This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ddaabde-a6c0-35af-ab01-9769d28f6d7d.roa File: 0ddaabde-a6c0-35af-ab01-9769d28f6d7d.roa (raw, json) Hash identifier: w+PBqiE8iibc1mIyfkUPRBVWLn+jWFI9BckfubHsZP0= Subject key identifier: E7:85:B3:13:56:AA:84:F5:CC:C5:13:90:2E:C4:DC:01:D8:B2:AE:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE76575C9AEB11A3B2BA9C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ddaabde-a6c0-35af-ab01-9769d28f6d7d.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.106.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:57:5c:9a:eb:11:a3:b2:ba:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=d1edf8f6-331e-4d79-ab09-58228caf4af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:7e:c9:2d:cc:8e:05:e3:90:b1:22:04:17: 58:01:34:be:07:7a:20:74:b5:1e:12:16:90:3a:30: 36:1f:22:ef:f9:c3:a6:92:c0:f1:00:cb:bb:13:48: 47:af:52:de:d1:e4:12:9e:e5:99:45:ce:17:69:09: f2:17:62:6e:65:1b:52:28:46:7c:50:84:be:dd:da: 35:b9:40:b8:d8:93:79:b1:06:2d:c0:2c:fa:f9:f9: 5e:0d:41:69:3b:6a:db:7e:a5:9c:fd:d8:9a:cf:72: 7b:6b:f5:f4:10:a2:ab:19:b0:59:28:65:e7:55:c5: bc:75:eb:17:21:be:5c:56:4f:7f:f5:24:e1:65:06: b2:70:7a:32:9c:8a:e3:aa:1d:26:32:72:c1:59:b3: 13:dc:4b:b6:41:54:a7:dc:67:94:64:61:32:3e:f1: 37:2d:92:19:10:bf:63:ee:65:d8:8e:a5:f3:fd:dc: 13:79:7e:c3:eb:97:2a:c2:98:45:37:d4:8d:c6:02: 81:ae:aa:e7:ca:e1:d3:9f:d5:2c:86:fe:61:d6:39: 52:09:63:37:ce:89:2d:c9:3c:52:e3:e0:bc:d1:15: 44:59:eb:1f:c3:93:e3:d2:95:ac:ce:21:09:6a:42: 8c:34:ab:1d:8c:e4:49:cb:ec:30:c5:94:58:86:fc: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:85:B3:13:56:AA:84:F5:CC:C5:13:90:2E:C4:DC:01:D8:B2:AE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ddaabde-a6c0-35af-ab01-9769d28f6d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7b:19:6e:90:55:67:52:c6:d0:45:2e:83:c8:30:c1:ca:b5: 22:b1:98:86:dc:f9:51:9a:43:a3:c0:d3:38:55:8b:71:80:34: a4:8c:98:df:e1:c8:6d:03:0f:34:5c:4b:07:0d:9d:d0:56:7c: 0a:eb:aa:80:8f:2b:0e:fb:d0:39:47:e2:0a:90:23:9b:3a:a2: 07:d8:84:c8:63:ae:59:e8:30:e9:bd:78:ed:14:c8:c1:bf:63: 47:83:4b:a3:25:f3:ec:3b:f6:47:6b:e4:00:aa:87:06:33:85: 46:93:16:98:a2:c2:42:a8:ca:1d:3d:cc:75:4a:27:51:5b:14: cf:a7:cf:dc:f9:4c:23:ff:42:c8:9e:40:e8:f6:11:99:8e:59: 73:e1:ee:8f:82:83:5e:e0:2e:d8:c1:a3:c9:4b:23:be:13:ba: 13:91:76:79:b2:ea:ad:b6:78:f7:5f:21:9d:16:fb:2f:eb:45: 02:33:10:d3:78:6a:37:fa:28:6c:d8:ca:fe:41:fd:59:59:fd: de:71:65:35:49:83:62:61:8e:f0:7f:d1:da:cc:e3:d0:de:d8: 3c:f8:fd:71:c4:2a:72:b1:b8:05:26:97:5e:56:db:5f:90:3b: a6:1e:1f:37:26:98:10:93:38:b5:b9:6f:9c:18:59:d7:b0:93: 8d:0d:52:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+dldcmusRo7K6nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDFlZGY4ZjYtMzMxZS00ZDc5LWFiMDktNTgyMjhjYWY0YWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt1+yS3MjgXjkLEiBBdYATS+B3ogdLUeEhaQ OjA2HyLv+cOmksDxAMu7E0hHr1Le0eQSnuWZRc4XaQnyF2JuZRtSKEZ8UIS+3do1 uUC42JN5sQYtwCz6+fleDUFpO2rbfqWc/diaz3J7a/X0EKKrGbBZKGXnVcW8desX Ib5cVk9/9SThZQaycHoynIrjqh0mMnLBWbMT3Eu2QVSn3GeUZGEyPvE3LZIZEL9j 7mXYjqXz/dwTeX7D65cqwphFN9SNxgKBrqrnyuHTn9Ushv5h1jlSCWM3zoktyTxS 4+C80RVEWesfw5Pj0pWsziEJakKMNKsdjORJy+wwxZRYhvyvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeFsxNWqoT1zMUTkC7E3AHYsq7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRkYWFiZGUtYTZjMC0z NWFmLWFiMDEtOTc2OWQyOGY2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp7GW6QVWdSxtBFLoPIMMHKtSKxmIbc+VGaQ6PA0zhVi3GANKSMmN/h yG0DDzRcSwcNndBWfArrqoCPKw770DlH4gqQI5s6ogfYhMhjrlnoMOm9eO0UyMG/ Y0eDS6Ml8+w79kdr5ACqhwYzhUaTFpiiwkKoyh09zHVKJ1FbFM+nz9z5TCP/Qsie QOj2EZmOWXPh7o+Cg17gLtjBo8lLI74TuhORdnmy6q22ePdfIZ0W+y/rRQIzENN4 ajf6KGzYyv5B/VlZ/d5xZTVJg2JhjvB/0drM49De2Dz4/XHEKnKxuAUml15W21+Q O6YeHzcmmBCTOLW5b5wYWdewk40NUhc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:18:08 2025 by rpki-client