This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/491fba35-5491-3517-96e5-c8bfde389a90.roa File: 491fba35-5491-3517-96e5-c8bfde389a90.roa (raw, json) Hash identifier: tqZIdVQM3Pv7/PhGSMY3vBEFJkbNtGrJSS1hv2SIzxc= Subject key identifier: C0:12:51:B3:BF:D8:42:27:A7:73:B8:A6:9C:F0:FD:C9:96:2C:B5:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140EC9FF134D3ECE2290380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/491fba35-5491-3517-96e5-c8bfde389a90.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:ec:9f:f1:34:d3:ec:e2:29:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=36c13ae1-e17a-4d45-afd2-c1dbbe928cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:41:30:eb:5f:9a:02:4f:cf:fe:6d:b8:9b: f0:d7:83:59:25:62:6b:63:15:37:b6:1c:d1:04:2f: a4:41:be:1f:4f:0c:3f:42:69:dc:02:a7:35:32:ec: 00:f0:cb:22:de:ce:07:92:f3:3b:7e:de:86:80:7d: 5f:c2:31:c8:70:c5:b9:c8:d0:5a:6f:6b:28:af:b1: c9:41:02:58:0c:77:44:fb:be:ef:8c:4b:29:86:76: 92:59:cb:66:d7:51:b6:c6:36:c7:b8:d1:f3:90:14: 6f:01:3b:dc:6e:21:e3:0f:ee:04:1b:0f:71:e6:89: e3:a7:2e:af:34:b8:2d:16:d6:9a:80:e0:cc:84:00: d2:8f:52:81:95:17:a3:fb:12:6a:c3:85:a7:c0:86: 2c:f6:79:5c:9b:b9:fe:41:c2:3a:5d:fa:35:a0:47: a6:c2:75:fe:7d:23:75:96:2a:2c:a6:f0:fb:34:84: 1f:0a:a8:b6:ec:de:95:b0:68:76:b4:35:95:8d:0c: df:0c:69:e0:ed:b6:17:a9:21:ad:fa:3c:f1:b1:7c: a2:99:e4:95:29:23:46:19:f4:20:2f:bc:99:ce:a8: 38:db:ed:bb:57:92:26:b4:82:16:db:fb:30:90:91: 38:6a:d2:bc:41:a3:a9:86:69:9a:2b:7f:ff:95:7e: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:12:51:B3:BF:D8:42:27:A7:73:B8:A6:9C:F0:FD:C9:96:2C:B5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/491fba35-5491-3517-96e5-c8bfde389a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c6:f4:3d:b4:32:25:50:37:7d:12:32:71:fb:8a:c6:f4:47: e8:45:a5:34:5c:81:61:99:59:ef:87:20:f7:66:8a:dd:b3:77: 7e:c1:bf:15:20:b7:54:a9:01:49:b4:18:4a:e3:c4:1e:7b:2d: cd:8e:c7:7d:0d:3b:9d:7f:16:42:f2:cc:30:be:4b:84:fe:d1: eb:9e:10:0e:10:74:fb:81:4d:d6:eb:0a:62:43:9e:fd:4f:9e: d1:d3:54:99:50:a7:c5:d5:71:40:5e:da:f0:90:dc:3e:7e:da: 9d:29:0e:23:09:9c:c1:e5:b9:f8:ca:88:6d:2b:92:66:f9:6e: c8:c3:b1:ec:63:5a:48:05:5f:f5:96:32:e5:4d:65:e5:e2:ee: 9e:5f:a8:e9:51:b8:70:b3:99:bb:e4:b8:d6:28:2f:2e:a6:07: b4:bd:1b:f8:3b:80:a7:15:e3:c6:38:39:5f:4f:71:af:5c:b3: e9:d5:f4:87:90:d6:de:28:0c:78:0d:e7:7a:96:66:a9:da:19: 3b:cb:f4:29:ed:7d:db:40:ca:cb:b0:fc:08:3f:56:64:a7:5d: 0f:07:c9:cc:22:c4:8f:a8:e1:07:a7:77:f7:94:14:a4:9d:90: e6:5f:2e:48:54:90:bf:d5:a5:4a:89:dd:96:60:a2:29:a6:df: 67:e6:96:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQOyf8TTT7OIpA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MzZjMTNhZTEtZTE3YS00ZDQ1LWFmZDItYzFkYmJlOTI4Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOBBMOtfmgJPz/5tuJvw14NZJWJrYxU3thzR BC+kQb4fTww/QmncAqc1MuwA8Msi3s4HkvM7ft6GgH1fwjHIcMW5yNBab2sor7HJ QQJYDHdE+77vjEsphnaSWctm11G2xjbHuNHzkBRvATvcbiHjD+4EGw9x5onjpy6v NLgtFtaagODMhADSj1KBlRej+xJqw4WnwIYs9nlcm7n+QcI6Xfo1oEemwnX+fSN1 liospvD7NIQfCqi27N6VsGh2tDWVjQzfDGng7bYXqSGt+jzxsXyimeSVKSNGGfQg L7yZzqg42+27V5ImtIIW2/swkJE4atK8QaOphmmaK3//lX55PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMASUbO/2EInp3O4ppzw/cmWLLXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDkxZmJhMzUtNTQ5MS0z NTE3LTk2ZTUtYzhiZmRlMzg5YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXG9D20MiVQN30SMnH7isb0R+hFpTRcgWGZWe+HIPdmit2zd37BvxUg t1SpAUm0GErjxB57Lc2Ox30NO51/FkLyzDC+S4T+0eueEA4QdPuBTdbrCmJDnv1P ntHTVJlQp8XVcUBe2vCQ3D5+2p0pDiMJnMHlufjKiG0rkmb5bsjDsexjWkgFX/WW MuVNZeXi7p5fqOlRuHCzmbvkuNYoLy6mB7S9G/g7gKcV48Y4OV9Pca9cs+nV9IeQ 1t4oDHgN53qWZqnaGTvL9CntfdtAysuw/Ag/VmSnXQ8HycwixI+o4Qend/eUFKSd kOZfLkhUkL/VpUqJ3ZZgoimm32fmlso= -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:57 2025 by rpki-client