This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa File: 960859cb-73ca-3008-baa2-e54721f1fd07.roa (raw, json) Hash identifier: BrCWhEtmko8PUF1VzB/HLuqibx7w/Cup+CUQZUoTzYA= Subject key identifier: 43:0F:33:70:86:ED:71:2A:27:DE:51:8E:98:89:F2:FB:B3:1E:E5:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10BAF2BA7A37CBED96B000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.98.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:ba:f2:ba:7a:37:cb:ed:96:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=cdd69d9f-da12-4ae9-bbbd-8c7088b7cc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:c0:82:2f:65:a9:10:f3:cc:27:d1:4c:e9: 33:c6:97:2e:63:bf:5c:87:03:a8:7b:87:51:93:ed: 2e:cc:17:77:5b:d2:b6:cf:06:63:c7:87:ba:24:8f: 77:50:96:6e:99:f9:a9:46:fa:5e:3a:0b:97:93:0f: 84:78:19:d8:b8:a9:0c:2c:b1:88:b1:f3:c1:6f:8b: 61:12:02:25:3f:90:4c:b2:02:c1:1d:32:9a:40:60: 4a:ef:68:17:c2:f2:1b:a8:a9:ae:1d:65:0e:ec:f1: 4f:c1:9e:0c:e9:be:74:c5:6c:65:e3:ab:38:d1:9e: 1a:c8:68:49:b9:83:f8:da:29:87:e0:b7:bd:e2:3e: f2:2a:67:8b:16:fa:1e:b7:c5:3f:ac:c0:8d:d3:3b: b3:41:93:51:d6:31:43:b8:ed:92:81:a0:62:3d:8d: 32:04:50:fb:6e:cc:8f:34:aa:56:6f:99:b8:c8:1a: 43:25:c5:8f:27:e3:41:ad:91:dd:fd:dc:a0:64:9d: 3a:d5:90:28:01:56:8d:17:84:be:c3:7a:cb:95:59: aa:02:71:bb:b5:2f:b0:54:f3:b8:ef:87:63:31:29: b7:f5:fb:9a:1a:7b:ce:87:12:e5:12:67:fc:79:f4: 0f:46:5c:57:c7:f5:0e:6f:ea:13:99:27:03:ba:bd: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0F:33:70:86:ED:71:2A:27:DE:51:8E:98:89:F2:FB:B3:1E:E5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:96:d7:dd:09:4d:69:13:e5:18:49:96:1d:f4:11:0f:cc:d3: 33:e1:f9:8b:05:58:08:22:4f:68:8c:de:75:f1:42:cf:ef:ab: 2c:fa:07:f4:34:84:fa:54:43:62:30:40:ce:0a:e0:43:9f:cc: fb:a8:95:00:b7:c9:f9:c5:9f:01:59:b5:7b:ca:2c:ae:9c:2e: 8e:21:4c:53:eb:90:d2:44:52:39:c9:c4:3a:e0:2d:50:c0:2a: c6:51:59:35:bf:39:b1:69:34:92:bc:bc:b3:32:ea:0b:eb:88: 47:61:95:07:41:b3:75:9d:37:4a:21:c8:4c:c6:35:ac:79:22: f0:d4:f7:2f:10:2f:3d:a2:7e:a4:02:a1:b5:44:8d:28:4b:d2: 11:c6:39:a7:2e:8e:89:5f:74:ff:2b:10:60:da:aa:70:0b:30: 31:e9:20:50:03:8e:53:3e:af:39:94:dc:3f:b0:7e:31:b6:ca: 95:8e:00:ef:ff:6d:65:82:e3:55:e1:b7:05:43:a0:23:fd:3d: c9:98:44:5c:58:22:04:f2:1a:d2:d2:3d:01:ac:0e:04:e6:f4: 48:55:4c:c8:c3:b3:2a:8c:7d:b6:c4:c1:72:ba:8a:14:bc:c6: 3f:64:fe:c7:e8:56:ba:cb:1e:32:d1:44:9f:49:08:12:a9:46: e5:a1:a8:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELryuno3y+2WsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk Y2RkNjlkOWYtZGExMi00YWU5LWJiYmQtOGM3MDg4YjdjYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PzAgi9lqRDzzCfRTOkzxpcuY79chwOoe4dR k+0uzBd3W9K2zwZjx4e6JI93UJZumfmpRvpeOguXkw+EeBnYuKkMLLGIsfPBb4th EgIlP5BMsgLBHTKaQGBK72gXwvIbqKmuHWUO7PFPwZ4M6b50xWxl46s40Z4ayGhJ uYP42imH4Le94j7yKmeLFvoet8U/rMCN0zuzQZNR1jFDuO2SgaBiPY0yBFD7bsyP NKpWb5m4yBpDJcWPJ+NBrZHd/dygZJ061ZAoAVaNF4S+w3rLlVmqAnG7tS+wVPO4 74djMSm39fuaGnvOhxLlEmf8efQPRlxXx/UOb+oTmScDur0c7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMPM3CG7XEqJ95RjpiJ8vuzHuVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTYwODU5Y2ItNzNjYS0z MDA4LWJhYTItZTU0NzIxZjFmZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqW190JTWkT5RhJlh30EQ/M0zPh+YsFWAgiT2iM3nXxQs/vqyz6B/Q0 hPpUQ2IwQM4K4EOfzPuolQC3yfnFnwFZtXvKLK6cLo4hTFPrkNJEUjnJxDrgLVDA KsZRWTW/ObFpNJK8vLMy6gvriEdhlQdBs3WdN0ohyEzGNax5IvDU9y8QLz2ifqQC obVEjShL0hHGOacujolfdP8rEGDaqnALMDHpIFADjlM+rzmU3D+wfjG2ypWOAO// bWWC41XhtwVDoCP9PcmYRFxYIgTyGtLSPQGsDgTm9EhVTMjDsyqMfbbEwXK6ihS8 xj9k/sfoVrrLHjLRRJ9JCBKpRuWhqPM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:28 2025 by rpki-client