This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85cf2212-0468-3fd0-a7ed-b3de0f9b5ad4.roa File: 85cf2212-0468-3fd0-a7ed-b3de0f9b5ad4.roa (raw, json) Hash identifier: OlX4M0TdVIaj9nBQbIqwdxHQACQKPqcHCXNkxnAhweY= Subject key identifier: B0:CE:87:05:4F:45:05:53:6E:83:4F:83:81:AB:2E:40:66:36:A9:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666A3B08B3C90905CEAE550 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85cf2212-0468-3fd0-a7ed-b3de0f9b5ad4.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.10.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:a3:b0:8b:3c:90:90:5c:ea:e5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=e0ecef96-f75a-4dd4-ac66-ecb94da39ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cc:55:f5:ab:52:75:01:47:cf:de:d2:dd:51: 65:1a:c8:03:d4:21:ff:fe:12:65:70:f6:3f:85:af: bf:ed:85:bc:d1:4a:ed:99:fc:22:b4:f5:20:8e:56: d8:c7:0c:8a:5e:fc:ef:c1:53:d0:9f:1b:cd:aa:6b: 6b:56:67:46:d9:44:5e:c6:de:c8:66:a5:cd:22:26: 65:5a:47:1c:24:5f:ca:f1:11:a7:c4:3e:92:32:26: 87:0c:6c:76:1f:66:a5:b8:6e:0e:53:a9:61:7d:b0: 4c:85:1a:67:da:fd:db:31:b7:0b:bd:25:ce:fa:b6: 84:87:36:ac:39:3d:39:94:83:1a:84:67:39:31:12: 30:ff:0c:78:c8:d0:bd:ac:de:a1:d4:31:3c:a7:0b: 1a:05:b5:93:57:c7:94:f2:e5:4d:b2:9b:42:9b:8f: ff:27:c7:a1:29:ec:2a:83:fd:23:fa:62:8e:94:92: 14:bf:c1:65:ee:15:09:08:f1:a7:ae:82:ef:07:01: d0:bf:db:04:b5:c8:90:08:d1:1f:94:67:1c:73:4c: 03:d3:20:f5:3c:0b:16:fc:fd:16:87:4a:3e:2a:e9: 7a:bb:cb:82:67:a8:70:7b:3e:16:59:98:b3:fc:1e: 89:b5:b7:1f:90:6a:48:6d:57:ce:f2:b8:68:5e:e2: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:87:05:4F:45:05:53:6E:83:4F:83:81:AB:2E:40:66:36:A9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85cf2212-0468-3fd0-a7ed-b3de0f9b5ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:46:a5:25:47:07:3b:10:e5:69:b0:32:e4:3e:87:0b:27:b1: be:74:f5:f7:b3:81:e2:cd:26:fc:c7:9e:12:17:5c:dd:25:8f: 3c:d0:69:53:b8:c0:02:3a:d9:f0:fe:f3:e4:99:26:ff:af:bf: 52:df:96:b3:b2:84:d7:da:17:88:ce:19:63:03:b9:b5:1e:c6: 5c:e2:85:aa:e8:dc:89:ff:96:df:2b:0e:7a:27:77:77:ae:37: d8:74:da:71:a3:d6:52:83:f9:30:2a:c2:a6:02:9d:83:92:11: 48:82:0e:1b:b5:5e:a2:a7:df:f9:ad:89:37:cf:09:2a:93:3e: e8:3b:4b:9f:bd:7f:96:5b:e2:d9:a3:04:85:f6:18:38:1a:ad: 4e:77:10:ec:cb:94:08:5c:a7:65:68:65:c7:66:b0:37:50:c7: 37:89:0d:b9:e7:8e:c6:ad:14:2d:34:ef:73:62:8c:8d:27:fb: 01:9c:50:5b:02:ba:63:6b:08:fa:0f:a2:f2:52:a8:fc:f3:e1: d5:a5:dc:a5:79:6b:f7:a0:ff:d0:bb:1e:f2:37:6a:d0:02:5d: 5b:df:1a:bf:60:fc:74:7f:5b:48:b3:0a:23:67:72:ea:cc:7a: d4:fa:39:ff:67:cb:59:da:69:28:55:d2:1a:3c:7c:9d:01:bf: 7a:47:74:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZqOwizyQkFzq5VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZTBlY2VmOTYtZjc1YS00ZGQ0LWFjNjYtZWNiOTRkYTM5ZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8xV9atSdQFHz97S3VFlGsgD1CH//hJlcPY/ ha+/7YW80UrtmfwitPUgjlbYxwyKXvzvwVPQnxvNqmtrVmdG2URext7IZqXNIiZl WkccJF/K8RGnxD6SMiaHDGx2H2aluG4OU6lhfbBMhRpn2v3bMbcLvSXO+raEhzas OT05lIMahGc5MRIw/wx4yNC9rN6h1DE8pwsaBbWTV8eU8uVNsptCm4//J8ehKewq g/0j+mKOlJIUv8Fl7hUJCPGnroLvBwHQv9sEtciQCNEflGccc0wD0yD1PAsW/P0W h0o+Kul6u8uCZ6hwez4WWZiz/B6JtbcfkGpIbVfO8rhoXuLwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDOhwVPRQVTboNPg4GrLkBmNqkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODVjZjIyMTItMDQ2OC0z ZmQwLWE3ZWQtYjNkZTBmOWI1YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJGpSVHBzsQ5WmwMuQ+hwsnsb509fezgeLNJvzHnhIXXN0ljzzQaVO4 wAI62fD+8+SZJv+vv1LflrOyhNfaF4jOGWMDubUexlziharo3In/lt8rDnond3eu N9h02nGj1lKD+TAqwqYCnYOSEUiCDhu1XqKn3/mtiTfPCSqTPug7S5+9f5Zb4tmj BIX2GDgarU53EOzLlAhcp2VoZcdmsDdQxzeJDbnnjsatFC0073NijI0n+wGcUFsC umNrCPoPovJSqPzz4dWl3KV5a/eg/9C7HvI3atACXVvfGr9g/HR/W0izCiNncurM etT6Of9ny1naaShV0ho8fJ0Bv3pHdB4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:54:44 2026 by rpki-client