This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa File: 2de2634b-2e04-3bac-8266-57a1e9be14d7.roa (raw, json) Hash identifier: knR0EA+d3cEcRr6XZdGLzjeycVHIutg2QutWSCMBg/M= Subject key identifier: 02:25:2C:48:84:85:71:15:C6:09:AD:31:DF:BC:40:F6:C1:5D:C2:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD1122EC640BA616F66A3B78 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.98.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:22:ec:64:0b:a6:16:f6:6a:3b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=0f2d134b-fb6b-4331-84c4-7dd272d04432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:74:4a:41:52:55:86:80:03:8c:5e:91:cc: 69:8e:8f:1b:36:50:0c:4b:f3:e7:0b:f3:e0:a9:e1: 94:34:bd:08:03:3b:ef:de:12:63:f7:4f:e2:82:b8: c4:20:33:af:a0:4e:50:1c:c6:9f:4b:72:79:1e:28: 0f:a0:b7:54:01:a2:65:78:77:4b:89:6d:8c:46:0e: 40:d8:9f:2f:89:cb:d5:f7:09:0d:33:6d:cc:4f:b8: 8e:e6:05:fe:90:21:e1:9e:1d:ea:4e:f7:9a:24:50: 72:54:bc:3b:a4:a5:55:45:19:94:90:a8:ed:1c:86: 07:f7:f2:8f:54:2b:1a:38:9b:e9:66:68:63:fb:30: 46:e5:96:0c:61:e0:b6:24:ee:aa:58:36:a9:38:75: 78:98:13:e2:48:9f:92:c2:98:fa:68:72:e6:1a:6e: d4:00:1b:4c:5a:c6:12:c8:39:15:a9:4f:dd:c3:de: df:6b:de:b5:a4:1b:9a:92:5c:77:fb:7f:de:e2:72: f6:f8:26:a2:df:8d:0d:c6:74:5a:ee:42:d6:35:f5: b9:83:d4:f6:c9:ee:3b:48:59:97:dc:11:35:cd:7a: 5c:70:11:0d:89:fc:f3:6c:27:ec:c0:25:96:89:44: 1c:73:e9:47:86:eb:88:06:ba:a5:48:a0:66:45:e6: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:25:2C:48:84:85:71:15:C6:09:AD:31:DF:BC:40:F6:C1:5D:C2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fb:2c:88:ea:5d:9a:8e:ae:a6:14:2e:5f:05:3e:aa:3b:30: 11:20:fc:f8:44:ad:31:a4:86:2d:9e:9a:50:c4:ee:42:b4:ca: 95:82:0a:ea:1f:b8:86:bf:db:4e:0c:53:fa:65:f9:58:5a:19: a7:3a:54:9d:9f:84:da:6d:59:75:4e:03:7a:4e:81:2b:52:97: 86:ae:14:9e:78:b8:f8:f7:20:04:7f:d2:dd:14:bd:10:6f:f8: 64:22:38:12:38:e6:18:f7:7d:d5:b3:ad:74:1f:61:08:71:cf: b0:dd:bd:3e:d4:97:be:23:7d:0d:ab:3d:d9:75:87:9c:ac:9b: 70:e0:23:2c:e0:32:6c:51:01:84:90:f0:02:fd:60:d8:31:31: 74:6c:80:fa:5d:61:52:38:9b:f1:d6:a0:66:f2:2b:66:96:cf: 55:81:51:d0:f1:7e:0c:b8:98:47:60:19:a8:60:b8:24:70:6b: 5d:16:70:d1:1a:57:40:f7:6c:04:fb:df:ca:4c:fa:01:d6:9c: 8f:ee:4f:2c:45:f0:5f:37:d9:4d:74:2c:05:ee:7b:d6:39:d0: df:f5:aa:4d:9d:1e:03:55:ab:b9:5e:cd:99:d2:97:df:e1:ef: 4c:dc:7c:44:a6:87:11:1a:38:03:b6:5c:34:25:5e:63:60:6f: e6:ca:6c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ESLsZAumFvZqO3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MGYyZDEzNGItZmI2Yi00MzMxLTg0YzQtN2RkMjcyZDA0NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb10SkFSVYaAA4xekcxpjo8bNlAMS/PnC/Pg qeGUNL0IAzvv3hJj90/igrjEIDOvoE5QHMafS3J5HigPoLdUAaJleHdLiW2MRg5A 2J8vicvV9wkNM23MT7iO5gX+kCHhnh3qTveaJFByVLw7pKVVRRmUkKjtHIYH9/KP VCsaOJvpZmhj+zBG5ZYMYeC2JO6qWDapOHV4mBPiSJ+Swpj6aHLmGm7UABtMWsYS yDkVqU/dw97fa961pBuaklx3+3/e4nL2+Cai340NxnRa7kLWNfW5g9T2ye47SFmX 3BE1zXpccBENifzzbCfswCWWiUQcc+lHhuuIBrqlSKBmRebOswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIlLEiEhXEVxgmtMd+8QPbBXcKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRlMjYzNGItMmUwNC0z YmFjLTgyNjYtNTdhMWU5YmUxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH7LIjqXZqOrqYULl8FPqo7MBEg/PhErTGkhi2emlDE7kK0ypWCCuof uIa/204MU/pl+VhaGac6VJ2fhNptWXVOA3pOgStSl4auFJ54uPj3IAR/0t0UvRBv +GQiOBI45hj3fdWzrXQfYQhxz7DdvT7Ul74jfQ2rPdl1h5ysm3DgIyzgMmxRAYSQ 8AL9YNgxMXRsgPpdYVI4m/HWoGbyK2aWz1WBUdDxfgy4mEdgGahguCRwa10WcNEa V0D3bAT738pM+gHWnI/uTyxF8F832U10LAXue9Y50N/1qk2dHgNVq7lezZnSl9/h 70zcfESmhxEaOAO2XDQlXmNgb+bKbKI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:05 2025 by rpki-client