This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4488f946-d47b-3acc-ad55-b008953f6642.roa File: 4488f946-d47b-3acc-ad55-b008953f6642.roa (raw, json) Hash identifier: oNlmdajGPEp/pWCuXMwYdZbSkOgkuyW3bF3afFGaiuI= Subject key identifier: 28:6B:48:2E:79:6C:7D:6A:57:C9:E7:C3:C7:81:A9:19:FE:42:C6:D6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140B5974665448F09955300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4488f946-d47b-3acc-ad55-b008953f6642.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 24.253.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:b5:97:46:65:44:8f:09:95:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=a3f4078c-a932-4020-af31-099dfb25101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:d2:eb:45:a2:13:be:c5:15:34:1e:83:e8: 76:9c:cd:68:55:46:33:50:a9:2a:a6:ee:bf:5e:e0: 4f:02:a4:29:56:e6:e6:20:42:41:ba:50:ff:fa:3b: 0e:c7:62:5d:72:77:56:5d:a7:e0:59:e0:eb:b4:19: 49:48:97:b1:66:a7:18:ff:a1:8c:fe:45:be:c7:33: eb:89:c8:90:06:50:52:ef:1e:fc:99:6e:b3:74:0e: b7:e3:d9:11:e1:2b:99:54:88:11:85:8f:5d:25:89: 95:c8:a9:15:a1:61:df:34:83:79:8a:00:cf:91:89: 60:33:9a:43:f3:41:17:fe:bc:d4:2d:c2:45:1f:bc: 03:21:6c:3f:3c:c6:0d:40:83:2e:aa:e4:90:70:05: d7:e6:f9:b4:b9:56:c2:84:84:9e:0f:4a:4a:d6:6b: da:94:e2:02:37:ee:7d:75:ee:11:89:54:75:6c:48: eb:73:a9:e5:6e:b9:eb:28:da:f0:f1:46:c2:65:97: 10:c4:04:92:38:b1:e9:fa:15:32:27:37:7d:80:f7: 13:ed:ef:de:c3:68:f9:6b:74:f2:81:fb:20:09:0e: 9f:90:52:82:11:d6:5d:bb:38:94:c8:92:b1:57:70: 03:35:7d:47:8c:31:2d:64:81:ae:d7:f7:b5:1d:0f: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:48:2E:79:6C:7D:6A:57:C9:E7:C3:C7:81:A9:19:FE:42:C6:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4488f946-d47b-3acc-ad55-b008953f6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ec:d1:a0:cf:cd:56:c8:6e:9f:df:cf:0b:92:5b:0e:d2:92: a1:ae:b9:2e:b2:42:50:41:6e:47:c9:c5:b6:7d:e7:ae:0a:07: 90:5d:bf:eb:6e:d5:d4:01:27:3a:5d:96:9d:18:12:29:b4:a6: e4:24:a4:39:b2:5f:44:60:9d:8f:57:da:40:c1:89:7d:4f:52: 49:59:e8:5b:91:43:c6:cb:c5:98:07:0b:ce:32:20:ec:73:b6: c0:14:6e:d0:86:b9:97:b0:c0:c5:95:ec:bf:1c:be:86:18:66: 5b:64:74:1f:43:4f:e7:e7:76:41:bc:39:ec:d7:ec:04:53:3b: 6c:a4:d9:06:52:54:f3:b3:d7:39:c0:3a:9f:5f:ff:7e:cd:75: e5:44:d8:78:bd:b2:75:51:78:03:e0:8b:a7:99:c0:2d:df:69: 3b:fa:2d:86:0d:b9:5f:66:ee:db:19:0f:48:d0:2e:24:73:45: 8b:0b:4d:05:f7:91:74:84:06:30:37:41:e9:b5:b4:f5:da:06: b2:1a:d6:3a:4b:0b:60:40:ae:2d:fa:95:8f:55:7b:13:13:37: 82:73:5e:eb:fa:f7:a0:e3:f8:16:6f:1b:e1:f9:ff:85:39:cb: 6f:73:32:c2:6b:a1:99:50:46:64:ac:b2:6f:82:43:f3:f6:5a: b1:d5:64:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQLWXRmVEjwmVUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk YTNmNDA3OGMtYTkzMi00MDIwLWFmMzEtMDk5ZGZiMjUxMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SzS60WiE77FFTQeg+h2nM1oVUYzUKkqpu6/ XuBPAqQpVubmIEJBulD/+jsOx2JdcndWXafgWeDrtBlJSJexZqcY/6GM/kW+xzPr iciQBlBS7x78mW6zdA6349kR4SuZVIgRhY9dJYmVyKkVoWHfNIN5igDPkYlgM5pD 80EX/rzULcJFH7wDIWw/PMYNQIMuquSQcAXX5vm0uVbChISeD0pK1mvalOICN+59 de4RiVR1bEjrc6nlbrnrKNrw8UbCZZcQxASSOLHp+hUyJzd9gPcT7e/ew2j5a3Ty gfsgCQ6fkFKCEdZduziUyJKxV3ADNX1HjDEtZIGu1/e1HQ96nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChrSC55bH1qV8nnw8eBqRn+QsbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQ4OGY5NDYtZDQ3Yi0z YWNjLWFkNTUtYjAwODk1M2Y2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvs0aDPzVbIbp/fzwuSWw7SkqGuuS6yQlBBbkfJxbZ9564KB5Bdv+tu 1dQBJzpdlp0YEim0puQkpDmyX0RgnY9X2kDBiX1PUklZ6FuRQ8bLxZgHC84yIOxz tsAUbtCGuZewwMWV7L8cvoYYZltkdB9DT+fndkG8OezX7ARTO2yk2QZSVPOz1znA Op9f/37NdeVE2Hi9snVReAPgi6eZwC3faTv6LYYNuV9m7tsZD0jQLiRzRYsLTQX3 kXSEBjA3Qem1tPXaBrIa1jpLC2BAri36lY9VexMTN4JzXuv696Dj+BZvG+H5/4U5 y29zMsJroZlQRmSssm+CQ/P2WrHVZDI= -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:06 2025 by rpki-client