This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa File: 35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa (raw, json) Hash identifier: N1bSaHlI2YJDLo3N7FJLNBRAym/H0/xV90UPeAX6mTc= Subject key identifier: BF:1D:E0:3A:7C:CF:95:D0:46:AA:2E:9C:21:AD:11:B9:3A:41:32:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE761E33A332501C00776DA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.106.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:1e:33:a3:32:50:1c:00:77:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=5b4617db-59c6-4077-af5e-e192e0951edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:fd:19:ba:a7:bf:a5:cd:8f:a6:5d:51:5a: 7d:e5:6c:55:0b:de:f3:4c:25:ac:1f:a6:b0:0b:4d: c0:1d:f4:ad:8e:76:2f:66:29:fe:6d:d1:7c:23:cb: 11:28:d9:be:f1:c1:7b:bf:ba:06:25:e1:ca:28:91: 08:c0:c8:b9:ea:22:a8:70:74:11:68:e2:e9:80:91: 1a:d6:b0:00:1d:96:a0:83:ef:2b:26:e4:3a:03:6f: 4a:fa:dc:bc:55:0d:7e:30:20:31:7d:63:40:3e:df: e9:31:9a:06:3b:ca:77:ac:97:1c:06:52:a4:db:ba: 42:ce:83:12:37:42:55:73:88:3d:f5:58:7a:14:37: 4a:31:a9:8b:1c:73:42:b0:fe:5c:c2:9e:4d:3f:5f: ad:53:ce:8f:4f:81:3c:06:20:af:f8:1f:26:a0:fa: fd:0a:fb:08:cb:5c:af:1a:ef:b7:aa:98:14:78:43: 13:c6:ed:95:cd:5d:ef:0f:61:56:6c:d1:73:7d:f6: ae:ca:3e:9f:7b:71:92:84:78:b1:7a:60:8e:72:f9: 86:0c:94:57:1a:40:af:c9:fc:df:10:c0:04:37:94: 80:0b:78:c3:80:10:e9:40:10:0c:e5:e1:07:cd:65: da:7e:48:70:87:35:d4:d8:4e:d9:48:54:f5:69:9c: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:E0:3A:7C:CF:95:D0:46:AA:2E:9C:21:AD:11:B9:3A:41:32:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c4:f1:9a:b1:b3:54:d5:64:8b:39:02:e4:83:3d:2b:e0:92: e1:b1:c6:97:8e:bb:68:13:6c:9b:7a:0b:86:8b:47:f9:f7:1f: c0:fe:47:4e:9b:53:7f:d9:1d:31:b8:a2:a9:7a:ba:d0:57:84: 3f:ee:27:f1:bd:40:72:ff:85:d7:c4:56:5a:03:01:52:6d:f0: 31:68:6b:a7:9f:a6:8b:18:77:a8:38:5b:cc:76:af:c8:7b:11: cf:5b:38:32:da:c6:d4:bd:06:fa:ad:22:08:96:a2:06:bc:4e: 2a:32:85:16:18:f5:93:24:58:6f:05:90:96:b3:a5:d8:5c:a1: dd:d5:12:08:75:40:92:24:f5:5a:de:54:5b:e5:24:49:56:47: fa:29:e0:8b:55:17:c2:8d:e7:3c:2f:ad:8e:7e:f5:f5:82:ff: 6d:dd:79:90:14:2d:06:e7:62:d5:4b:5a:17:50:0a:3d:e8:fe: 36:92:94:52:c1:bb:f7:0e:06:fe:66:e5:62:ff:25:4e:6e:4c: ec:37:50:89:70:d1:59:e2:a7:93:30:db:0d:e0:f6:35:8f:36: 35:e5:33:af:24:4b:37:af:b1:b6:a9:0d:0d:fa:12:a7:cf:06: c9:b7:e4:e1:5c:7b:4b:e5:87:28:d1:15:6e:d3:9e:7e:27:15: ef:2f:b8:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+dh4zozJQHAB3baAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk NWI0NjE3ZGItNTljNi00MDc3LWFmNWUtZTE5MmUwOTUxZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvv9Gbqnv6XNj6ZdUVp95WxVC97zTCWsH6aw C03AHfStjnYvZin+bdF8I8sRKNm+8cF7v7oGJeHKKJEIwMi56iKocHQRaOLpgJEa 1rAAHZagg+8rJuQ6A29K+ty8VQ1+MCAxfWNAPt/pMZoGO8p3rJccBlKk27pCzoMS N0JVc4g99Vh6FDdKMamLHHNCsP5cwp5NP1+tU86PT4E8BiCv+B8moPr9CvsIy1yv Gu+3qpgUeEMTxu2VzV3vD2FWbNFzffauyj6fe3GShHixemCOcvmGDJRXGkCvyfzf EMAEN5SAC3jDgBDpQBAM5eEHzWXafkhwhzXU2E7ZSFT1aZywnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8d4Dp8z5XQRqounCGtEbk6QTJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVlMmRmNGEtMjg4Ny0z Y2JiLThhNzEtYTIzYjY1ZTU3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzE8Zqxs1TVZIs5AuSDPSvgkuGxxpeOu2gTbJt6C4aLR/n3H8D+R06b U3/ZHTG4oql6utBXhD/uJ/G9QHL/hdfEVloDAVJt8DFoa6efposYd6g4W8x2r8h7 Ec9bODLaxtS9BvqtIgiWoga8TioyhRYY9ZMkWG8FkJazpdhcod3VEgh1QJIk9Vre VFvlJElWR/op4ItVF8KN5zwvrY5+9fWC/23deZAULQbnYtVLWhdQCj3o/jaSlFLB u/cOBv5m5WL/JU5uTOw3UIlw0Vnip5Mw2w3g9jWPNjXlM68kSzevsbapDQ36EqfP Bsm35OFce0vlhyjRFW7Tnn4nFe8vuPc= -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:36 2025 by rpki-client