This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa File: 66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa (raw, json) Hash identifier: OmvxRl0XdcUEWcnlx3rNsfZLeXUFHJCxwzOtUbRO9LQ= Subject key identifier: 9F:71:75:45:1F:F8:B2:D2:5A:97:73:1C:79:CF:43:27:A2:CE:BD:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFA45FEF4E6F5320955B10680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 22773 IP address blocks: 68.2.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:fe:f4:e6:f5:32:09:55:b1:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=b0ee1601-3769-4445-aac2-f3ff8ca3e908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:7a:bc:4c:bb:20:e5:21:c7:c2:a8:f2:8f: 71:22:45:1a:5c:b6:94:72:5e:1b:30:78:c9:8c:32: 31:49:f9:a3:f5:aa:27:37:d2:2b:3c:a0:b2:c4:37: fc:69:19:ed:21:9e:02:40:8c:be:71:9e:f1:d6:39: 0c:70:52:e9:92:22:27:2f:c2:ba:bd:e9:c4:30:a0: 69:93:14:1f:60:54:46:47:2f:6f:e4:5a:18:73:4f: 1d:3e:9a:c7:45:c8:69:48:52:37:50:ab:8c:28:45: ef:99:f8:17:dd:ba:28:07:30:53:20:b1:38:a7:91: dd:f8:55:96:3e:9f:a5:0d:52:ed:e7:f2:e1:6f:3f: b2:22:12:62:07:bb:bd:0a:d0:fa:ac:33:bd:da:8c: 6c:e0:52:cd:44:a8:80:8d:a8:de:19:8e:e7:c1:be: 40:99:ab:7a:09:5b:46:0a:7e:52:75:0f:74:f6:42: 28:db:62:95:69:6b:6d:95:64:13:8a:6d:08:96:f3: 80:0f:19:4f:ed:10:f5:2b:d9:16:0a:6f:6e:2a:47: ac:47:24:cb:5e:8c:92:d2:91:fb:47:e9:ad:76:37: 42:6f:08:89:dc:80:46:21:f7:8d:1d:bf:d6:58:3c: 1b:b6:0b:c5:7f:a6:7c:34:1f:07:a7:6c:8b:01:80: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:75:45:1F:F8:B2:D2:5A:97:73:1C:79:CF:43:27:A2:CE:BD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:97:10:a3:e4:ca:53:e9:b7:98:7c:83:7a:3c:f4:82:30:30: fc:2a:48:0a:8a:28:b4:36:cc:20:3b:57:64:4f:a8:21:1b:23: 42:15:b7:67:ca:0b:54:cc:12:89:63:3a:c7:6a:e0:59:85:b1: 16:8d:79:85:98:50:41:74:e2:e8:1f:91:74:0d:ca:7f:02:7f: 8d:80:99:13:b9:ff:8d:7d:2d:84:65:8d:fe:49:d2:d3:5b:f2: ed:8b:56:00:44:28:7d:ec:13:54:03:aa:55:15:7e:1d:5e:29: e6:d3:f8:ad:8a:ac:c1:8d:ce:98:8a:2f:0b:18:55:24:97:f2: 34:a8:ac:d7:52:e7:7c:35:df:f8:e0:86:97:15:3a:bc:0e:3f: 6a:7e:68:02:d9:0d:b2:ae:c5:fa:43:12:75:81:32:3d:2c:4b: d4:dc:03:38:c2:05:68:44:af:f4:cd:1d:0e:0f:13:7f:31:b7: 2c:92:9f:e9:9a:5a:2c:5b:c0:23:e0:5c:a3:66:7c:e5:b7:93: 4a:8f:2d:a0:81:41:72:2b:83:b3:a6:09:d9:3a:17:8a:5c:08: 6f:d5:4e:aa:7b:3a:81:12:6c:83:f2:f2:fd:25:c5:93:9a:26: 26:86:14:0c:0d:28:19:14:da:aa:58:88:30:53:a2:c6:fc:22: ef:4a:a4:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6Rf705vUyCVWxBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk YjBlZTE2MDEtMzc2OS00NDQ1LWFhYzItZjNmZjhjYTNlOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrV6vEy7IOUhx8Ko8o9xIkUaXLaUcl4bMHjJ jDIxSfmj9aonN9IrPKCyxDf8aRntIZ4CQIy+cZ7x1jkMcFLpkiInL8K6venEMKBp kxQfYFRGRy9v5FoYc08dPprHRchpSFI3UKuMKEXvmfgX3booBzBTILE4p5Hd+FWW Pp+lDVLt5/Lhbz+yIhJiB7u9CtD6rDO92oxs4FLNRKiAjajeGY7nwb5Amat6CVtG Cn5SdQ909kIo22KVaWttlWQTim0IlvOADxlP7RD1K9kWCm9uKkesRyTLXoyS0pH7 R+mtdjdCbwiJ3IBGIfeNHb/WWDwbtgvFf6Z8NB8Hp2yLAYCwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9xdUUf+LLSWpdzHHnPQyeizr3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjZlOTJhNTQtYjQ2OS0z OGE4LWFmMTAtZDVmMDFkMGY0Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOXEKPkylPpt5h8g3o89IIwMPwqSAqKKLQ2zCA7V2RPqCEbI0IVt2fK C1TMEoljOsdq4FmFsRaNeYWYUEF04ugfkXQNyn8Cf42AmRO5/419LYRljf5J0tNb 8u2LVgBEKH3sE1QDqlUVfh1eKebT+K2KrMGNzpiKLwsYVSSX8jSorNdS53w13/jg hpcVOrwOP2p+aALZDbKuxfpDEnWBMj0sS9TcAzjCBWhEr/TNHQ4PE38xtyySn+ma WixbwCPgXKNmfOW3k0qPLaCBQXIrg7OmCdk6F4pcCG/VTqp7OoESbIPy8v0lxZOa JiaGFAwNKBkU2qpYiDBTosb8Iu9KpL0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:37 2025 by rpki-client