This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa File: 3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa (raw, json) Hash identifier: xljtt2wjR55xX/96LOjPOHOQ5SSjqWvlGtL9ClbymXM= Subject key identifier: 8D:2C:55:49:62:10:16:6A:EA:79:3A:06:43:17:3F:25:36:7C:87:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56670F5F7DBE1C992EDBD4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.8.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:0f:5f:7d:be:1c:99:2e:db:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=f0286d7d-c6c3-4329-8e44-83fe38996a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:dc:0b:65:8e:ea:95:06:e1:14:af:0b:ab: 6c:ab:1a:0c:39:13:5c:d7:fe:73:d9:5b:b8:71:61: c7:1b:5a:6f:f0:d7:d6:91:93:10:8b:6d:53:7b:2b: 32:68:c7:5c:d4:15:e6:1c:c3:97:44:12:41:82:b8: a2:b5:5c:aa:89:89:88:3d:54:e1:8f:8d:b9:88:6a: dd:cf:3b:96:49:4e:98:82:02:a2:20:05:e5:5d:05: 85:13:a3:b9:e2:26:a4:4d:05:42:e4:cc:03:9f:b3: f2:f0:5b:15:16:66:55:ad:f5:79:32:c2:d5:e1:da: 17:a1:fe:80:85:0c:67:b5:7d:8f:4f:44:6a:e7:ee: b3:c7:30:33:70:7a:de:e6:bd:e7:5e:eb:82:da:18: f4:23:17:a2:5d:a0:09:ad:ee:44:9e:e0:ec:09:e4: fa:67:60:c9:35:b4:32:8d:78:a1:04:f9:6d:f7:06: 39:14:57:91:36:2a:de:1d:d2:46:8e:39:1b:e6:7f: 14:59:6a:8f:41:97:33:84:31:a2:9f:36:c4:49:e5: 77:46:2c:4e:ef:60:a5:01:e8:60:91:1a:e2:d3:57: 50:0e:ae:ce:27:0b:75:64:03:6f:b7:69:53:fb:7d: 8e:d7:e9:73:7d:40:b6:97:fc:00:56:f2:0a:02:ff: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:55:49:62:10:16:6A:EA:79:3A:06:43:17:3F:25:36:7C:87:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1e:1e:44:ab:d6:48:22:84:a0:43:57:5a:34:8a:4b:c8:4c: 5e:1f:34:a0:cd:a7:24:e3:9a:4e:36:77:d2:41:07:24:11:81: d4:da:6a:19:0a:b3:cf:f0:4e:54:b5:c4:b9:59:2a:3e:8e:5d: da:95:06:8d:8f:0e:70:a5:2c:35:60:03:19:e0:26:ec:db:26: f4:50:67:62:3d:d4:ae:43:dd:5d:a4:c3:00:e6:ae:a3:7b:29: 8f:a6:af:7d:7f:b3:62:2d:8b:85:a2:91:8e:a8:2b:8f:65:e7: 76:91:fe:9f:25:ce:f2:ae:f1:84:bc:a3:28:0d:61:fd:4f:b9: ad:75:c5:a9:8b:b1:18:f1:24:17:5c:0a:29:df:3e:60:93:eb: 83:89:30:8b:37:cc:76:54:eb:e4:cb:6a:d6:c3:90:8f:70:fa: 3b:2c:fd:22:ca:ba:28:40:a2:f0:f6:11:1e:68:96:e1:e4:15: 42:c0:6c:ac:25:da:5b:0e:e5:71:bb:db:08:58:b7:ef:b4:ee: 80:dd:e6:db:05:90:31:fc:d7:13:30:05:9f:ed:5e:3d:24:9f: 51:48:1a:d6:bf:45:0f:49:74:e9:84:e3:7f:c0:6a:58:a6:c3: de:3b:ea:85:62:fa:e8:71:78:a8:88:4e:7c:8a:30:91:52:96: a5:06:8e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZw9ffb4cmS7b1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZjAyODZkN2QtYzZjMy00MzI5LThlNDQtODNmZTM4OTk2YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pTcC2WO6pUG4RSvC6tsqxoMORNc1/5z2Vu4 cWHHG1pv8NfWkZMQi21TeysyaMdc1BXmHMOXRBJBgriitVyqiYmIPVThj425iGrd zzuWSU6YggKiIAXlXQWFE6O54iakTQVC5MwDn7Py8FsVFmZVrfV5MsLV4doXof6A hQxntX2PT0Rq5+6zxzAzcHre5r3nXuuC2hj0IxeiXaAJre5EnuDsCeT6Z2DJNbQy jXihBPlt9wY5FFeRNireHdJGjjkb5n8UWWqPQZczhDGinzbESeV3RixO72ClAehg kRri01dQDq7OJwt1ZANvt2lT+32O1+lzfUC2l/wAVvIKAv9XlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0sVUliEBZq6nk6BkMXPyU2fIf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RmOWZjYWEtYmVhNi0z YjNkLTliYWItMzJlYTdlMmY1ZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYeHkSr1kgihKBDV1o0ikvITF4fNKDNpyTjmk42d9JBByQRgdTaahkK s8/wTlS1xLlZKj6OXdqVBo2PDnClLDVgAxngJuzbJvRQZ2I91K5D3V2kwwDmrqN7 KY+mr31/s2Iti4WikY6oK49l53aR/p8lzvKu8YS8oygNYf1Pua11xamLsRjxJBdc CinfPmCT64OJMIs3zHZU6+TLatbDkI9w+jss/SLKuihAovD2ER5oluHkFULAbKwl 2lsO5XG72whYt++07oDd5tsFkDH81xMwBZ/tXj0kn1FIGta/RQ9JdOmE43/Aalim w9476oVi+uhxeKiITnyKMJFSlqUGjpQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:13 2026 by rpki-client