This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9665a49d-6202-354e-b3ed-bb8a33204f49.roa File: 9665a49d-6202-354e-b3ed-bb8a33204f49.roa (raw, json) Hash identifier: Rv/yb/g1m76iWnkZRxNSL4x4bC3Ndtz4G812kUFJKwA= Subject key identifier: 8F:42:45:3F:0D:D8:54:F9:E2:D1:83:A2:ED:C6:DE:91:9F:17:84:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE760EB14D69B7D70148C440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9665a49d-6202-354e-b3ed-bb8a33204f49.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.228.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:0e:b1:4d:69:b7:d7:01:48:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=36fa7c65-14dc-4a36-a1a0-1f811b46a399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:87:86:aa:85:5c:53:6d:e5:d5:73:a9:e1: 80:e6:ba:2f:f5:64:b7:e9:39:97:15:a3:fa:b0:69: a3:f8:c1:75:25:66:e3:39:1f:93:e9:aa:87:95:c0: 56:8b:49:26:49:44:fb:f2:21:02:88:98:40:c2:d2: 4d:8c:b6:8c:90:bf:86:f4:be:9a:c8:33:ef:f6:60: 6d:e0:3c:cd:e7:78:80:aa:67:78:cd:9e:15:a6:8c: 44:53:9a:31:d0:58:ed:01:f9:cb:a9:58:3d:f4:a3: 76:07:42:8c:b4:ed:ec:45:c0:a4:1b:1d:7d:c0:83: 67:11:bf:80:3b:22:83:a6:12:ac:44:c4:e6:4c:43: fc:c5:e9:33:77:b6:45:8f:f2:44:89:4b:6f:f0:33: ae:46:89:12:6d:57:54:a6:7a:5f:ef:f7:87:2b:69: a5:dd:3a:2b:cb:21:f7:e1:b1:55:f2:45:b7:b9:c7: e4:e3:e8:69:f1:90:da:d5:d8:3f:35:2d:eb:58:a7: 3e:32:01:43:6f:fb:da:ec:38:dc:19:bb:99:a8:d7: 80:a1:6e:08:c5:67:3b:74:8a:af:6f:8a:24:bb:a0: 81:1a:60:f1:08:a6:b4:c4:8c:a3:e8:25:39:4b:9a: 05:9a:2c:48:e6:ab:49:03:b7:d7:34:50:15:08:9a: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:45:3F:0D:D8:54:F9:E2:D1:83:A2:ED:C6:DE:91:9F:17:84:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9665a49d-6202-354e-b3ed-bb8a33204f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ec:31:b5:8e:46:ef:4a:7b:18:c0:48:d0:a4:df:1b:a4:af: 34:cc:b9:3e:66:6c:62:38:f8:ff:06:fe:1a:3b:b8:c7:4f:1f: b0:b6:06:e0:ec:a8:94:49:ee:a6:ec:76:19:8b:28:33:89:11: 52:82:74:a1:0e:6a:7d:40:13:fc:78:c5:a0:d0:86:56:81:66: 08:f5:e9:cf:11:44:98:e2:aa:1c:54:bd:3a:bc:73:89:ed:cf: cb:22:e0:09:1d:a9:72:33:7a:19:80:f1:ba:f4:59:a0:f0:c2: 65:39:41:f3:99:a6:53:79:6a:82:bb:9e:c0:b5:7d:e1:6b:76: 9c:89:a6:bd:a9:a6:80:83:20:42:6f:d4:07:5e:01:63:ad:ae: 94:47:c4:76:13:80:d8:6f:2d:4b:65:7f:f2:0c:07:c2:b5:ed: f0:66:cb:37:64:e2:ff:3d:d7:8b:b8:86:dd:46:cd:62:d5:51: 7a:68:b2:de:19:fc:33:45:8e:a1:ce:e8:04:c4:93:b7:f3:b4: a1:0d:18:6f:26:be:65:0c:27:1e:4f:b4:01:1d:32:d1:3c:44: b4:0b:f5:17:3f:67:ec:0c:20:87:24:a0:36:4d:1a:7e:a2:4e: 7e:5f:82:f0:9f:30:79:c4:5b:54:8b:60:a0:09:8f:f6:8a:37: a9:12:b1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+dg6xTWm31wFIxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk MzZmYTdjNjUtMTRkYy00YTM2LWExYTAtMWY4MTFiNDZhMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+HhqqFXFNt5dVzqeGA5rov9WS36TmXFaP6 sGmj+MF1JWbjOR+T6aqHlcBWi0kmSUT78iECiJhAwtJNjLaMkL+G9L6ayDPv9mBt 4DzN53iAqmd4zZ4VpoxEU5ox0FjtAfnLqVg99KN2B0KMtO3sRcCkGx19wINnEb+A OyKDphKsRMTmTEP8xekzd7ZFj/JEiUtv8DOuRokSbVdUpnpf7/eHK2ml3ToryyH3 4bFV8kW3ucfk4+hp8ZDa1dg/NS3rWKc+MgFDb/va7DjcGbuZqNeAoW4IxWc7dIqv b4oku6CBGmDxCKa0xIyj6CU5S5oFmixI5qtJA7fXNFAVCJqAFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9CRT8N2FT54tGDou3G3pGfF4S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTY2NWE0OWQtNjIwMi0z NTRlLWIzZWQtYmI4YTMzMjA0ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTsMbWORu9KexjASNCk3xukrzTMuT5mbGI4+P8G/ho7uMdPH7C2BuDs qJRJ7qbsdhmLKDOJEVKCdKEOan1AE/x4xaDQhlaBZgj16c8RRJjiqhxUvTq8c4nt z8si4AkdqXIzehmA8br0WaDwwmU5QfOZplN5aoK7nsC1feFrdpyJpr2ppoCDIEJv 1AdeAWOtrpRHxHYTgNhvLUtlf/IMB8K17fBmyzdk4v8914u4ht1GzWLVUXpost4Z /DNFjqHO6ATEk7fztKENGG8mvmUMJx5PtAEdMtE8RLQL9Rc/Z+wMIIckoDZNGn6i Tn5fgvCfMHnEW1SLYKAJj/aKN6kSsSw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:50 2025 by rpki-client