This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa File: 35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa (raw, json) Hash identifier: ONLuIJmaiKEcIUuqlEfaxDK2Gy0OFIzPApEVheuuGrk= Subject key identifier: 10:5F:91:30:B9:D9:B5:64:2E:35:20:79:0A:2F:C9:88:7F:74:6E:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666A705441727EBB71F42F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.6.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:a7:05:44:17:27:eb:b7:1f:42:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=eebf522d-cb48-4c3c-a7e5-e136224d72a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:73:58:d8:60:6a:1a:f2:e9:76:21:1e:65: 40:a5:12:7f:a6:12:5b:b4:ea:b5:31:5e:ad:9e:43: 53:72:15:6c:8f:e9:41:3a:1a:ea:9f:07:4e:61:cd: 8a:a4:85:c4:12:93:0c:5b:93:a9:90:8b:6c:c2:5b: 7d:41:89:ad:7c:14:66:02:0a:ee:bf:47:a4:bb:26: db:73:f1:8e:50:94:70:b4:28:0b:cb:08:37:ba:ce: e8:c9:9e:c1:7f:94:7a:f9:b9:ab:e9:05:8f:32:61: cf:ee:67:82:a6:45:f6:cc:54:59:36:76:91:9e:b2: 90:82:1e:be:ee:5a:46:bf:2b:a6:ac:97:3f:95:77: 47:54:c3:26:89:f1:6d:7c:0d:a6:b3:c2:aa:06:c7: f0:a7:7f:15:08:2a:e1:0f:9b:7f:d4:41:60:98:55: 7c:33:a9:0d:4b:91:a6:45:6d:30:bb:27:1c:fd:b7: 4b:4a:c8:46:21:46:a1:b2:ac:8d:82:43:2b:7b:92: 17:86:f0:ff:61:e1:d5:aa:52:f2:f3:be:ac:62:1d: ad:8c:ed:e2:c0:ac:1e:42:79:4b:5e:24:20:0a:c6: 68:ac:b9:e1:30:64:71:7d:e1:6e:62:c6:bc:6a:82: 50:8a:26:4f:03:a7:3c:5b:b3:36:a6:be:b8:43:c0: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5F:91:30:B9:D9:B5:64:2E:35:20:79:0A:2F:C9:88:7F:74:6E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d4:fb:12:69:1c:e7:33:48:e8:84:34:5c:e7:40:06:a7:88: 1c:aa:2b:71:dd:b7:50:97:c4:45:35:f9:b5:eb:d4:79:ae:44: 7d:d7:b2:58:db:19:9a:93:93:13:cf:d9:bf:94:b0:11:ff:1f: b4:d6:41:82:52:b5:64:50:85:55:37:f3:4b:82:26:9d:08:6c: 5f:92:f1:aa:c6:39:d2:ca:fe:15:ac:49:95:9f:d1:12:54:2d: d0:f6:89:87:89:19:8f:a4:6f:15:07:bc:44:5d:f3:e1:e8:b7: 4f:ad:12:9f:4b:eb:f5:40:17:86:79:b0:5e:e0:a7:77:31:cd: fa:fe:92:ea:a2:a8:a4:95:4d:d8:7f:a8:33:79:07:f9:43:f4: 4e:b7:58:60:3e:bd:3a:64:f9:a3:12:7a:53:e5:77:f6:55:61: 64:77:3c:aa:27:36:ba:83:89:fd:4f:52:6e:3a:48:b0:91:37: db:91:5a:37:22:65:25:8c:6f:1e:d6:86:ff:e9:36:62:99:b6: 8c:9e:3b:06:eb:99:c1:f3:a4:83:f8:02:38:12:81:8d:d9:83: 51:05:63:08:e3:05:c1:9c:ca:85:d8:0d:01:a8:db:44:1b:5a: 4b:13:43:bb:d4:35:4a:ab:03:31:21:e5:86:62:14:d9:34:37: ab:64:63:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZqcFRBcn67cfQvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZWViZjUyMmQtY2I0OC00YzNjLWE3ZTUtZTEzNjIyNGQ3MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUFzWNhgahry6XYhHmVApRJ/phJbtOq1MV6t nkNTchVsj+lBOhrqnwdOYc2KpIXEEpMMW5OpkItswlt9QYmtfBRmAgruv0ekuybb c/GOUJRwtCgLywg3us7oyZ7Bf5R6+bmr6QWPMmHP7meCpkX2zFRZNnaRnrKQgh6+ 7lpGvyumrJc/lXdHVMMmifFtfA2ms8KqBsfwp38VCCrhD5t/1EFgmFV8M6kNS5Gm RW0wuycc/bdLSshGIUahsqyNgkMre5IXhvD/YeHVqlLy876sYh2tjO3iwKweQnlL XiQgCsZorLnhMGRxfeFuYsa8aoJQiiZPA6c8W7M2pr64Q8DsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBfkTC52bVkLjUgeQovyYh/dG4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVmMjAwZmQtODZhNy0z OGM5LTk1ZDctMTM5M2RkZmU5YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjU+xJpHOczSOiENFznQAaniByqK3Hdt1CXxEU1+bXr1HmuRH3Xsljb GZqTkxPP2b+UsBH/H7TWQYJStWRQhVU380uCJp0IbF+S8arGOdLK/hWsSZWf0RJU LdD2iYeJGY+kbxUHvERd8+Hot0+tEp9L6/VAF4Z5sF7gp3cxzfr+kuqiqKSVTdh/ qDN5B/lD9E63WGA+vTpk+aMSelPld/ZVYWR3PKonNrqDif1PUm46SLCRN9uRWjci ZSWMbx7Whv/pNmKZtoyeOwbrmcHzpIP4AjgSgY3Zg1EFYwjjBcGcyoXYDQGo20Qb WksTQ7vUNUqrAzEh5YZiFNk0N6tkY8o= -----END CERTIFICATE-----Generated at Sun Jan 25 09:36:22 2026 by rpki-client