This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa File: 7a53c42f-d7af-3299-b028-af7e5432e3dd.roa (raw, json) Hash identifier: 212XSUW04NuOqUcFypmYsYirwLl1FC7DsigIsITGYCs= Subject key identifier: C3:D0:08:F2:C7:23:66:9F:48:1B:D8:4B:91:5E:A0:5F:75:17:1E:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10B99B01750CAD80799E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:b9:9b:01:75:0c:ad:80:79:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=ddafc558-49e0-495a-8e19-e067ac8ab9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c0:3a:a0:3a:62:50:dd:06:7f:fd:cd:44:d6: 9d:7e:65:79:5a:7c:76:71:45:52:bc:c6:bd:62:f5: cd:f3:ad:37:b1:e3:74:3a:df:23:50:3f:85:db:a8: d0:82:be:33:84:45:7a:1c:a2:db:50:41:7f:1f:b1: ef:ba:8b:c5:6d:98:4e:9b:2a:17:cf:26:fb:7a:f3: 79:61:fa:4a:19:84:69:be:a3:b7:0d:df:4d:86:a1: b4:2e:a7:5a:58:64:9b:e8:e9:99:1b:03:5b:1c:e9: 39:38:3d:0f:38:ff:cc:77:00:21:e1:61:20:c2:08: 4e:d3:eb:14:32:7e:fe:d1:ee:72:86:65:85:3e:d8: 1a:53:4f:e5:0b:9d:72:ca:c4:a6:ab:be:d0:ef:c1: bc:d1:32:ff:ee:5e:73:2e:8a:4e:75:3b:71:5f:da: 6b:21:2b:ba:5f:00:2d:b8:68:75:e2:ae:64:77:3a: 9a:3c:c6:02:36:96:59:98:9d:54:21:8c:c8:c3:84: 03:06:2e:95:a8:24:8c:0d:ee:17:a4:29:8d:4a:bb: b4:f9:74:62:8f:dd:54:a7:c2:07:2f:1b:ea:fa:33: 63:bf:83:64:e2:6f:62:7e:08:b9:8f:43:7b:22:88: ab:9e:36:ed:24:59:2f:82:2e:ce:2d:46:02:a6:0e: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:08:F2:C7:23:66:9F:48:1B:D8:4B:91:5E:A0:5F:75:17:1E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c6:07:e1:f9:1c:be:0c:c1:22:13:5b:2a:3e:ea:62:4e:da: 0b:a6:46:e4:1c:b4:69:7e:cf:aa:5b:c1:76:ad:79:20:f3:71: 8b:8a:ee:6a:45:1f:e7:bc:ef:72:df:6a:ef:f0:c0:0e:1c:5b: 7a:e0:fc:be:3e:1b:15:1a:03:dc:c7:96:36:f0:49:0d:97:7b: c1:20:f2:f6:50:f7:b0:87:37:51:4c:4a:11:5a:f9:ba:4d:f3: 32:3c:28:69:9a:06:e5:72:68:33:8f:ff:54:fa:ee:94:84:bc: e4:54:28:ee:a5:40:be:35:f6:22:38:4a:3f:0c:af:bc:a1:f4: cd:fd:98:d0:bd:e6:51:2c:95:83:83:84:c4:aa:58:7c:0d:47: 1f:f3:4c:05:71:b6:fc:5e:45:85:3d:51:b0:b5:19:6d:50:44: 05:67:63:31:f4:3d:3b:cd:7b:21:87:7a:bb:ae:92:d7:10:a3: 98:ba:ef:db:ab:48:69:6c:bb:b3:2c:7e:21:83:6e:69:4e:c8: a7:79:a1:14:88:35:ba:e2:45:3f:34:53:f8:b4:43:a4:77:ff: 81:0c:48:c0:f2:93:9f:25:96:4f:85:1e:cd:8a:ff:c6:28:76: 19:c9:67:c0:08:73:33:07:ea:0b:f6:e1:25:dd:3b:27:7c:d9: 5e:ec:d5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELmbAXUMrYB5nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk ZGRhZmM1NTgtNDllMC00OTVhLThlMTktZTA2N2FjOGFiOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8A6oDpiUN0Gf/3NRNadfmV5Wnx2cUVSvMa9 YvXN8603seN0Ot8jUD+F26jQgr4zhEV6HKLbUEF/H7HvuovFbZhOmyoXzyb7evN5 YfpKGYRpvqO3Dd9NhqG0LqdaWGSb6OmZGwNbHOk5OD0POP/MdwAh4WEgwghO0+sU Mn7+0e5yhmWFPtgaU0/lC51yysSmq77Q78G80TL/7l5zLopOdTtxX9prISu6XwAt uGh14q5kdzqaPMYCNpZZmJ1UIYzIw4QDBi6VqCSMDe4XpCmNSru0+XRij91Up8IH Lxvq+jNjv4Nk4m9ifgi5j0N7IoirnjbtJFkvgi7OLUYCpg5ovQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPQCPLHI2afSBvYS5FeoF91Fx7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E1M2M0MmYtZDdhZi0z Mjk5LWIwMjgtYWY3ZTU0MzJlM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDGB+H5HL4MwSITWyo+6mJO2gumRuQctGl+z6pbwXateSDzcYuK7mpF H+e873Lfau/wwA4cW3rg/L4+GxUaA9zHljbwSQ2Xe8Eg8vZQ97CHN1FMShFa+bpN 8zI8KGmaBuVyaDOP/1T67pSEvORUKO6lQL419iI4Sj8Mr7yh9M39mNC95lEslYOD hMSqWHwNRx/zTAVxtvxeRYU9UbC1GW1QRAVnYzH0PTvNeyGHeruuktcQo5i679ur SGlsu7MsfiGDbmlOyKd5oRSINbriRT80U/i0Q6R3/4EMSMDyk58llk+FHs2K/8Yo dhnJZ8AIczMH6gv24SXdOyd82V7s1ZY= -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:47 2025 by rpki-client