This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d42cd39-0e47-35c6-9325-a4be4cde6005.roa File: 3d42cd39-0e47-35c6-9325-a4be4cde6005.roa (raw, json) Hash identifier: eA6RvgUpf8dJ2IfuEiT/6mjxaB4VqFx5GO10HdIcTV0= Subject key identifier: AD:A5:E3:21:B8:77:C1:EA:E3:40:D0:26:E8:C9:3B:FA:89:60:19:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666B8A86D015F5EAAF2AAE8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d42cd39-0e47-35c6-9325-a4be4cde6005.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.101.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b8:a8:6d:01:5f:5e:aa:f2:aa:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=78bb63bb-f1d2-4756-99c2-cd334b453c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:d8:d8:37:46:6b:7d:38:3a:aa:a2:c5:2d: 98:ed:d1:1b:2b:07:48:42:93:dc:23:da:f6:4e:46: 94:cf:f1:eb:b8:c2:86:25:be:68:b7:05:73:23:71: 71:bb:83:8a:4a:4a:b2:d7:3b:b4:ad:07:7a:d3:c8: 2b:2c:bc:27:ca:83:a0:ed:e1:ca:7a:5a:a9:22:89: 00:1f:62:88:de:67:cf:29:ef:37:8d:6d:64:af:a1: db:77:37:d9:92:d8:9a:96:97:ce:7a:4e:e1:a5:0a: 8c:23:f4:c1:a5:92:cd:c5:61:49:34:55:7b:97:f6: 29:6b:ea:0e:7a:2f:57:b7:fa:a3:aa:e0:45:5b:31: 61:a0:6b:27:a7:37:75:32:0a:10:7b:57:9b:9f:9a: 9a:3f:fd:0e:31:17:46:8e:8d:64:62:35:3a:4e:4b: 94:d4:40:c3:d4:92:bc:57:da:d0:b8:4c:d9:f1:34: b7:f4:7d:8b:81:49:03:cb:d7:b6:b6:30:78:31:5a: f3:ea:24:7d:23:d1:7e:cb:7c:71:58:e2:ac:57:d8: f6:7a:2c:86:b0:09:d7:95:af:7b:d0:4f:7a:14:c0: 8a:b9:e6:24:1f:36:b3:e8:29:42:2c:62:79:01:91: bb:c0:9c:b8:59:db:53:d1:fe:2c:45:56:7f:ed:e1: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:E3:21:B8:77:C1:EA:E3:40:D0:26:E8:C9:3B:FA:89:60:19:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d42cd39-0e47-35c6-9325-a4be4cde6005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6f:f8:9e:62:2b:4a:8e:22:a5:54:ee:60:53:5d:06:77:b4: 8b:01:e3:ca:c3:04:14:e5:3e:11:36:8d:b5:57:1d:d2:67:7b: f7:21:fd:e3:39:ce:16:60:c3:a3:f6:61:ba:8d:c7:f9:5b:57: f2:0f:46:7f:a1:45:fd:cd:eb:a1:02:a5:1a:f3:a7:5a:3b:8c: 41:3e:b5:3b:5b:84:ff:61:7a:40:80:fb:e8:37:d9:8a:4b:03: 8d:20:00:7b:58:7a:a9:2b:87:60:55:1c:ca:cb:7f:a0:b1:24: 32:b4:2f:8a:53:c0:5e:4e:b1:a9:d0:a5:66:52:0e:48:9e:2c: 98:7a:d0:9e:7a:3c:53:aa:89:4d:81:77:78:08:05:b5:d6:e5: 77:aa:e9:ba:7b:82:9a:d1:5f:3c:6c:0d:c9:99:61:5a:98:e9: 4e:21:a9:72:68:92:80:48:c1:79:a0:44:d6:d4:c3:07:7a:2a: 86:85:ad:39:23:44:56:9f:22:af:65:03:ad:5b:ac:ae:e4:d6: 59:ea:3a:46:1a:10:2f:ad:94:96:ec:73:ff:53:95:6d:f5:d6: bd:7f:40:6e:8a:5d:59:53:4b:99:96:4b:ec:ad:fb:c9:16:26: 0b:46:1c:ab:b5:84:03:be:1e:82:f6:be:eb:38:08:f9:24:ae: 7a:98:c6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZriobQFfXqryqugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NzhiYjYzYmItZjFkMi00NzU2LTk5YzItY2QzMzRiNDUzYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywbY2DdGa304OqqixS2Y7dEbKwdIQpPcI9r2 TkaUz/HruMKGJb5otwVzI3Fxu4OKSkqy1zu0rQd608grLLwnyoOg7eHKelqpIokA H2KI3mfPKe83jW1kr6HbdzfZktialpfOek7hpQqMI/TBpZLNxWFJNFV7l/Ypa+oO ei9Xt/qjquBFWzFhoGsnpzd1MgoQe1ebn5qaP/0OMRdGjo1kYjU6TkuU1EDD1JK8 V9rQuEzZ8TS39H2LgUkDy9e2tjB4MVrz6iR9I9F+y3xxWOKsV9j2eiyGsAnXla97 0E96FMCKueYkHzaz6ClCLGJ5AZG7wJy4WdtT0f4sRVZ/7eE6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2l4yG4d8Hq40DQJujJO/qJYBnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q0MmNkMzktMGU0Ny0z NWM2LTkzMjUtYTRiZTRjZGU2MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxv+J5iK0qOIqVU7mBTXQZ3tIsB48rDBBTlPhE2jbVXHdJne/ch/eM5 zhZgw6P2YbqNx/lbV/IPRn+hRf3N66ECpRrzp1o7jEE+tTtbhP9hekCA++g32YpL A40gAHtYeqkrh2BVHMrLf6CxJDK0L4pTwF5OsanQpWZSDkieLJh60J56PFOqiU2B d3gIBbXW5Xeq6bp7gprRXzxsDcmZYVqY6U4hqXJokoBIwXmgRNbUwwd6KoaFrTkj RFafIq9lA61brK7k1lnqOkYaEC+tlJbsc/9TlW311r1/QG6KXVlTS5mWS+yt+8kW JgtGHKu1hAO+HoL2vus4CPkkrnqYxpE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:20 2026 by rpki-client