This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fb17a60-cb64-3953-bc1d-f12340efd979.roa File: 7fb17a60-cb64-3953-bc1d-f12340efd979.roa (raw, json) Hash identifier: AvKc1GyVOjaKKzDahIjVPA22yF14EaEYasZh0vZ4Gw4= Subject key identifier: 9E:64:41:3F:21:8E:A3:7B:B9:AA:CB:1D:E4:F9:21:7C:14:41:DC:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666DA1470A4654E02E46F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fb17a60-cb64-3953-bc1d-f12340efd979.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.1.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:da:14:70:a4:65:4e:02:e4:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=f8a9ef86-cc85-47f3-ac41-f0b5ee3cb7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:b5:df:d1:ee:11:3c:74:1d:f3:c2:00:60: 45:cc:f8:0a:79:0f:bb:95:30:24:2a:bc:a2:55:b7: 5e:ca:36:c6:21:18:92:86:75:2f:45:9e:6c:36:0b: bb:99:f4:3a:9f:db:d2:df:e9:3f:0a:fc:66:d2:32: 92:1b:36:ed:76:88:63:b0:f4:05:d2:fe:c4:50:ea: 57:ac:f7:e6:ec:18:5f:b3:6e:a3:02:4e:98:f4:2c: a7:d0:c7:3b:42:2b:48:c5:88:8c:46:06:01:a8:91: fd:6c:a2:f4:a6:a1:05:b4:0e:8d:6a:6c:46:8e:25: 50:83:a9:0c:ec:c8:35:78:01:2a:6e:11:f5:9d:95: 45:a8:47:4e:b7:8f:5f:d1:7a:11:dd:94:6f:38:ca: ae:84:e4:de:60:2b:e1:8f:bd:96:d8:e3:f9:13:f7: 31:f4:70:e2:4f:6b:22:9a:77:b9:cd:92:a8:c5:91: d4:92:55:d5:f3:54:e9:22:11:3f:a0:bc:49:88:df: 08:7c:df:fe:92:8d:c6:fe:ee:5b:62:4a:8d:94:ec: 4a:cc:33:9c:37:92:f2:c2:aa:4b:3d:8c:aa:64:82: 3b:b5:21:f7:17:f4:41:51:36:1c:68:d6:3f:de:71: 17:f1:b4:0f:ae:b5:87:55:00:22:6a:49:98:5f:6d: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:64:41:3F:21:8E:A3:7B:B9:AA:CB:1D:E4:F9:21:7C:14:41:DC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fb17a60-cb64-3953-bc1d-f12340efd979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9f:4e:74:f4:07:2c:e5:26:84:67:9e:f1:0e:bd:c6:a8:6a: cd:bd:15:21:b3:f0:81:87:2f:aa:6a:12:01:53:2e:2a:0a:2c: 71:0f:45:d6:05:48:f1:3c:ce:22:08:42:26:b0:98:8e:a1:dd: fd:b9:6b:c7:d0:81:b5:b4:91:cd:dc:14:43:01:4f:a2:af:d0: 9b:60:69:12:fa:8e:46:5c:4e:9e:95:49:05:0a:0f:1a:14:88: 21:2a:10:2f:56:c3:be:07:d0:71:59:2e:ed:80:c6:cc:19:68: 96:bf:9f:aa:51:f5:03:9f:63:84:eb:02:52:b3:3d:4b:5d:4e: 67:84:2f:c2:01:6f:bd:b3:9b:3b:0f:79:b1:61:8c:df:67:f6: 5b:e0:21:7b:41:ff:a7:4b:3e:3d:ee:e7:08:7b:14:92:6e:01: 7e:e2:5d:35:29:be:91:22:6e:3b:a9:f2:eb:00:d4:08:af:62: b7:0d:a3:db:48:08:8b:6b:de:9f:9f:10:4d:e9:a7:27:0c:09: f9:1d:1b:63:67:63:45:1d:3a:f6:ea:d6:bf:21:16:95:3a:1e: e1:90:2e:75:8c:45:a7:eb:28:18:f5:75:95:2a:50:7f:49:1e: 04:b0:8b:36:a1:31:84:00:d9:14:68:66:1f:06:41:a3:da:e1: 8b:c2:fc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZtoUcKRlTgLkbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZjhhOWVmODYtY2M4NS00N2YzLWFjNDEtZjBiNWVlM2NiN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEa139HuETx0HfPCAGBFzPgKeQ+7lTAkKryi VbdeyjbGIRiShnUvRZ5sNgu7mfQ6n9vS3+k/Cvxm0jKSGzbtdohjsPQF0v7EUOpX rPfm7Bhfs26jAk6Y9Cyn0Mc7QitIxYiMRgYBqJH9bKL0pqEFtA6NamxGjiVQg6kM 7Mg1eAEqbhH1nZVFqEdOt49f0XoR3ZRvOMquhOTeYCvhj72W2OP5E/cx9HDiT2si mne5zZKoxZHUklXV81TpIhE/oLxJiN8IfN/+ko3G/u5bYkqNlOxKzDOcN5LywqpL PYyqZII7tSH3F/RBUTYcaNY/3nEX8bQPrrWHVQAiakmYX22IxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5kQT8hjqN7uarLHeT5IXwUQdzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2ZiMTdhNjAtY2I2NC0z OTUzLWJjMWQtZjEyMzQwZWZkOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyfTnT0ByzlJoRnnvEOvcaoas29FSGz8IGHL6pqEgFTLioKLHEPRdYF SPE8ziIIQiawmI6h3f25a8fQgbW0kc3cFEMBT6Kv0JtgaRL6jkZcTp6VSQUKDxoU iCEqEC9Ww74H0HFZLu2AxswZaJa/n6pR9QOfY4TrAlKzPUtdTmeEL8IBb72zmzsP ebFhjN9n9lvgIXtB/6dLPj3u5wh7FJJuAX7iXTUpvpEibjup8usA1AivYrcNo9tI CItr3p+fEE3ppycMCfkdG2NnY0UdOvbq1r8hFpU6HuGQLnWMRafrKBj1dZUqUH9J HgSwizahMYQA2RRoZh8GQaPa4YvC/DA= -----END CERTIFICATE-----Generated at Sun Jan 25 09:42:22 2026 by rpki-client