This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/692e47ab-369a-3c70-a357-e25d84595760.roa File: 692e47ab-369a-3c70-a357-e25d84595760.roa (raw, json) Hash identifier: NS4shmVmyQU+3zq+RyOxLagLjsE7J6vfXfY3bacdxz0= Subject key identifier: 52:18:54:6C:5B:83:85:6E:50:EA:B2:86:88:D0:C0:D2:24:AF:90:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5667137B27BB28900C1A2D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/692e47ab-369a-3c70-a357-e25d84595760.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.8.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:13:7b:27:bb:28:90:0c:1a:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=b38e9e6f-cecc-4bf9-8684-c1b4e4d42ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:ed:4c:7f:fc:34:d2:3b:e4:65:11:d8:83: b7:01:e4:94:93:ce:7a:9f:c1:7b:df:cf:09:f4:a5: 72:3a:c6:a2:aa:de:6f:ae:1a:45:60:e4:df:97:2d: 9f:b5:22:07:6c:6a:e5:43:17:58:02:80:74:f4:18: 35:63:59:5f:5d:a2:83:97:3f:20:ec:6b:17:2b:14: 0a:6a:da:16:24:11:66:77:5f:a0:55:0d:34:cc:06: ef:c6:1c:c9:7d:31:c1:9f:e5:8d:59:b0:2f:78:7b: 17:76:97:51:bc:6a:55:b3:85:bb:ca:4f:50:2c:aa: d4:13:75:c3:61:0c:2b:8d:6c:05:c8:b9:c1:78:08: 0e:c2:6e:41:8f:a5:11:2d:5b:1e:cb:ad:ed:ae:64: 91:8b:d0:6b:84:d2:ed:77:3b:25:07:d0:1b:ee:78: e3:d0:01:60:6c:29:d9:8e:7c:31:03:f4:a3:0b:92: 1b:11:8d:5a:ed:62:21:ad:b5:0e:c5:70:49:a8:73: d9:ab:98:8e:2d:90:6a:ff:d7:8b:65:16:ae:4c:2a: bf:5a:9c:f8:49:72:6c:85:bc:b4:a5:79:f8:c1:ad: 2e:9a:7d:e1:a1:d1:f9:23:92:0f:72:da:61:9a:99: 38:77:e1:56:34:d8:61:94:6e:39:b0:e4:92:f9:cb: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:54:6C:5B:83:85:6E:50:EA:B2:86:88:D0:C0:D2:24:AF:90:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/692e47ab-369a-3c70-a357-e25d84595760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:11:19:57:e4:4d:36:15:5a:ec:15:f0:b7:c4:d5:0a:40:5e: 8f:e8:48:67:d8:81:b4:71:9c:2c:7d:80:f9:2a:bf:11:ae:f8: ec:86:3f:2e:68:e4:91:53:f7:06:9a:67:ce:0a:ad:46:b0:1b: cb:97:90:c9:11:15:b5:68:be:b8:bb:e3:5e:55:4b:b2:d0:c2: bc:40:a3:34:4a:02:62:06:e8:b3:b0:0b:97:eb:71:87:06:aa: ae:68:3e:03:5e:31:2d:32:e1:a4:78:56:57:9c:0e:f7:40:22: 69:24:b6:9d:5c:91:4c:35:9d:09:5c:b5:92:0b:ad:f9:65:43: ec:50:7b:58:49:1c:40:3d:71:c5:aa:58:3a:0f:60:4d:6d:68: b3:9d:aa:17:fd:47:39:44:6e:f3:1c:e6:84:0b:38:aa:89:5b: af:d0:10:a8:01:7b:81:4c:b4:d1:03:7b:f7:8f:d6:69:3a:9d: 54:04:1b:3c:4c:03:61:11:57:e8:55:66:33:7d:54:65:92:c1: 31:ff:46:1e:54:28:5a:b6:38:a4:3c:b3:bb:19:c2:01:44:e2: d4:95:ee:8a:34:a0:0d:33:0d:e6:66:8f:85:c3:b3:04:bc:f8: e3:a8:1d:4e:fc:53:3b:ce:d2:9c:ee:eb:27:5f:8c:08:9f:c1: d3:64:4e:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZxN7J7sokAwaLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YjM4ZTllNmYtY2VjYy00YmY5LTg2ODQtYzFiNGU0ZDQyYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT7tTH/8NNI75GUR2IO3AeSUk856n8F7388J 9KVyOsaiqt5vrhpFYOTfly2ftSIHbGrlQxdYAoB09Bg1Y1lfXaKDlz8g7GsXKxQK atoWJBFmd1+gVQ00zAbvxhzJfTHBn+WNWbAveHsXdpdRvGpVs4W7yk9QLKrUE3XD YQwrjWwFyLnBeAgOwm5Bj6URLVsey63trmSRi9BrhNLtdzslB9Ab7njj0AFgbCnZ jnwxA/SjC5IbEY1a7WIhrbUOxXBJqHPZq5iOLZBq/9eLZRauTCq/Wpz4SXJshby0 pXn4wa0umn3hodH5I5IPctphmpk4d+FWNNhhlG45sOSS+cv/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIYVGxbg4VuUOqyhojQwNIkr5A1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjkyZTQ3YWItMzY5YS0z YzcwLWEzNTctZTI1ZDg0NTk1NzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIRGVfkTTYVWuwV8LfE1QpAXo/oSGfYgbRxnCx9gPkqvxGu+OyGPy5o 5JFT9waaZ84KrUawG8uXkMkRFbVovri7415VS7LQwrxAozRKAmIG6LOwC5frcYcG qq5oPgNeMS0y4aR4VlecDvdAImkktp1ckUw1nQlctZILrfllQ+xQe1hJHEA9ccWq WDoPYE1taLOdqhf9RzlEbvMc5oQLOKqJW6/QEKgBe4FMtNEDe/eP1mk6nVQEGzxM A2ERV+hVZjN9VGWSwTH/Rh5UKFq2OKQ8s7sZwgFE4tSV7oo0oA0zDeZmj4XDswS8 +OOoHU78UzvO0pzu6ydfjAifwdNkThs= -----END CERTIFICATE-----Generated at Sun Jan 25 09:30:36 2026 by rpki-client