5e:7d:85:e2:d2:67:11:b4:a7:b8: 26:01:de:b5:db:25:91:b0:4e:1c:46:88:08:8b:39:45:b0:b2: 79:24:e6:4f:fd:77:75:63:d7:68:5b:39:17:b1:cb:87:20:b8: 63:52:07:6a:32:fe:74:2c:c7:bf:3d:05:18:46:7d:ae:06:19: f9:b5:83:e4:a8:db:16:a5:72:87:df:9a:d6:b8:2f:e9:fc:60: 38:05:c7:06:94:f0:40:1e:28:d3:1d:42:3f:1c:a0:f7:23:21: 22:6c:99:ee:84:15:a3:ab:0c:55:e2:94:52:11:cf:37:71:93: 56:dc:c2:ad:7f:cd:58:bd:95:2a:3b:ea:94:b2:b3:14:87:06: 8a:fe:68:1f:c1:1b:cd:7b:a8:4f:30:8d:a1:a1:16:08:7d:42: d6:57:3d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+dhgn8NLTGxCWWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk OGIzZDRhNmMtZmZmNC00MTNjLTk1Y2EtZjY0NDgwMTAwNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v8pxn+CTuBUbp0C2RBfE2LzT/O7RW6dL5kw DmglSSxfvAJf5RamXQp9+0TE7h6S/IKI40nZtQuNqwPY676QGjaHiZUBVEEroOMf jYNbiNH5W5Ijsd5vlyAP9/to6QEAs8Rdv8knQCmhRpNv/77vKUKFGOb+G+m52yxH jvkq5zhbWTvt1kslenUPcYpgDeZo+rzp9d1vrsw8pEnv45AoqgIYSzbBPJWIloXg 044YS+0SMpG8etF0ZWp084tqvcxV/ung/urcxit8P1n3yv6utt5H1VeG/B7sAOM6 SZEPoB3N8cGKsT+dwou+BPAF/o1cPR0ujnCMNwb0xTTm2uIOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6ksWGFqmSNjEShfSKFQnpTRM9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNkNDEwMWQtNzQ0MC0z MDY2LWJkYWEtYjc3MDcxYjUzMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9RLl1mOZYcD6JfPEXS1IH4w4ejMWfCY3j1dsnXAnAzHLUT01ij/P7Y 6qGlAjNmtURWdA1UN93gLBT3YIHvpTwJizv1VUMF/Anaa2e6Bwb38pBgJ22/alI1 SO7QpIEQUlzEXn2F4tJnEbSnuCYB3rXbJZGwThxGiAiLOUWwsnkk5k/9d3Vj12hb ORexy4cguGNSB2oy/nQsx789BRhGfa4GGfm1g+So2xalcoffmta4L+n8YDgFxwaU 8EAeKNMdQj8coPcjISJsme6EFaOrDFXilFIRzzdxk1bcwq1/zVi9lSo76pSysxSH Bor+aB/BG817qE8wjaGhFgh9QtZXPRY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:11 2025 by rpki-client