This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d889a73-aeef-37b0-ae9e-a45fb6d6971c.roa File: 8d889a73-aeef-37b0-ae9e-a45fb6d6971c.roa (raw, json) Hash identifier: tCfZ1t6gGcQg1TfyXJpMBfEPdBlHmVSucdM9fyWbMiU= Subject key identifier: 82:B9:DF:4A:6D:A6:50:4B:BF:38:30:9A:D4:28:70:A2:38:31:5C:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666A591F0D2FF1C8472AA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d889a73-aeef-37b0-ae9e-a45fb6d6971c.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.14.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:a5:91:f0:d2:ff:1c:84:72:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=2c260fe9-8f68-4716-9927-c7c08c041146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:07:f1:31:49:bd:c0:75:76:25:1e:83:08: e7:2b:64:b2:d5:13:03:54:4e:df:a7:b4:70:6a:f7: 83:40:82:0c:a6:c4:12:e5:5e:89:df:eb:c4:8b:c4: 08:63:b1:ca:39:75:c3:af:6e:4d:0f:e5:12:67:61: 30:e6:1f:1f:b8:8d:e4:2b:06:a1:b4:09:0a:64:5c: 9d:9b:ff:c6:45:e3:1e:f9:90:2f:76:c6:95:f7:68: 5e:36:18:d9:db:b8:2a:16:a7:c4:5f:c2:f4:34:9d: e9:39:e1:f8:ea:8a:4e:4d:0d:a7:95:71:03:9c:42: 3e:21:03:42:5a:7c:88:10:80:52:68:20:6c:2f:00: 39:8f:be:88:ab:d9:2b:e5:00:86:c9:ea:c9:47:f0: 22:65:cf:40:bc:49:8b:2c:d3:a6:57:61:d5:24:3a: c0:62:d8:a2:c6:06:5b:aa:53:1e:d5:8e:c3:4e:cc: a7:d4:36:95:b2:4b:94:69:46:e2:0e:f5:78:b5:41: 36:9c:0f:36:93:6d:ff:90:b8:72:ef:62:34:44:c1: 3f:45:ff:ff:b5:e2:c4:f5:fe:61:ef:11:91:89:4d: 34:aa:4d:f1:5b:0b:dc:32:98:51:0b:ec:2d:a9:87: 51:dc:40:dc:0f:d9:0c:21:ae:53:a8:70:61:a4:5e: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B9:DF:4A:6D:A6:50:4B:BF:38:30:9A:D4:28:70:A2:38:31:5C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d889a73-aeef-37b0-ae9e-a45fb6d6971c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:54:6a:7f:80:57:a4:6f:55:97:ef:f8:5b:2c:63:dd:df:09: 05:fb:1c:f4:f3:57:70:97:aa:63:83:9e:43:b5:a2:ae:35:38: c3:27:9b:f4:43:8c:fb:fa:9e:f8:05:72:93:bb:d8:f3:e2:35: e4:28:06:c2:ab:9c:5d:a6:35:66:a9:28:dc:82:fa:7a:b1:2f: 8c:2d:8b:54:ac:8b:ed:35:63:be:a7:1a:59:bf:16:bd:c5:91: 31:10:68:50:d3:2c:86:2f:32:a0:bc:67:be:dc:8c:dc:8a:72: 9b:48:93:e8:71:6a:3b:5c:c9:44:c3:fd:71:a2:f4:78:75:09: 64:1f:02:13:aa:56:0a:e0:c4:a6:fa:6b:d2:bb:15:46:af:4e: e2:7a:38:3c:6e:e8:a6:62:a6:da:bb:06:1b:27:11:1d:01:5a: 2b:fb:3c:57:09:15:d8:0f:fa:aa:96:c9:20:91:6a:cd:01:b2: e6:1a:ea:df:20:b2:ac:34:fb:04:a3:a0:ca:a8:c7:12:c8:9d: b6:14:23:80:2a:d3:f3:1a:98:b7:6f:b4:e7:34:9d:09:d0:23: bc:ff:18:ce:77:7d:ee:3f:b6:c7:92:aa:4c:5d:68:2b:03:78: 97:c6:d1:22:35:ed:f4:30:d4:e9:8a:96:a4:af:99:e1:cf:90: 5d:d4:5e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZqWR8NL/HIRyqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MmMyNjBmZTktOGY2OC00NzE2LTk5MjctYzdjMDhjMDQxMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG8H8TFJvcB1diUegwjnK2Sy1RMDVE7fp7Rw aveDQIIMpsQS5V6J3+vEi8QIY7HKOXXDr25ND+USZ2Ew5h8fuI3kKwahtAkKZFyd m//GReMe+ZAvdsaV92heNhjZ27gqFqfEX8L0NJ3pOeH46opOTQ2nlXEDnEI+IQNC WnyIEIBSaCBsLwA5j76Iq9kr5QCGyerJR/AiZc9AvEmLLNOmV2HVJDrAYtiixgZb qlMe1Y7DTsyn1DaVskuUaUbiDvV4tUE2nA82k23/kLhy72I0RME/Rf//teLE9f5h 7xGRiU00qk3xWwvcMphRC+wtqYdR3EDcD9kMIa5TqHBhpF4y0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK530ptplBLvzgwmtQocKI4MVwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGQ4ODlhNzMtYWVlZi0z N2IwLWFlOWUtYTQ1ZmI2ZDY5NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFUan+AV6RvVZfv+FssY93fCQX7HPTzV3CXqmODnkO1oq41OMMnm/RD jPv6nvgFcpO72PPiNeQoBsKrnF2mNWapKNyC+nqxL4wti1Ssi+01Y76nGlm/Fr3F kTEQaFDTLIYvMqC8Z77cjNyKcptIk+hxajtcyUTD/XGi9Hh1CWQfAhOqVgrgxKb6 a9K7FUavTuJ6ODxu6KZiptq7BhsnER0BWiv7PFcJFdgP+qqWySCRas0BsuYa6t8g sqw0+wSjoMqoxxLInbYUI4Aq0/MamLdvtOc0nQnQI7z/GM53fe4/tseSqkxdaCsD eJfG0SI17fQw1OmKlqSvmeHPkF3UXl4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:32:10 2026 by rpki-client