This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23029e7e-de59-35b5-92de-7d54a7646f9b.roa File: 23029e7e-de59-35b5-92de-7d54a7646f9b.roa (raw, json) Hash identifier: IzQfSATAN8C5ec+VOoEgfmmIO79UVkZZLIFjqve3z0Y= Subject key identifier: 93:44:5C:C2:9E:13:FA:B1:C5:67:26:CC:B2:B0:E9:E4:2B:E7:B0:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56671BE9CC738BFE0723FB20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23029e7e-de59-35b5-92de-7d54a7646f9b.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.229.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:1b:e9:cc:73:8b:fe:07:23:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=a7489dba-7c8f-4b8a-a4c9-cca12349e604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:49:57:ee:06:2c:ef:c9:38:e7:15:d0:c9: 93:00:4e:8d:9a:68:5e:d3:8a:cb:c7:85:81:97:71: 04:f4:c4:1b:9f:87:f3:80:e2:bb:3c:14:8c:f2:2c: f1:dd:ed:00:d3:d7:33:25:e3:22:a6:4d:19:93:c8: 5d:06:7f:97:38:df:34:7e:45:17:5e:4d:64:50:68: bd:ec:89:e9:57:df:0d:51:bc:cd:68:a7:d9:05:7d: 1f:99:f0:0a:18:a5:0a:fd:09:40:4c:6b:8d:9c:a0: dd:db:f9:f2:7a:ee:7f:74:ff:42:fd:ee:de:f8:8c: 69:25:d7:3b:e1:1f:24:5e:9a:19:2e:68:dc:88:1d: 22:22:bb:fc:c9:9b:b6:5d:c3:b7:50:85:50:9e:7f: cf:92:cb:34:ee:98:b1:8c:da:e8:a4:ba:b4:cb:27: 55:34:2e:59:01:ed:ce:29:7c:22:1c:d9:b2:de:cc: 9a:1e:31:55:a6:d7:2f:45:f1:e5:44:a1:0f:c2:0a: 27:67:34:46:b4:58:d7:d1:1f:b1:17:79:04:7f:e5: 9f:ff:77:6d:41:93:6d:b0:a3:5e:cd:70:6c:16:07: 71:10:00:64:1a:6c:a1:72:25:07:f2:34:a5:99:01: 80:f5:40:3c:ac:44:7f:13:6a:1f:8b:87:93:29:f9: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:44:5C:C2:9E:13:FA:B1:C5:67:26:CC:B2:B0:E9:E4:2B:E7:B0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23029e7e-de59-35b5-92de-7d54a7646f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:57:7f:29:23:bf:ea:a5:61:c8:c8:f0:0b:46:2a:d8:38:a5: 9f:ce:5f:34:e0:5e:da:57:b1:d2:de:93:e2:ba:c8:ed:17:3f: f9:10:ce:ce:fc:76:18:77:1f:5e:57:99:d1:f7:db:f0:54:0f: 17:86:bc:a6:f1:39:45:61:f0:64:cc:49:45:4d:2f:fe:33:33: e8:a6:46:67:b4:da:d0:53:bf:d3:16:91:2a:64:8a:e9:c3:72: 3a:5d:3c:6b:74:d1:57:a5:6d:87:fa:24:79:ee:0a:ca:63:dd: 95:cd:22:12:7b:f4:36:7e:51:f7:5e:99:7f:4d:88:5c:83:9c: 1a:d9:3a:8d:14:84:eb:0d:5e:5b:09:08:40:51:68:3a:ad:69: 53:d3:94:46:58:c9:5b:c9:01:44:fb:c7:a5:a9:3c:28:ea:b1: d0:67:65:cd:7d:6a:68:80:55:97:0c:59:ac:ce:2b:69:f0:58: de:7f:07:71:46:44:20:ec:c2:fe:e3:9c:83:df:1e:bf:b3:b2: c2:74:bb:b3:66:bd:4b:5f:6a:f0:a3:0d:c6:de:56:b6:34:ac: 22:57:6d:c8:2f:82:62:fb:a8:f8:98:ac:32:c2:a9:37:a0:8c: e8:13:49:22:05:3b:79:12:a8:2d:1e:3e:1d:44:97:bd:c7:a1: 17:06:ae:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZxvpzHOL/gcj+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YTc0ODlkYmEtN2M4Zi00YjhhLWE0YzktY2NhMTIzNDllNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoARJV+4GLO/JOOcV0MmTAE6Nmmhe04rLx4WB l3EE9MQbn4fzgOK7PBSM8izx3e0A09czJeMipk0Zk8hdBn+XON80fkUXXk1kUGi9 7InpV98NUbzNaKfZBX0fmfAKGKUK/QlATGuNnKDd2/nyeu5/dP9C/e7e+IxpJdc7 4R8kXpoZLmjciB0iIrv8yZu2XcO3UIVQnn/Pkss07pixjNropLq0yydVNC5ZAe3O KXwiHNmy3syaHjFVptcvRfHlRKEPwgonZzRGtFjX0R+xF3kEf+Wf/3dtQZNtsKNe zXBsFgdxEABkGmyhciUH8jSlmQGA9UA8rER/E2ofi4eTKfl5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNEXMKeE/qxxWcmzLKw6eQr57CFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMwMjllN2UtZGU1OS0z NWI1LTkyZGUtN2Q1NGE3NjQ2ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Xfykjv+qlYcjI8AtGKtg4pZ/OXzTgXtpXsdLek+K6yO0XP/kQzs78 dhh3H15XmdH32/BUDxeGvKbxOUVh8GTMSUVNL/4zM+imRme02tBTv9MWkSpkiunD cjpdPGt00VelbYf6JHnuCspj3ZXNIhJ79DZ+UfdemX9NiFyDnBrZOo0UhOsNXlsJ CEBRaDqtaVPTlEZYyVvJAUT7x6WpPCjqsdBnZc19amiAVZcMWazOK2nwWN5/B3FG RCDswv7jnIPfHr+zssJ0u7NmvUtfavCjDcbeVrY0rCJXbcgvgmL7qPiYrDLCqTeg jOgTSSIFO3kSqC0ePh1El73HoRcGrmY= -----END CERTIFICATE-----Generated at Sun Jan 25 14:07:36 2026 by rpki-client