This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65eae229-cc2a-3adf-a331-de769866420a.roa File: 65eae229-cc2a-3adf-a331-de769866420a.roa (raw, json) Hash identifier: +jmzqIPft+OXCWPaFaWdeZGEkz2gcn8k/a9XvNoK9hY= Subject key identifier: 08:8B:0A:42:FD:61:0C:FA:C5:04:32:B1:49:65:59:CB:69:96:44:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5667026AED2D6B30F50BB980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65eae229-cc2a-3adf-a331-de769866420a.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 70.160.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:02:6a:ed:2d:6b:30:f5:0b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=ab0f6a6e-42db-4065-8405-eaade9b845f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:93:56:9e:91:52:d2:67:c4:f4:b4:dc:38: 80:bb:3f:94:6e:0d:fe:a0:88:84:7c:2d:b3:ee:72: d7:19:5a:31:70:e2:2f:21:46:a2:0e:70:5a:7d:2e: 39:28:ed:06:d7:33:fd:68:da:d9:1f:46:59:63:bf: f5:7a:51:38:74:0e:36:4c:0b:2d:09:d9:c6:72:6a: 49:05:6d:74:84:a0:42:e6:5e:3c:f8:54:7e:49:20: 4c:04:d0:ec:f6:a6:41:d4:27:db:17:1f:af:b6:2e: cc:db:08:1c:fe:41:0b:72:7e:44:b1:d0:48:bd:4e: 92:53:08:34:10:2d:1b:89:d1:a6:ad:34:df:64:54: 19:1b:c6:48:e1:97:44:20:2d:fb:b9:d3:3f:ae:f7: bb:2a:d0:9b:19:68:6a:96:d9:31:e1:30:18:7f:aa: 6f:59:c3:55:fe:42:7a:42:a7:25:91:f3:bb:21:4c: 09:8f:0d:00:f7:9d:02:2d:ec:1e:1b:e9:d3:a5:fb: ea:48:a9:09:33:66:35:1c:b3:71:e3:ea:27:4a:fd: a1:41:3d:d8:2b:b1:81:91:88:79:5b:54:71:19:c9: 07:eb:b5:5a:cc:8a:50:52:d5:58:3d:a3:93:ee:ee: 3e:86:68:e8:fc:73:c9:64:a6:aa:9e:ce:bf:89:68: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8B:0A:42:FD:61:0C:FA:C5:04:32:B1:49:65:59:CB:69:96:44:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65eae229-cc2a-3adf-a331-de769866420a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ae:11:18:4f:e7:9d:a2:05:59:1f:dc:2d:2c:c5:de:e1:80: b1:36:6b:03:34:4d:c4:63:ad:7c:e7:1f:90:3a:56:98:34:a9: c6:ed:96:a9:af:2f:75:3e:aa:52:48:6a:63:13:5b:83:61:15: 40:f9:08:66:58:6d:ee:b5:26:16:52:d7:b5:95:3e:66:32:e8: 7f:3f:59:13:7f:62:fc:b2:5e:55:98:0e:8f:03:7b:0d:08:55: 41:27:8d:07:65:12:f5:eb:89:45:45:ea:13:c4:4b:ac:a4:2d: 1b:bc:48:77:97:a1:f3:1d:4b:0c:5d:d9:9d:a5:f1:08:58:fa: f0:43:86:6b:80:c9:47:bd:fb:55:c8:57:69:7f:d7:08:01:b2: 97:99:11:ac:07:bb:46:16:d1:1b:19:1d:36:73:03:49:cc:d2: 80:78:b9:00:01:a9:52:27:13:a1:c7:bd:d2:f1:4c:3f:7d:f7: af:0a:b0:33:79:2e:ad:f8:70:ba:e6:4a:44:8f:2b:3f:a3:d2: e7:33:b3:21:6f:8b:a1:62:12:55:7b:28:2b:e2:54:c2:71:00: 0b:20:c3:fb:cd:0c:8d:1a:d4:11:e4:8f:d8:f3:16:bf:98:09: 76:75:ba:05:57:75:28:d3:e3:e4:39:66:19:df:32:ca:d5:50: 69:9e:f5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZwJq7S1rMPULuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YWIwZjZhNmUtNDJkYi00MDY1LTg0MDUtZWFhZGU5Yjg0NWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnECTVp6RUtJnxPS03DiAuz+Ubg3+oIiEfC2z 7nLXGVoxcOIvIUaiDnBafS45KO0G1zP9aNrZH0ZZY7/1elE4dA42TAstCdnGcmpJ BW10hKBC5l48+FR+SSBMBNDs9qZB1CfbFx+vti7M2wgc/kELcn5EsdBIvU6SUwg0 EC0bidGmrTTfZFQZG8ZI4ZdEIC37udM/rve7KtCbGWhqltkx4TAYf6pvWcNV/kJ6 QqclkfO7IUwJjw0A950CLeweG+nTpfvqSKkJM2Y1HLNx4+onSv2hQT3YK7GBkYh5 W1RxGckH67VazIpQUtVYPaOT7u4+hmjo/HPJZKaqns6/iWi3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiLCkL9YQz6xQQysUllWctplkSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjVlYWUyMjktY2MyYS0z YWRmLWEzMzEtZGU3Njk4NjY0MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKuERhP552iBVkf3C0sxd7hgLE2awM0TcRjrXznH5A6Vpg0qcbtlqmv L3U+qlJIamMTW4NhFUD5CGZYbe61JhZS17WVPmYy6H8/WRN/YvyyXlWYDo8Dew0I VUEnjQdlEvXriUVF6hPES6ykLRu8SHeXofMdSwxd2Z2l8QhY+vBDhmuAyUe9+1XI V2l/1wgBspeZEawHu0YW0RsZHTZzA0nM0oB4uQABqVInE6HHvdLxTD99968KsDN5 Lq34cLrmSkSPKz+j0uczsyFvi6FiElV7KCviVMJxAAsgw/vNDI0a1BHkj9jzFr+Y CXZ1ugVXdSjT4+Q5ZhnfMsrVUGme9VM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:27:30 2026 by rpki-client