This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88d6dac5-ce21-33e6-9682-3c14a0826cb9.roa File: 88d6dac5-ce21-33e6-9682-3c14a0826cb9.roa (raw, json) Hash identifier: pa4qA4FWagJ5rK/EljbqJXCBjYu+B4j/SuBYnzhpEYE= Subject key identifier: AC:F5:58:2E:EF:BF:0D:3F:F7:3E:92:97:42:47:AA:D4:D0:7C:45:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140C36E6C2276E43DA91760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88d6dac5-ce21-33e6-9682-3c14a0826cb9.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.224.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:c3:6e:6c:22:76:e4:3d:a9:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=652e53fb-e3ae-4253-b977-869102eee61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:71:9c:bd:fe:4d:4c:3d:eb:63:47:0e:f3: b3:18:71:09:54:25:f7:b6:5a:a8:70:34:af:f0:af: 5c:22:d1:a7:4c:1c:4e:be:b3:48:07:30:14:25:a9: d9:2c:37:81:3e:6f:98:e5:38:40:1d:bb:ee:2e:47: 80:98:fb:8b:39:d6:89:48:94:a3:ef:7f:be:5e:70: a9:bd:a7:96:fb:d9:aa:c0:19:23:db:e2:9d:a4:dd: 23:74:32:ee:c6:4c:c0:85:54:e3:92:f3:45:f4:7f: 8b:10:aa:ad:db:3d:f6:6c:da:f2:82:68:e1:5b:ca: c8:4e:ff:ba:4e:df:9d:80:28:f9:ee:d1:c2:0b:93: 32:1a:c8:6b:5c:8d:47:b8:af:ab:c9:d1:51:9c:30: c8:f5:f3:e9:9a:85:42:77:99:46:f1:f2:3c:a1:b0: 00:83:fe:38:cc:cd:41:30:e7:c9:fb:cf:05:ea:c4: a8:df:27:d6:78:6e:2b:b5:ae:1e:9c:79:8b:9d:96: a8:b8:8a:d8:aa:5d:33:ad:00:d6:84:60:12:de:51: 58:ff:d4:ce:72:4c:ac:ae:25:78:4d:a4:53:31:d2: 77:d6:a5:2a:1e:da:a8:20:02:73:ea:7f:6d:a3:1b: 32:ab:f3:20:1e:21:ba:9b:e6:79:95:ed:c5:05:7a: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:58:2E:EF:BF:0D:3F:F7:3E:92:97:42:47:AA:D4:D0:7C:45:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88d6dac5-ce21-33e6-9682-3c14a0826cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:92:2c:30:ad:91:d5:27:43:b7:9a:f2:18:a5:d4:3c:00:a2: 09:8c:a9:21:9f:da:b1:ad:29:ea:75:83:fd:0f:45:7a:5b:94: 42:06:0b:45:36:24:0a:cd:20:43:1f:cb:fa:10:f0:91:78:da: f4:ce:d6:44:6f:d3:c7:ef:a2:af:8e:35:b5:e3:a4:2e:d6:a3: eb:6d:a1:06:fc:ba:de:de:67:a9:75:cc:ec:3f:f8:3e:49:81: ab:2e:7b:66:a9:1c:79:fd:96:82:5c:fb:00:b6:9c:9a:d1:2f: fc:7a:60:52:db:15:a7:4f:e0:f3:e1:ed:34:fa:f6:3c:4f:17: 92:85:ad:9c:12:0c:b8:0c:e6:01:e1:45:dc:45:12:7c:79:b5: 0e:f0:3d:6a:ec:69:13:a8:f6:e2:08:9f:f5:77:9d:25:35:7d: ad:60:b2:f3:34:1e:44:07:fd:28:9c:91:93:69:57:d3:66:9a: 95:cd:b6:9c:d2:24:1f:ab:6d:8d:a4:d8:db:2b:f2:f7:80:c7: e7:68:94:5a:89:f9:29:41:a2:87:a4:ca:02:51:ae:32:25:bb: 1e:63:e9:04:2f:e5:cc:f6:e9:68:c2:2b:6c:c1:c7:08:35:3c: 82:a7:22:24:6d:04:7d:55:7f:a2:6f:fb:86:d9:21:e4:45:dd: c5:90:f9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQMNubCJ25D2pF2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk NjUyZTUzZmItZTNhZS00MjUzLWI5NzctODY5MTAyZWVlNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eBxnL3+TUw962NHDvOzGHEJVCX3tlqocDSv 8K9cItGnTBxOvrNIBzAUJanZLDeBPm+Y5ThAHbvuLkeAmPuLOdaJSJSj73++XnCp vaeW+9mqwBkj2+KdpN0jdDLuxkzAhVTjkvNF9H+LEKqt2z32bNrygmjhW8rITv+6 Tt+dgCj57tHCC5MyGshrXI1HuK+rydFRnDDI9fPpmoVCd5lG8fI8obAAg/44zM1B MOfJ+88F6sSo3yfWeG4rta4enHmLnZaouIrYql0zrQDWhGAS3lFY/9TOckysriV4 TaRTMdJ31qUqHtqoIAJz6n9toxsyq/MgHiG6m+Z5le3FBXov4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz1WC7vvw0/9z6Sl0JHqtTQfEXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODhkNmRhYzUtY2UyMS0z M2U2LTk2ODItM2MxNGEwODI2Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARODzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuSLDCtkdUnQ7ea8hil1DwAogmMqSGf2rGtKep1g/0PRXpblEIGC0U2 JArNIEMfy/oQ8JF42vTO1kRv08fvoq+ONbXjpC7Wo+ttoQb8ut7eZ6l1zOw/+D5J gasue2apHHn9loJc+wC2nJrRL/x6YFLbFadP4PPh7TT69jxPF5KFrZwSDLgM5gHh RdxFEnx5tQ7wPWrsaROo9uIIn/V3nSU1fa1gsvM0HkQH/SickZNpV9NmmpXNtpzS JB+rbY2k2Nsr8veAx+dolFqJ+SlBooekygJRrjIlux5j6QQv5cz26WjCK2zBxwg1 PIKnIiRtBH1Vf6Jv+4bZIeRF3cWQ+Z8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:16 2025 by rpki-client