This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa File: 24852c38-21d4-3340-ad31-087aec7f9bba.roa (raw, json) Hash identifier: K8rv9E6YytHv+XQqWatxJpwtY2aazIxy3GV9Mq3p/lc= Subject key identifier: 84:60:0C:1F:9F:B1:E9:5D:36:43:27:5E:32:02:9B:58:58:0D:BA:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140D3E7FB8A1402CC4ABD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.108.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:d3:e7:fb:8a:14:02:cc:4a:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=2b3697ba-f24d-465e-b5dd-5649ee6d4997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:84:dc:cb:2c:ea:b2:84:00:c1:41:af:b9: 07:18:b8:7b:a8:99:12:e3:de:42:ae:28:59:13:e7: c3:72:22:ba:01:e9:43:3a:e4:7c:38:f3:93:f7:a3: 25:18:e1:05:60:88:d7:f4:fd:50:ed:8c:66:59:cc: 83:e8:57:19:49:b7:d5:7b:df:34:5f:ef:21:e7:c3: d5:86:8a:68:ce:99:b3:2a:91:45:1b:2d:49:b7:76: 81:14:ee:40:5c:b2:b4:7c:fc:85:06:cd:9d:2e:3d: f8:0f:df:6b:21:be:8b:1e:07:7a:81:a2:21:ae:cb: 91:23:ec:53:3c:57:40:03:a7:a8:08:94:f1:70:34: 42:70:c0:7f:5e:f8:7f:bf:37:ae:6c:dd:c6:01:61: bb:7b:e2:3d:75:ca:43:01:16:a1:9d:f8:3e:97:b9: c4:09:80:1e:49:f7:28:15:ea:2d:6f:15:90:29:11: b3:2c:04:ea:74:28:c3:ca:2c:5e:70:19:02:0c:4e: 03:b3:54:66:0a:66:54:14:7d:88:85:bf:ee:7d:7e: 9d:3c:df:7f:88:84:e6:a6:cb:2b:66:ee:6b:23:ec: b9:5a:d0:ef:0b:78:0c:bd:e8:92:fc:5f:a2:e7:c5: a8:7c:17:eb:6b:f7:f1:06:67:c4:fd:3f:10:5f:75: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:60:0C:1F:9F:B1:E9:5D:36:43:27:5E:32:02:9B:58:58:0D:BA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7e:b5:bd:51:2f:a5:a3:04:fe:bc:89:d2:9a:64:46:7f:86: d3:9a:95:1f:58:8f:71:a7:68:57:13:b8:ac:83:0e:64:95:fb: a6:ba:e4:a6:43:d3:0f:55:23:0b:69:b9:ac:9c:2a:93:85:7e: 50:7b:32:8d:be:8c:f6:53:a4:3a:3d:c9:2d:f1:8b:02:4b:a9: b7:c0:b0:e9:d0:ef:d6:33:86:60:8f:98:f5:f7:27:08:e9:ec: 00:d5:2e:35:91:bc:33:f7:60:80:e7:b7:ec:dc:fb:54:b0:53: 54:ad:c2:8f:2d:11:7e:b5:20:e5:c9:4e:34:18:12:ec:18:7a: 89:e8:7b:da:55:70:58:27:d7:3b:1a:00:ab:f9:5a:85:74:25: 4f:e0:59:ae:ec:3b:be:42:b8:a8:44:b8:6d:7f:d2:d2:6d:99: 8f:4a:76:c8:0b:26:78:f2:d2:80:06:a6:d3:6e:ca:8b:d7:a5: 5a:17:a5:c0:52:50:2f:0d:f9:88:8b:00:83:0d:88:cc:2f:0e: 7c:28:15:1c:f1:6b:73:6e:85:32:6e:60:2e:60:5d:9f:51:b2: a0:55:ae:32:39:ce:85:88:12:f2:68:9d:e7:f8:70:66:f9:fe: de:34:c6:8a:d4:3d:a1:7a:7e:cc:e9:4c:16:30:98:2c:5b:9f: ee:46:0f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQNPn+4oUAsxKvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MmIzNjk3YmEtZjI0ZC00NjVlLWI1ZGQtNTY0OWVlNmQ0OTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh2E3Mss6rKEAMFBr7kHGLh7qJkS495CrihZ E+fDciK6AelDOuR8OPOT96MlGOEFYIjX9P1Q7YxmWcyD6FcZSbfVe980X+8h58PV hopozpmzKpFFGy1Jt3aBFO5AXLK0fPyFBs2dLj34D99rIb6LHgd6gaIhrsuRI+xT PFdAA6eoCJTxcDRCcMB/Xvh/vzeubN3GAWG7e+I9dcpDARahnfg+l7nECYAeSfco FeotbxWQKRGzLATqdCjDyixecBkCDE4Ds1RmCmZUFH2Ihb/ufX6dPN9/iITmpssr Zu5rI+y5WtDvC3gMveiS/F+i58WofBfra/fxBmfE/T8QX3Wj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRgDB+fseldNkMnXjICm1hYDbpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQ4NTJjMzgtMjFkNC0z MzQwLWFkMzEtMDg3YWVjN2Y5YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd+tb1RL6WjBP68idKaZEZ/htOalR9Yj3GnaFcTuKyDDmSV+6a65KZD 0w9VIwtpuaycKpOFflB7Mo2+jPZTpDo9yS3xiwJLqbfAsOnQ79YzhmCPmPX3Jwjp 7ADVLjWRvDP3YIDnt+zc+1SwU1Stwo8tEX61IOXJTjQYEuwYeonoe9pVcFgn1zsa AKv5WoV0JU/gWa7sO75CuKhEuG1/0tJtmY9KdsgLJnjy0oAGptNuyovXpVoXpcBS UC8N+YiLAIMNiMwvDnwoFRzxa3NuhTJuYC5gXZ9RsqBVrjI5zoWIEvJonef4cGb5 /t40xorUPaF6fszpTBYwmCxbn+5GD+0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:53 2025 by rpki-client