This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa File: 709e44f1-ab09-32fc-823f-6281d2b7af51.roa (raw, json) Hash identifier: XFUFCYbrTeLkDwWt0VT5Z1Z5twXYrd6LQ9QZB+/g0w0= Subject key identifier: 9F:42:C1:69:66:C9:C3:AB:AA:31:D9:41:4E:E3:AA:01:C8:90:46:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140A06FB28A44B3A36F8880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:a0:6f:b2:8a:44:b3:a3:6f:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=3514c79b-9897-447a-b25f-5c7f0d88e3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:88:9b:b6:b1:d3:00:d3:37:03:81:5c:8d:97: 1c:90:6d:66:7c:c9:51:e1:9f:69:2e:d5:ff:67:e9: 81:1a:a5:56:64:cc:8d:87:64:8b:d0:d2:0c:cd:11: 67:49:e4:a9:cb:a8:fb:65:cb:06:75:4d:4b:86:62: d6:c4:7a:13:b5:56:8e:db:22:9f:2b:92:3d:92:21: 65:1f:43:bc:cb:3f:39:c0:4e:38:68:49:15:f6:f4: 0d:22:47:46:b0:06:e5:a0:b4:c3:95:6e:b5:7a:ec: c8:2d:41:3a:f8:cc:de:f4:51:11:3b:80:12:c8:04: a6:1a:81:6c:86:d3:c2:e4:0e:03:cd:3a:81:45:1d: a2:98:cf:19:2c:ea:e9:dd:3a:2b:54:c2:cf:2e:08: 99:38:ea:f6:1b:15:da:71:58:76:25:09:9a:52:50: cf:bd:f3:bd:61:c9:f8:10:a2:22:37:04:99:d5:5f: e9:85:31:d6:71:73:ba:ab:c4:c9:67:f2:61:8b:05: b5:41:88:6e:59:66:a2:a1:d1:34:46:50:f4:f4:58: 78:bb:87:7d:f3:bb:1e:d9:49:c3:a0:50:78:1e:ed: 19:66:b7:ce:00:84:da:89:c6:71:ec:ee:fb:87:86: d4:36:d7:6e:b8:ad:01:62:84:3d:27:69:42:f0:ea: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:42:C1:69:66:C9:C3:AB:AA:31:D9:41:4E:E3:AA:01:C8:90:46:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ce:b2:cc:54:04:93:ad:d8:6e:f4:92:d6:2a:ed:d2:b0:60: a5:b7:44:f3:91:c1:98:86:d5:74:8f:40:ff:f4:1c:90:6a:7d: b5:51:35:5b:b4:7a:c3:c3:7b:7e:dc:9a:1d:cd:d8:39:30:d0: 69:38:9b:c6:91:45:c1:f2:9b:81:b0:2f:26:8e:48:71:2c:c5: 70:4d:d3:49:73:51:b6:4f:12:24:63:63:20:9d:16:d9:f2:6e: 2c:66:a2:ab:47:21:bb:03:85:51:33:c1:b1:26:74:cc:0e:ae: ff:e7:2f:ed:91:d0:23:e2:6a:1a:8b:86:ec:d6:7e:02:ba:9e: 65:9e:61:3a:a5:fe:8b:60:0f:d9:b7:81:78:9a:11:95:9a:2c: cd:73:37:9c:c6:d9:4f:70:5a:82:4f:01:41:90:d2:ce:c1:cc: ff:81:c5:d3:83:ea:0f:45:ca:b8:73:57:9e:6a:89:0f:b6:db: 62:8b:5a:fe:78:09:84:e6:1b:42:3e:e2:d6:e4:42:99:2d:71: 41:a4:07:54:14:88:cc:7f:a7:1a:38:34:bc:36:24:6d:7e:7a: ea:e1:f3:19:54:88:df:dd:eb:e9:6e:8a:e5:de:1f:de:1d:8f: 5e:8a:a2:e5:d7:0c:72:e0:0d:26:4b:81:fb:e5:0e:7b:a1:f8: e0:a5:6d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQKBvsopEs6NviIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MzUxNGM3OWItOTg5Ny00NDdhLWIyNWYtNWM3ZjBkODhlM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64ibtrHTANM3A4FcjZcckG1mfMlR4Z9pLtX/ Z+mBGqVWZMyNh2SL0NIMzRFnSeSpy6j7ZcsGdU1LhmLWxHoTtVaO2yKfK5I9kiFl H0O8yz85wE44aEkV9vQNIkdGsAbloLTDlW61euzILUE6+Mze9FERO4ASyASmGoFs htPC5A4DzTqBRR2imM8ZLOrp3TorVMLPLgiZOOr2GxXacVh2JQmaUlDPvfO9Ycn4 EKIiNwSZ1V/phTHWcXO6q8TJZ/JhiwW1QYhuWWaiodE0RlD09Fh4u4d987se2UnD oFB4Hu0ZZrfOAITaicZx7O77h4bUNtduuK0BYoQ9J2lC8Oq/RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9CwWlmycOrqjHZQU7jqgHIkEaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA5ZTQ0ZjEtYWIwOS0z MmZjLTgyM2YtNjI4MWQyYjdhZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPOssxUBJOt2G70ktYq7dKwYKW3RPORwZiG1XSPQP/0HJBqfbVRNVu0 esPDe37cmh3N2Dkw0Gk4m8aRRcHym4GwLyaOSHEsxXBN00lzUbZPEiRjYyCdFtny bixmoqtHIbsDhVEzwbEmdMwOrv/nL+2R0CPiahqLhuzWfgK6nmWeYTql/otgD9m3 gXiaEZWaLM1zN5zG2U9wWoJPAUGQ0s7BzP+BxdOD6g9FyrhzV55qiQ+222KLWv54 CYTmG0I+4tbkQpktcUGkB1QUiMx/pxo4NLw2JG1+eurh8xlUiN/d6+luiuXeH94d j16KouXXDHLgDSZLgfvlDnuh+OClbXc= -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:00 2025 by rpki-client