This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71a64fa0-def1-303a-aa01-d48f6ef7b967.roa File: 71a64fa0-def1-303a-aa01-d48f6ef7b967.roa (raw, json) Hash identifier: TfvTvmonjLOXktCF0zVKwvN/+9qd/kVOoKeQF/fyHn8= Subject key identifier: B4:A0:11:AC:E3:35:C8:C6:AC:C2:CA:9D:D7:82:C2:87:D9:A7:B2:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C539BDBAED80C9EDDBDBFC8E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71a64fa0-def1-303a-aa01-d48f6ef7b967.roa Signing time: Sat 27 Dec 2025 14:00:38 +0000 ROA not before: Sat 27 Dec 2025 14:00:38 +0000 ROA not after: Fri 27 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 2001:578:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:53:9b:db:ae:d8:0c:9e:dd:bd:bf:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 27 14:00:38 2025 GMT Not After : Mar 27 13:00:38 2026 GMT Subject: CN=68d26ff9-aa5f-461d-b6fd-7503cb4a48fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3e:da:a8:8e:14:ba:ec:11:d6:b2:d0:7e:f9: 97:31:87:0c:27:89:29:1e:be:b9:2d:d4:79:a9:ea: a7:ef:3d:ca:9c:05:35:2e:9e:a6:ce:db:34:04:e4: 2f:b6:bb:4f:bd:6c:ef:0a:48:aa:67:f2:d0:37:61: b1:1b:97:dc:84:3e:36:bd:8d:e0:27:f5:09:ad:e4: ef:a3:74:bd:91:01:0d:16:08:92:6e:0e:f5:81:d7: 21:47:fb:c3:5e:92:9d:21:c9:2c:f1:df:41:12:dc: 08:f2:2c:08:22:06:07:57:06:ec:1b:77:37:37:ec: f7:34:3a:36:77:3e:a8:c5:4d:a2:83:35:98:2d:c8: d6:21:21:38:00:a7:0e:66:4c:63:1e:57:7e:15:0f: 33:9e:b6:5a:33:20:36:79:d0:79:cd:19:25:ad:47: 80:cc:a5:8d:00:21:7e:9b:89:2e:df:7e:92:09:d1: 57:d5:b6:0e:87:32:21:5c:f8:14:a7:dd:ff:b3:73: d7:f3:84:29:e9:b9:f4:6b:6a:f4:93:3d:b5:bc:26: 65:c0:c5:02:d9:a0:06:5b:fc:4a:7a:38:3e:14:1d: 7d:d7:fe:a5:9e:1f:c6:67:ec:5e:3b:47:0c:9f:c1: 22:7a:da:e5:20:d1:92:23:62:82:61:30:74:ee:a5: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A0:11:AC:E3:35:C8:C6:AC:C2:CA:9D:D7:82:C2:87:D9:A7:B2:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71a64fa0-def1-303a-aa01-d48f6ef7b967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f7:04:1e:31:97:b5:40:df:b6:07:d3:3d:88:cf:50:d0:78: 2a:4c:29:11:2a:ae:99:50:41:6f:d9:c2:69:a7:27:e3:d2:50: ea:8d:2c:80:5e:19:43:d7:d1:78:33:04:f5:97:36:00:51:a0: fa:e7:8c:05:2f:22:91:4e:7a:b7:dd:89:44:f6:07:6a:0d:da: 11:bf:64:7d:2e:74:da:0f:ca:4a:6b:5e:4d:05:c7:80:4b:92: 77:d5:15:6b:32:18:81:c9:66:f8:de:2f:39:3f:53:09:14:23: de:cd:02:91:5b:8f:33:1a:d1:fb:71:88:af:68:71:67:ea:c4: 69:c9:92:d8:78:bc:a4:e7:a6:39:b4:bd:39:30:92:8f:75:65: cf:ad:26:c5:ff:df:8a:02:b7:b4:6b:5c:21:1d:68:3d:72:8c: 28:bd:46:72:b9:d5:12:43:03:f4:f0:87:8a:53:25:5d:af:e2: 20:14:5f:1b:53:08:62:90:8d:9b:4d:11:56:d6:fd:2c:a5:3d: f2:8d:f9:d0:fa:48:2f:9b:25:1f:45:20:06:07:6b:92:a0:db: 64:02:c9:49:00:35:75:0b:89:7a:73:52:5f:78:b2:7b:9e:c6: a3:ba:9a:db:0d:d9:66:46:71:d7:d5:70:1e:68:b2:e2:4e:78: b8:e8:c1:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExTm9uu2Aye3b2/yOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyNzE0MDAzOFoXDTI2MDMyNzEzMDAzOFowLzEtMCsGA1UEAxMk NjhkMjZmZjktYWE1Zi00NjFkLWI2ZmQtNzUwM2NiNGE0OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D7aqI4UuuwR1rLQfvmXMYcMJ4kpHr65LdR5 qeqn7z3KnAU1Lp6mzts0BOQvtrtPvWzvCkiqZ/LQN2GxG5fchD42vY3gJ/UJreTv o3S9kQENFgiSbg71gdchR/vDXpKdIcks8d9BEtwI8iwIIgYHVwbsG3c3N+z3NDo2 dz6oxU2igzWYLcjWISE4AKcOZkxjHld+FQ8znrZaMyA2edB5zRklrUeAzKWNACF+ m4ku336SCdFX1bYOhzIhXPgUp93/s3PX84Qp6bn0a2r0kz21vCZlwMUC2aAGW/xK ejg+FB191/6lnh/GZ+xeO0cMn8EietrlINGSI2KCYTB07qU0IwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLSgEazjNcjGrMLKndeCwofZp7L2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzFhNjRmYTAtZGVmMS0z MDNhLWFhMDEtZDQ4ZjZlZjdiOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFeIgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARPcEHjGXtUDftgfTPYjPUNB4KkwpESqumVBBb9nCaacn49JQ6o0s gF4ZQ9fReDME9Zc2AFGg+ueMBS8ikU56t92JRPYHag3aEb9kfS502g/KSmteTQXH gEuSd9UVazIYgclm+N4vOT9TCRQj3s0CkVuPMxrR+3GIr2hxZ+rEacmS2Hi8pOem ObS9OTCSj3Vlz60mxf/figK3tGtcIR1oPXKMKL1GcrnVEkMD9PCHilMlXa/iIBRf G1MIYpCNm00RVtb9LKU98o350PpIL5slH0UgBgdrkqDbZALJSQA1dQuJenNSX3iy e57Go7qa2w3ZZkZx19VwHmiy4k54uOjBZA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:32:29 2026 by rpki-client