This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa File: 2fef5e88-c658-32c2-aa02-a9f8997aae15.roa (raw, json) Hash identifier: 9M2i8n90Ds0uj62Lsw+H5McgOQlSQtJQlz8739YFbFA= Subject key identifier: 73:A3:76:C5:8B:88:C7:5C:21:C8:F5:31:EA:8D:0D:B6:39:9A:F8:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10B976250307C09877B740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.0.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:b9:76:25:03:07:c0:98:77:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=0f653f89-3645-4b00-8c9e-12441ef81b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:1b:f6:78:7b:f4:54:fc:98:47:b5:9e:64: 9c:1a:ac:0d:49:78:ed:f6:cc:cd:ce:83:b4:40:9b: 28:af:2f:de:35:f5:d6:ea:55:a3:87:cf:72:07:b8: da:8b:ed:5e:05:a3:7a:9a:c8:13:98:0f:fe:23:e3: 6d:b4:28:83:27:13:96:a1:79:ae:e0:8a:7e:d6:6e: 8c:7d:1b:f8:20:a5:f8:39:3d:28:9a:0d:f3:d5:6c: 1b:02:d4:da:da:c9:fe:24:fe:da:96:39:7b:72:2a: f5:22:e3:7f:9f:34:3d:af:9f:25:23:9f:42:25:c2: b7:ce:c3:ce:bf:5b:83:15:1d:5d:d4:1d:e4:fc:29: ec:10:d0:4a:a8:0e:ae:3d:b5:66:3e:26:3b:f3:b2: cd:97:f3:d7:7f:2a:5d:53:8d:73:21:d1:6b:14:ca: c3:b5:31:66:61:63:1f:73:e3:25:60:51:d9:1f:a1: 63:f7:f2:5a:42:b6:4a:d4:d2:fe:55:14:ee:c3:36: 7a:b0:f0:9d:64:43:8e:11:32:80:eb:26:2d:a0:95: 58:f9:c1:82:b6:a7:da:ae:6d:41:9e:dd:8b:52:92: ef:e5:de:3f:54:1b:81:8e:00:29:05:3e:36:98:93: a3:55:64:64:ec:93:c5:53:af:f3:79:ed:e5:87:bf: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A3:76:C5:8B:88:C7:5C:21:C8:F5:31:EA:8D:0D:B6:39:9A:F8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:df:6f:31:e1:14:63:bb:f0:14:f9:1a:72:20:cb:05:57:34: 59:0e:65:01:cd:c0:78:19:75:10:ea:29:38:47:45:d3:91:d1: 0d:51:42:0d:9e:21:27:ed:65:3d:36:32:d2:85:54:4d:8b:41: 6c:e7:a1:61:90:17:e6:df:ef:ad:51:b5:38:56:b6:e5:df:4c: e8:8c:79:d8:4d:f4:cc:ed:ab:8d:0b:3a:e3:2a:9d:c4:9c:a5: 62:0d:11:c8:06:3d:7f:90:74:45:01:57:4c:78:c2:65:b1:5d: a6:b1:8d:93:d4:b0:94:37:0b:9b:00:dc:32:43:8c:59:87:d5: 1f:db:21:06:da:db:2f:b1:f3:95:1f:47:05:81:db:64:e1:1f: 68:f2:74:a9:ca:5e:99:3e:37:75:25:20:3b:6a:91:8b:76:14: 69:1e:46:9e:95:f4:93:fd:7d:a8:a6:14:d4:5e:bf:a6:11:8a: e3:57:10:f4:e2:7e:00:14:eb:b8:2c:77:06:55:af:35:2c:13: 25:94:e4:2f:58:16:ae:46:b9:de:c8:d9:c8:19:60:dd:9b:13: 17:3b:f8:eb:dd:3c:14:41:f7:ed:4b:a1:f6:e9:54:82:78:a4: 39:94:06:d0:ac:af:52:92:69:55:70:bc:4f:99:9f:63:b4:d7: 7d:23:cc:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELl2JQMHwJh3t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MGY2NTNmODktMzY0NS00YjAwLThjOWUtMTI0NDFlZjgxYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq4b9nh79FT8mEe1nmScGqwNSXjt9szNzoO0 QJsory/eNfXW6lWjh89yB7jai+1eBaN6msgTmA/+I+NttCiDJxOWoXmu4Ip+1m6M fRv4IKX4OT0omg3z1WwbAtTa2sn+JP7aljl7cir1IuN/nzQ9r58lI59CJcK3zsPO v1uDFR1d1B3k/CnsENBKqA6uPbVmPiY787LNl/PXfypdU41zIdFrFMrDtTFmYWMf c+MlYFHZH6Fj9/JaQrZK1NL+VRTuwzZ6sPCdZEOOETKA6yYtoJVY+cGCtqfarm1B nt2LUpLv5d4/VBuBjgApBT42mJOjVWRk7JPFU6/zee3lh7/AdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOjdsWLiMdcIcj1MeqNDbY5mvjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmZlZjVlODgtYzY1OC0z MmMyLWFhMDItYTlmODk5N2FhZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDfbzHhFGO78BT5GnIgywVXNFkOZQHNwHgZdRDqKThHRdOR0Q1RQg2e ISftZT02MtKFVE2LQWznoWGQF+bf761RtThWtuXfTOiMedhN9Mztq40LOuMqncSc pWINEcgGPX+QdEUBV0x4wmWxXaaxjZPUsJQ3C5sA3DJDjFmH1R/bIQba2y+x85Uf RwWB22ThH2jydKnKXpk+N3UlIDtqkYt2FGkeRp6V9JP9faimFNRev6YRiuNXEPTi fgAU67gsdwZVrzUsEyWU5C9YFq5Gud7I2cgZYN2bExc7+OvdPBRB9+1LofbpVIJ4 pDmUBtCsr1KSaVVwvE+Zn2O0130jzBk= -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:04 2025 by rpki-client