This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa File: 123d819e-116b-3421-abc9-d6acc75274a3.roa (raw, json) Hash identifier: wu+KuY0GYprxFjva9L+TkYiURPhhBkzYgkhjeLXkFsw= Subject key identifier: 09:89:AE:2B:E2:F1:62:07:B5:36:DB:83:27:3D:96:77:44:9A:9D:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56670CDBFF1F0B8E582AB140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.7.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:0c:db:ff:1f:0b:8e:58:2a:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=540e2fba-51a1-4566-98db-5a213fc81d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:54:33:fa:72:58:c5:35:77:44:46:e9:3e: db:6d:61:d1:67:15:c5:74:3a:2c:c7:ab:a0:57:32: d2:7b:fe:73:c8:11:74:0a:d5:dc:b2:f9:54:7b:ea: 11:49:4d:db:e2:a1:fd:d3:47:94:07:79:d6:df:d0: 23:99:11:24:b9:7f:8a:3f:52:33:ac:be:51:f3:de: 01:f0:c0:04:b4:2e:1f:89:33:c1:c0:55:c5:1f:59: df:fe:34:c3:95:e8:d5:b8:5d:17:fe:6b:ad:ba:69: ab:85:26:9d:d7:5b:3f:09:59:39:82:ed:e6:ff:85: 59:63:8d:1d:3d:9d:d7:ee:10:e9:8b:79:d6:8e:e6: 16:1b:00:6a:5e:9f:4e:cd:58:6d:a9:53:7e:b8:03: ec:13:c0:76:8b:b5:fe:24:16:05:7f:67:e4:b9:dc: 33:fe:f8:af:f5:cc:72:b5:ce:d5:9f:ef:6f:1e:b1: d0:01:34:05:f3:a6:7b:f5:1e:8b:2e:21:c5:dc:5e: a5:f0:7f:49:d6:94:ac:b1:a8:22:77:09:1e:19:ec: 9b:04:1d:16:fb:16:97:f4:fb:c4:f8:d5:cc:c3:68: e9:82:47:20:be:9f:1c:74:22:89:7b:5d:1c:77:57: ab:34:d7:44:8b:fa:22:78:ec:9d:f0:5f:6b:a5:5f: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:89:AE:2B:E2:F1:62:07:B5:36:DB:83:27:3D:96:77:44:9A:9D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8f:7d:72:fd:a6:8c:f5:60:58:cd:62:14:c7:a7:29:dc:33: 96:d6:f5:4a:5a:1a:3d:88:44:30:c1:85:ec:d9:ee:67:46:54: 44:9e:5d:fb:50:b6:18:b7:90:18:3e:05:1e:69:99:1a:ce:c6: 3a:7d:28:df:cb:98:dd:c2:3c:2c:df:dd:24:0b:09:4e:98:19: 89:ce:20:25:cb:89:f8:04:b9:25:46:bd:36:30:bd:77:e8:95: fd:54:e7:52:de:ba:32:a6:34:5d:1e:17:0f:49:26:72:9b:4a: 14:7d:44:0b:51:e7:63:be:fc:d4:9a:84:a8:de:d8:bb:ae:14: 93:a6:be:7c:d3:de:06:0b:a5:b2:48:1c:e6:a1:78:66:55:34: d4:b3:fe:ce:fd:68:62:42:1c:9f:fc:92:0a:55:7f:07:1f:5d: c6:95:b9:aa:c4:31:93:2d:08:d5:a8:ba:3a:29:8d:7e:ab:2e: 4c:d2:aa:dc:55:47:54:ee:04:e1:3e:0e:80:46:5e:75:f1:1c: 24:3b:87:e0:ba:9b:f8:c0:bb:e7:e6:12:c2:ac:d4:c3:3b:68: a0:1b:8e:e1:e5:36:4a:bb:36:6f:f3:40:8d:fb:52:76:27:9e: bf:e8:06:8f:84:d0:4f:46:9c:f7:b6:d5:d5:26:e2:07:82:f2: 89:3a:32:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZwzb/x8LjlgqsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NTQwZTJmYmEtNTFhMS00NTY2LTk4ZGItNWEyMTNmYzgxZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCpUM/pyWMU1d0RG6T7bbWHRZxXFdDosx6ug VzLSe/5zyBF0CtXcsvlUe+oRSU3b4qH900eUB3nW39AjmREkuX+KP1IzrL5R894B 8MAEtC4fiTPBwFXFH1nf/jTDlejVuF0X/mutummrhSad11s/CVk5gu3m/4VZY40d PZ3X7hDpi3nWjuYWGwBqXp9OzVhtqVN+uAPsE8B2i7X+JBYFf2fkudwz/viv9cxy tc7Vn+9vHrHQATQF86Z79R6LLiHF3F6l8H9J1pSssagidwkeGeybBB0W+xaX9PvE +NXMw2jpgkcgvp8cdCKJe10cd1erNNdEi/oieOyd8F9rpV8oNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmJrivi8WIHtTbbgyc9lndEmp1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIzZDgxOWUtMTE2Yi0z NDIxLWFiYzktZDZhY2M3NTI3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6PfXL9poz1YFjNYhTHpyncM5bW9UpaGj2IRDDBhezZ7mdGVESeXftQ thi3kBg+BR5pmRrOxjp9KN/LmN3CPCzf3SQLCU6YGYnOICXLifgEuSVGvTYwvXfo lf1U51LeujKmNF0eFw9JJnKbShR9RAtR52O+/NSahKje2LuuFJOmvnzT3gYLpbJI HOaheGZVNNSz/s79aGJCHJ/8kgpVfwcfXcaVuarEMZMtCNWoujopjX6rLkzSqtxV R1TuBOE+DoBGXnXxHCQ7h+C6m/jAu+fmEsKs1MM7aKAbjuHlNkq7Nm/zQI37UnYn nr/oBo+E0E9GnPe21dUm4geC8ok6Mjo= -----END CERTIFICATE-----Generated at Sun Jan 25 11:24:54 2026 by rpki-client