This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa File: 1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa (raw, json) Hash identifier: K1fMJoJSEFB/WjO2tF2nanuMKumJEGtGBWm4UAmt1To= Subject key identifier: 12:60:D8:58:BC:96:A4:A0:CB:79:AD:3A:A4:FA:B4:D7:1F:18:2D:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C01409B131A5F04C761EECE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.224.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:9b:13:1a:5f:04:c7:61:ee:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=c007e4e5-ea87-43e3-a293-22a602ef250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:d1:09:91:6f:45:87:f3:62:b7:7e:a2:30: b7:ec:dc:fb:8a:8b:fa:d3:0f:3b:78:87:2b:22:8b: 34:83:3e:ee:46:df:48:bd:58:c9:8c:61:90:a9:49: 8f:7a:2c:37:b6:52:d9:07:08:82:3a:71:7e:c9:ab: 0e:20:f5:20:84:e0:49:91:1e:8f:16:54:84:6e:2d: 82:25:5a:76:e7:a0:f7:ce:77:07:b0:de:08:aa:95: 1b:67:32:1f:f9:84:ee:b9:e6:bf:c0:13:41:d0:d0: 68:fc:0a:44:4e:f0:01:21:a8:32:e9:df:e0:42:ff: e4:68:bd:31:4e:81:98:2d:f4:97:c4:0d:23:4a:09: 30:09:bb:e5:3e:ae:c3:cd:b7:35:30:7d:3c:45:5e: db:17:de:f4:a3:15:28:95:7c:45:3a:dc:c3:c2:97: 17:98:88:f2:22:27:bc:43:dd:ac:6a:07:4c:53:7a: a9:b4:38:5a:d7:e6:05:97:8b:e5:c3:9a:5b:2c:4e: 04:a7:f6:ff:3d:5f:60:e1:34:7d:b6:a7:f7:9c:e0: 4a:2c:bf:91:be:e7:e0:1c:ee:92:ca:c3:8e:b4:b1: b2:9e:f4:25:e6:53:26:a7:e1:49:f8:c4:8b:bf:a5: 99:6c:bb:5b:be:bb:91:51:ad:9c:28:7c:22:06:35: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:60:D8:58:BC:96:A4:A0:CB:79:AD:3A:A4:FA:B4:D7:1F:18:2D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:31:21:ff:bf:86:d1:29:92:f3:5c:8b:02:18:24:d6:00:93: 8c:ac:3f:6b:cd:34:08:4a:50:79:6c:e4:23:5d:b7:52:f5:ef: e1:b9:33:eb:be:17:3b:cc:9d:3e:9b:b3:23:4f:a2:8b:c5:16: c3:38:80:cc:ac:c4:09:d1:05:60:7f:c5:24:3b:6d:a7:07:f3: 73:52:35:81:5d:47:75:13:80:ed:78:b6:99:e2:bd:39:6c:a7: ed:bb:b0:42:2f:f2:ad:07:a4:cc:5f:ce:7d:fe:d9:1a:28:46: 97:5e:68:b8:a5:de:49:eb:09:d5:f9:03:c5:46:77:f4:00:dc: ed:e7:89:af:b6:3c:db:b0:b7:c0:c8:d1:6c:8c:aa:90:e6:4f: 05:3e:ab:c2:1e:f9:4f:56:af:8e:b6:bb:c8:48:45:5b:14:86: 85:46:4c:e7:c7:64:3d:ac:0b:8a:0a:a1:c6:f1:a6:ac:9e:d2: bb:83:79:6b:53:ad:19:6b:2a:9c:da:cf:27:cc:df:90:27:34: 42:6d:fa:c4:29:cb:8b:ee:b5:ce:90:50:99:04:b1:f4:f6:23: d3:35:be:10:7a:29:7d:98:f9:a1:2b:80:97:90:bf:d8:5b:aa: 7c:33:3c:87:a8:51:6c:5a:57:fd:71:e9:c8:92:a9:79:a7:c4: e4:29:1d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQJsTGl8Ex2HuzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk YzAwN2U0ZTUtZWE4Ny00M2UzLWEyOTMtMjJhNjAyZWYyNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5TRCZFvRYfzYrd+ojC37Nz7iov60w87eIcr Ios0gz7uRt9IvVjJjGGQqUmPeiw3tlLZBwiCOnF+yasOIPUghOBJkR6PFlSEbi2C JVp256D3zncHsN4IqpUbZzIf+YTuuea/wBNB0NBo/ApETvABIagy6d/gQv/kaL0x ToGYLfSXxA0jSgkwCbvlPq7Dzbc1MH08RV7bF970oxUolXxFOtzDwpcXmIjyIie8 Q92sagdMU3qptDha1+YFl4vlw5pbLE4Ep/b/PV9g4TR9tqf3nOBKLL+RvufgHO6S ysOOtLGynvQl5lMmp+FJ+MSLv6WZbLtbvruRUa2cKHwiBjUwjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJg2Fi8lqSgy3mtOqT6tNcfGC15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFhODUzNzctM2U3ZS0z OTJmLWJmYWEtY2FkNjdjMmUyYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8xIf+/htEpkvNciwIYJNYAk4ysP2vNNAhKUHls5CNdt1L17+G5M+u+ FzvMnT6bsyNPoovFFsM4gMysxAnRBWB/xSQ7bacH83NSNYFdR3UTgO14tpnivTls p+27sEIv8q0HpMxfzn3+2RooRpdeaLil3knrCdX5A8VGd/QA3O3nia+2PNuwt8DI 0WyMqpDmTwU+q8Ie+U9Wr462u8hIRVsUhoVGTOfHZD2sC4oKocbxpqye0ruDeWtT rRlrKpzazyfM35AnNEJt+sQpy4vutc6QUJkEsfT2I9M1vhB6KX2Y+aErgJeQv9hb qnwzPIeoUWxaV/1x6ciSqXmnxOQpHRc= -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:21 2025 by rpki-client