This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa File: 3ddcc118-f412-3942-b6a4-30742cd27a7c.roa (raw, json) Hash identifier: 1DrrovDyzbKqKqIhmN0YODa5sPPlyELQC8eUZOm5wRk= Subject key identifier: D9:EB:8E:88:C2:7E:F4:AD:92:2A:C7:51:8F:F0:3C:D8:DA:4A:E1:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE76256F784D7AEEE43E3480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.109.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:25:6f:78:4d:7a:ee:e4:3e:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=c3be31bf-44ea-4cc1-89a0-9b817359ecb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:75:47:3b:bb:6f:f4:35:c2:90:bc:96:7e: 32:2d:c1:eb:5f:93:57:2c:71:25:66:f8:13:b5:ae: 1b:de:d7:f6:af:ca:4a:b8:a2:d1:96:0e:49:05:18: 6b:5b:a8:9a:cc:b3:4c:ef:fd:69:d8:45:e8:c2:60: 11:68:75:0a:3d:a4:7e:bf:41:6a:b1:97:2d:0c:a3: 86:9d:01:bd:8b:dd:ff:4f:c4:c5:f5:b3:ee:d4:f6: f4:60:17:bc:dc:77:b4:d0:a6:52:21:db:15:1e:41: 75:7a:f1:76:f8:c7:e7:b9:60:0b:02:8f:95:4d:89: e9:7f:52:65:31:86:9d:f5:16:11:08:df:de:ba:9e: 66:25:c9:61:5e:ec:02:75:06:df:41:37:bc:ee:3b: 93:14:68:71:b2:5d:cb:3a:00:3a:ac:a7:25:3d:d8: de:56:7b:5f:f9:87:c3:2d:d3:35:3a:0d:dc:63:f4: 03:84:80:f9:ce:ba:92:94:a2:4f:55:bb:de:fc:85: f7:0e:a6:fa:ad:5a:b1:cc:ae:bd:2b:01:0c:f6:bf: 5d:24:8b:10:2e:22:ca:18:ed:9f:eb:92:45:2e:d1: f5:11:b5:fe:dd:25:ba:d1:98:97:68:60:cd:7d:aa: 23:18:1f:40:47:d9:ed:64:93:06:8c:c2:0c:8b:21: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:8E:88:C2:7E:F4:AD:92:2A:C7:51:8F:F0:3C:D8:DA:4A:E1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:30:b9:f4:c0:e9:d2:fd:f3:50:ac:db:6b:e3:2b:75:c0:23: db:45:dd:96:fe:1e:02:41:44:4f:93:5e:63:f6:6b:94:52:c9: 8f:be:62:ca:4e:d2:34:e2:c6:45:ca:47:b5:59:14:d7:64:93: db:9a:1e:01:f2:e3:b2:52:dc:72:e9:ed:92:24:de:91:14:16: 4f:d5:1b:4a:29:9a:a5:e7:77:30:ad:75:57:86:c1:51:f5:c4: b2:53:1a:cc:af:8c:fd:92:f2:f1:f4:c1:3c:7a:7a:f3:45:95: a7:53:11:8a:45:41:0a:90:af:96:6a:cc:e3:f0:95:5a:c0:e8: 67:77:54:99:e1:7d:35:e5:15:62:35:a2:1d:e4:47:22:f6:f0: 81:e5:78:58:2a:17:34:33:85:1f:c9:f7:8e:ec:49:8c:d5:28: 63:28:a1:a2:68:0d:f3:d2:ce:f6:1a:e5:8b:42:1e:f0:fa:a3: 69:aa:62:2a:42:1a:59:a4:a9:61:e5:d1:02:ed:54:8f:e0:92: 74:24:a9:9a:1c:14:28:8c:2c:f9:cf:c0:f9:d6:cc:c7:69:63: 38:a3:0e:32:76:8e:f5:af:77:f3:79:05:be:98:b1:73:a0:27: 16:d7:22:35:38:c8:f2:1b:e7:7d:0a:f0:17:00:be:54:23:28: 7c:7a:a5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+diVveE167uQ+NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk YzNiZTMxYmYtNDRlYS00Y2MxLTg5YTAtOWI4MTczNTllY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKF1Rzu7b/Q1wpC8ln4yLcHrX5NXLHElZvgT ta4b3tf2r8pKuKLRlg5JBRhrW6iazLNM7/1p2EXowmARaHUKPaR+v0FqsZctDKOG nQG9i93/T8TF9bPu1Pb0YBe83He00KZSIdsVHkF1evF2+MfnuWALAo+VTYnpf1Jl MYad9RYRCN/eup5mJclhXuwCdQbfQTe87juTFGhxsl3LOgA6rKclPdjeVntf+YfD LdM1Og3cY/QDhID5zrqSlKJPVbve/IX3Dqb6rVqxzK69KwEM9r9dJIsQLiLKGO2f 65JFLtH1EbX+3SW60ZiXaGDNfaojGB9AR9ntZJMGjMIMiyEuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnrjojCfvStkirHUY/wPNjaSuGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RkY2MxMTgtZjQxMi0z OTQyLWI2YTQtMzA3NDJjZDI3YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0wufTA6dL981Cs22vjK3XAI9tF3Zb+HgJBRE+TXmP2a5RSyY++YspO 0jTixkXKR7VZFNdkk9uaHgHy47JS3HLp7ZIk3pEUFk/VG0opmqXndzCtdVeGwVH1 xLJTGsyvjP2S8vH0wTx6evNFladTEYpFQQqQr5ZqzOPwlVrA6Gd3VJnhfTXlFWI1 oh3kRyL28IHleFgqFzQzhR/J947sSYzVKGMooaJoDfPSzvYa5YtCHvD6o2mqYipC GlmkqWHl0QLtVI/gknQkqZocFCiMLPnPwPnWzMdpYzijDjJ2jvWvd/N5Bb6YsXOg JxbXIjU4yPIb530K8BcAvlQjKHx6pQg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:17:31 2025 by rpki-client