This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa File: 214fea33-50f7-3e4a-a684-32bb0c924857.roa (raw, json) Hash identifier: OpJ32b9/Jvp4qy6G09tTNpqpgyqwNdZ+n2T38YO2Zkc= Subject key identifier: 5D:5F:4C:3F:45:37:05:20:8A:93:89:A1:47:6A:4D:0C:F4:E2:15:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10A375BCA083355DAC2900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:a3:75:bc:a0:83:35:5d:ac:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=abb841ab-e27e-4a79-ac22-c4b82d4d3f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:ab:dc:a2:c6:a3:9b:3b:a7:3a:cb:bf:ca: 0a:ec:18:65:04:10:fe:00:d6:4e:08:7f:51:4d:11: 66:60:73:e2:f1:ef:e5:49:8c:cf:5a:f8:9a:17:64: a4:11:e4:db:e8:8c:e7:0a:7e:17:f2:27:ee:fc:d9: d0:0b:34:d5:42:12:92:56:39:d6:fa:14:41:bf:57: a6:ed:04:fc:0c:88:b0:aa:27:35:5b:0f:f7:e8:f3: a8:6c:36:39:a4:f6:a2:e6:66:24:60:31:f6:28:f1: 02:46:d9:d9:02:02:8c:de:15:ff:c6:98:a1:0a:1b: 31:2c:d9:8b:e5:3a:1c:94:4c:6f:4e:f5:78:54:af: 10:93:bb:5d:ac:04:e9:de:1d:96:40:2c:f9:9b:f2: ee:81:ab:c0:3c:68:4f:d6:0f:78:7c:bc:6e:5a:13: 19:d5:c2:e4:73:59:5c:2b:ce:5b:ed:f5:59:a2:aa: bf:f2:c7:92:2d:22:63:61:8a:c6:79:3a:84:79:21: 7c:de:c1:e5:5b:31:4f:2b:76:1a:a8:a5:cf:c4:df: 8f:f2:10:1b:90:e2:be:c9:4c:8d:a5:8a:e6:9d:4a: a8:ca:1f:a5:3c:cc:5d:a0:d1:6a:3a:c4:30:7d:f5: 8b:df:44:3a:31:38:5b:a2:f2:a5:a3:d3:34:bd:8f: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:4C:3F:45:37:05:20:8A:93:89:A1:47:6A:4D:0C:F4:E2:15:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:48:04:82:16:c7:f0:c6:71:80:04:d3:f0:1c:6d:f3:4d:b3: 01:a6:2a:50:8b:c0:58:0a:fe:95:e4:56:e5:2f:8b:fb:02:1a: 24:fb:f0:ce:48:43:9c:ed:86:98:65:8a:0e:6e:22:c7:1a:23: 00:18:bb:24:3e:72:d6:48:10:b0:97:88:a1:a5:95:10:15:05: b2:58:cf:dc:9a:b4:7f:d1:d8:d5:29:3e:fe:12:20:b1:04:16: 97:c5:42:a7:94:f4:b8:4f:df:66:14:b7:60:eb:66:f0:06:0f: 28:08:8a:fe:92:8c:b8:cd:4b:32:a0:15:65:85:49:6c:91:34: ab:c7:c4:59:50:d8:92:3a:72:67:1c:df:66:67:eb:30:ef:3a: 84:fb:78:9f:7d:0d:9a:a1:1d:8a:b5:a4:73:5f:9d:2a:fc:c6: 3e:ba:45:c8:6d:89:20:72:a3:b7:1c:b6:6c:a0:7e:e6:14:45: bd:19:74:53:05:bd:f5:4d:0b:f8:41:8d:10:c1:0b:1e:22:22: a5:6e:1d:91:c5:d9:81:a0:5f:1e:d7:cb:71:1e:7f:d2:86:11: 0e:14:93:04:40:af:17:f2:1f:f1:ef:b0:78:0e:6a:8e:49:04: 08:d8:90:a8:fa:35:cd:d8:7d:29:c9:e2:99:87:66:00:56:ce: 66:ba:cd:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EKN1vKCDNV2sKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YWJiODQxYWItZTI3ZS00YTc5LWFjMjItYzRiODJkNGQzZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkWr3KLGo5s7pzrLv8oK7BhlBBD+ANZOCH9R TRFmYHPi8e/lSYzPWviaF2SkEeTb6IznCn4X8ifu/NnQCzTVQhKSVjnW+hRBv1em 7QT8DIiwqic1Ww/36POobDY5pPai5mYkYDH2KPECRtnZAgKM3hX/xpihChsxLNmL 5ToclExvTvV4VK8Qk7tdrATp3h2WQCz5m/LugavAPGhP1g94fLxuWhMZ1cLkc1lc K85b7fVZoqq/8seSLSJjYYrGeTqEeSF83sHlWzFPK3YaqKXPxN+P8hAbkOK+yUyN pYrmnUqoyh+lPMxdoNFqOsQwffWL30Q6MThbovKlo9M0vY9htQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1fTD9FNwUgipOJoUdqTQz04hV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE0ZmVhMzMtNTBmNy0z ZTRhLWE2ODQtMzJiYjBjOTI0ODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5IBIIWx/DGcYAE0/AcbfNNswGmKlCLwFgK/pXkVuUvi/sCGiT78M5I Q5zthphlig5uIscaIwAYuyQ+ctZIELCXiKGllRAVBbJYz9yatH/R2NUpPv4SILEE FpfFQqeU9LhP32YUt2DrZvAGDygIiv6SjLjNSzKgFWWFSWyRNKvHxFlQ2JI6cmcc 32Zn6zDvOoT7eJ99DZqhHYq1pHNfnSr8xj66RchtiSByo7cctmygfuYURb0ZdFMF vfVNC/hBjRDBCx4iIqVuHZHF2YGgXx7Xy3Eef9KGEQ4UkwRArxfyH/HvsHgOao5J BAjYkKj6Nc3YfSnJ4pmHZgBWzma6zUc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:57 2025 by rpki-client