This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c9d6c53-5ace-328f-b30b-51fbc3ed2a70.roa File: 8c9d6c53-5ace-328f-b30b-51fbc3ed2a70.roa (raw, json) Hash identifier: 6tmKp4gaj3W7OkAn5yi1MH+vOzuoJfCp9QlevWUnbJ4= Subject key identifier: 42:92:40:58:70:46:1D:F9:8D:58:8B:F3:DB:2F:84:CD:27:C8:88:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C566720C451014B533E011180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c9d6c53-5ace-328f-b30b-51fbc3ed2a70.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 70.181.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:20:c4:51:01:4b:53:3e:01:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=b97e5d77-b353-47c7-96f6-2af7a5e35529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:bc:b3:0a:73:f7:4b:2b:fd:da:a8:7e:17: d5:a5:cf:d1:f3:fe:22:c6:c7:83:eb:3b:53:79:89: e4:0e:75:1d:6c:6d:28:95:dc:05:71:42:73:bd:53: 9e:3f:1e:ea:59:5f:fd:c9:39:4e:c6:15:12:d9:bb: a5:ad:95:d3:01:5b:f9:d3:dd:3b:1b:ea:f6:32:da: 40:ad:15:20:94:63:2d:e5:c3:5f:73:70:6b:2f:dc: 98:f3:8b:c0:ba:ab:89:07:43:92:e5:af:45:b2:f1: 3a:96:a6:83:73:13:d3:10:67:40:12:e0:96:69:ff: 04:da:0a:14:bd:e6:82:5f:01:e7:71:e0:4a:dd:7c: 8f:44:2a:15:4e:83:ef:3b:eb:36:aa:b7:7b:1b:f4: 71:c1:90:60:40:66:0c:8a:97:6d:10:05:fa:60:f8: 24:f5:eb:19:b8:af:54:d7:7d:eb:3b:f7:1c:1e:bf: f1:a4:29:5f:6e:85:6b:2b:1e:42:3a:67:d1:4e:8b: e3:83:13:eb:26:e9:b2:d8:66:91:9e:02:05:6b:93: 09:15:1a:9f:6d:58:ef:87:b4:1e:6e:22:62:94:3c: e0:2f:ce:c5:aa:2f:19:62:8b:f6:e8:98:a1:76:0e: 0b:58:52:43:ed:48:89:eb:15:8a:1d:f7:30:35:8c: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:40:58:70:46:1D:F9:8D:58:8B:F3:DB:2F:84:CD:27:C8:88:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c9d6c53-5ace-328f-b30b-51fbc3ed2a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:08:59:81:66:7d:71:75:12:1e:fc:0d:f4:7b:2c:10:a7:b9: c4:56:1b:5d:b3:e6:aa:a4:28:63:c0:6d:fc:e1:fe:49:89:ab: 20:89:23:73:21:78:9f:6f:f2:76:1c:cf:22:54:55:01:6c:e3: 5a:41:3f:26:98:f8:a1:a5:e4:ea:70:00:eb:35:4a:46:84:5f: 52:6a:f0:7b:41:57:7f:b5:08:c7:2c:00:ed:de:b0:7e:20:f5: 74:fa:b7:3c:28:77:42:1b:22:07:e8:28:2f:d2:54:f6:43:f0: 82:54:fd:0b:da:9e:9a:68:b5:52:96:b7:44:4a:3e:a7:0c:59: ff:ed:b0:fb:aa:55:ba:a4:23:3b:86:23:45:ad:68:b2:86:0e: 87:69:af:1e:86:2c:f6:a7:10:3d:8d:89:d9:ba:8d:47:ba:0e: 8f:61:7e:50:b3:90:78:e8:65:07:65:2b:92:81:6d:35:80:9a: b8:b6:c2:aa:d5:a8:bf:ff:1a:fa:97:c5:fb:57:2a:a0:82:f2: 37:79:41:5c:60:01:ff:8e:a7:8e:57:bb:6e:29:c6:5b:19:b2: e4:53:5b:9a:a8:87:df:60:de:62:94:22:f4:78:01:d1:a3:bc: 9d:07:54:de:dd:ef:43:d5:72:8c:a8:23:de:e6:12:17:08:73: 79:d9:cb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZyDEUQFLUz4BEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk Yjk3ZTVkNzctYjM1My00N2M3LTk2ZjYtMmFmN2E1ZTM1NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUu8swpz90sr/dqofhfVpc/R8/4ixseD6ztT eYnkDnUdbG0oldwFcUJzvVOePx7qWV/9yTlOxhUS2bulrZXTAVv50907G+r2MtpA rRUglGMt5cNfc3BrL9yY84vAuquJB0OS5a9FsvE6lqaDcxPTEGdAEuCWaf8E2goU veaCXwHnceBK3XyPRCoVToPvO+s2qrd7G/RxwZBgQGYMipdtEAX6YPgk9esZuK9U 133rO/ccHr/xpClfboVrKx5COmfRTovjgxPrJumy2GaRngIFa5MJFRqfbVjvh7Qe biJilDzgL87Fqi8ZYov26Jihdg4LWFJD7UiJ6xWKHfcwNYwEHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKSQFhwRh35jViL89svhM0nyIjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGM5ZDZjNTMtNWFjZS0z MjhmLWIzMGItNTFmYmMzZWQyYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0IWYFmfXF1Eh78DfR7LBCnucRWG12z5qqkKGPAbfzh/kmJqyCJI3Mh eJ9v8nYczyJUVQFs41pBPyaY+KGl5OpwAOs1SkaEX1Jq8HtBV3+1CMcsAO3esH4g 9XT6tzwod0IbIgfoKC/SVPZD8IJU/QvanppotVKWt0RKPqcMWf/tsPuqVbqkIzuG I0WtaLKGDodprx6GLPanED2Nidm6jUe6Do9hflCzkHjoZQdlK5KBbTWAmri2wqrV qL//GvqXxftXKqCC8jd5QVxgAf+Op45Xu24pxlsZsuRTW5qoh99g3mKUIvR4AdGj vJ0HVN7d70PVcoyoI97mEhcIc3nZy60= -----END CERTIFICATE-----Generated at Sun Jan 25 11:10:59 2026 by rpki-client