This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8824ac21-d013-3590-a79b-1276e0e3cf26.roa File: 8824ac21-d013-3590-a79b-1276e0e3cf26.roa (raw, json) Hash identifier: HCACB/4NaOKZJYjyBw4t0YwXql2lPOiW2NKHd7rYeNM= Subject key identifier: 84:F4:28:5E:D0:99:68:5E:23:59:6D:65:7F:F0:B0:71:EB:0F:B0:EE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666F134BB42B0E8C4A54500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8824ac21-d013-3590-a79b-1276e0e3cf26.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.0.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:f1:34:bb:42:b0:e8:c4:a5:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=fbac4afc-648b-4076-851c-c9866b16366a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:ce:99:5d:28:d0:17:58:85:29:ba:7e:a1: be:a6:48:d7:d3:72:db:0e:6a:7b:1d:a6:fa:ba:64: 23:10:30:28:05:92:1d:a7:24:a8:e7:65:39:c3:d2: 24:2d:0f:b8:58:a6:5b:23:00:47:23:b5:d7:52:00: 1d:46:44:63:a5:e0:3d:ec:f5:35:81:51:c1:43:fb: 9c:f3:6f:c7:5d:9f:47:94:f6:26:17:8a:d3:f5:c0: 27:d5:5c:1e:d8:1c:16:f3:e7:f0:2f:92:d5:c9:2c: 35:3d:f7:46:ee:9a:27:05:84:1d:3d:f1:3e:48:b3: 80:da:7a:a5:4a:af:8a:6c:c0:64:6e:6b:e2:01:29: 5d:df:54:7f:8b:f5:3b:05:4a:ca:1a:72:65:97:b8: 68:a0:37:12:37:de:3b:2e:86:ed:c3:af:5b:b2:35: 4c:c3:78:ff:bc:9e:ff:5b:36:b3:25:4b:5f:e4:6d: 5a:3c:5f:42:e0:96:c7:e9:20:f4:47:c3:77:6f:cf: f3:50:6e:38:49:27:82:e4:dd:66:d4:a9:fb:3f:b0: ae:7e:e9:5a:ed:b6:4c:e0:70:f6:ff:c9:22:6a:8c: d2:9e:a2:fe:58:4e:8d:a1:31:55:ef:74:67:0b:27: d7:91:63:8c:5f:9b:9e:e7:f6:89:b8:95:c1:dd:8c: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F4:28:5E:D0:99:68:5E:23:59:6D:65:7F:F0:B0:71:EB:0F:B0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8824ac21-d013-3590-a79b-1276e0e3cf26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:99:43:2d:55:98:87:8a:a3:a3:14:da:9b:bc:35:17:b9:b0: 41:03:55:aa:fb:3b:72:d1:07:ca:3a:9e:24:38:cf:33:26:31: 45:57:2f:e5:ed:82:ed:6b:68:d8:c9:2d:39:cf:6d:3d:a0:b3: cc:40:f9:aa:ad:e5:74:e0:88:06:89:c8:de:a9:6c:64:0a:eb: 54:e7:ca:25:3c:7a:19:ed:01:66:bd:cb:9f:44:ef:07:5e:ac: c9:9d:dd:b0:84:f7:7a:ed:76:ef:15:64:be:2d:28:23:b9:43: cf:b0:3b:b9:1e:5c:a7:46:9d:2b:45:e2:b4:15:3f:e2:04:da: 5a:4e:f7:6b:d7:b2:29:f4:7f:e4:d1:79:93:6c:11:39:cc:08: 45:26:fb:e5:44:5c:d9:1b:3b:47:76:95:e7:16:2b:d5:d1:e2: f3:c7:9d:0c:6b:a4:5c:34:fb:b5:42:62:f5:a4:e0:41:57:ea: 4f:70:d4:90:79:3e:a2:1a:84:a0:14:63:37:9a:07:a0:ce:9f: b9:23:a5:23:e1:c3:18:ed:f6:c3:e7:1d:6c:fb:71:d3:93:49: f7:dc:21:e0:78:8f:f3:47:7f:e8:58:69:e9:1f:42:59:41:96: 28:96:71:67:c7:a3:ad:4c:6a:0a:62:7d:f0:21:de:4b:c9:b0: fe:1f:6f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZvE0u0Kw6MSlRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZmJhYzRhZmMtNjQ4Yi00MDc2LTg1MWMtYzk4NjZiMTYzNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpvOmV0o0BdYhSm6fqG+pkjX03LbDmp7Hab6 umQjEDAoBZIdpySo52U5w9IkLQ+4WKZbIwBHI7XXUgAdRkRjpeA97PU1gVHBQ/uc 82/HXZ9HlPYmF4rT9cAn1Vwe2BwW8+fwL5LVySw1PfdG7ponBYQdPfE+SLOA2nql Sq+KbMBkbmviASld31R/i/U7BUrKGnJll7hooDcSN947Lobtw69bsjVMw3j/vJ7/ WzazJUtf5G1aPF9C4JbH6SD0R8N3b8/zUG44SSeC5N1m1Kn7P7Cufula7bZM4HD2 /8kiaozSnqL+WE6NoTFV73RnCyfXkWOMX5ue5/aJuJXB3Yzh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT0KF7QmWheI1ltZX/wsHHrD7DuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODgyNGFjMjEtZDAxMy0z NTkwLWE3OWItMTI3NmUwZTNjZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiZQy1VmIeKo6MU2pu8NRe5sEEDVar7O3LRB8o6niQ4zzMmMUVXL+Xt gu1raNjJLTnPbT2gs8xA+aqt5XTgiAaJyN6pbGQK61TnyiU8ehntAWa9y59E7wde rMmd3bCE93rtdu8VZL4tKCO5Q8+wO7keXKdGnStF4rQVP+IE2lpO92vXsin0f+TR eZNsETnMCEUm++VEXNkbO0d2lecWK9XR4vPHnQxrpFw0+7VCYvWk4EFX6k9w1JB5 PqIahKAUYzeaB6DOn7kjpSPhwxjt9sPnHWz7cdOTSffcIeB4j/NHf+hYaekfQllB liiWcWfHo61MagpiffAh3kvJsP4fb7M= -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:39 2026 by rpki-client