This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96e2c938-84d5-3ca4-828c-67f7442601c1.roa File: 96e2c938-84d5-3ca4-828c-67f7442601c1.roa (raw, json) Hash identifier: DaCaFI0fh/JqhBQ6mJTa2zWlMlVFMoGgti5by/+1+dk= Subject key identifier: 40:90:4F:73:E8:4E:CD:D7:20:53:7D:B0:21:FE:63:B3:A7:56:7A:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C01409757608E80C67BFFF580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96e2c938-84d5-3ca4-828c-67f7442601c1.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 174.68.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:97:57:60:8e:80:c6:7b:ff:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=4fdae197-75da-4289-9abd-de6551f367a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f5:c0:9f:de:00:52:fb:82:84:7f:c7:32:14: 69:90:90:f4:a2:36:4f:80:61:c8:e7:ee:0e:4d:19: b5:8e:c8:4a:12:05:e9:0f:3b:f2:4f:1c:3b:dc:3c: b4:2d:7c:b3:d6:cc:99:5d:de:a2:07:da:40:02:87: 9a:8b:81:11:e1:17:91:0c:0f:89:bb:87:97:38:4b: a6:7e:20:da:73:6e:7a:57:6a:e0:33:8c:cf:2a:65: b7:17:a8:a2:38:8d:86:68:51:9a:c2:49:0e:8b:9d: 0d:f0:79:05:02:0c:42:ba:b0:45:2f:ea:8d:b8:49: 51:0d:94:94:21:e7:4c:5a:c2:a6:20:8b:48:74:1b: 30:f4:0a:9a:d6:8d:56:6b:af:63:5a:fc:24:b6:81: 67:e3:dc:12:8c:50:a7:f0:3b:05:ef:fc:bd:e9:d4: 44:03:d6:04:5c:60:f0:ec:2c:58:03:4a:99:fd:f6: c9:72:38:34:df:26:26:42:96:87:5d:a0:6d:96:f2: 61:57:94:da:23:a3:62:49:bf:ee:f8:33:ad:3a:8a: 2e:c9:ab:81:62:34:4f:f3:31:b9:4d:98:4d:9a:2c: 13:84:c8:ae:25:c3:08:7f:4a:ae:db:c2:8f:df:ad: a1:60:ea:67:8b:12:53:7d:d3:ee:61:b0:ea:81:e7: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:90:4F:73:E8:4E:CD:D7:20:53:7D:B0:21:FE:63:B3:A7:56:7A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96e2c938-84d5-3ca4-828c-67f7442601c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:21:7f:d2:8c:db:14:35:04:b7:24:04:04:c2:6e:69:8e:42: 99:e5:f1:f4:2f:ec:83:77:ac:14:84:76:6e:44:80:c7:63:26: 85:66:af:32:6d:14:46:00:e0:73:fb:35:dd:39:71:19:e0:2e: a8:2f:ed:36:d5:58:9c:1b:f7:71:f4:1f:c1:59:46:43:94:5e: 89:cb:fd:e5:9e:b9:8e:4f:fa:b0:8a:a0:3e:16:6a:b2:37:c2: 9a:04:97:c1:b0:de:55:51:cf:1f:ee:d7:29:4d:3b:2f:22:b4: ab:79:32:a6:b7:0e:a3:a7:9e:79:c0:4f:1c:65:54:ba:de:b4: cf:43:58:df:a8:e0:57:f5:b6:1d:64:c5:53:ee:c7:f9:7a:4c: 5a:6e:53:24:7a:f1:c1:c2:bf:2f:b8:2a:62:89:e2:76:b6:d5: 29:c7:29:18:15:16:be:4b:d3:5f:10:04:d5:7b:b8:bd:c9:3c: c9:98:61:99:75:7e:0f:06:ef:5c:e8:38:65:90:9f:06:ba:c5: 65:be:9c:f6:31:3a:fe:95:d7:44:09:b3:b6:c8:93:75:37:d9: 4a:49:4b:a3:be:b8:84:bd:99:5f:a2:02:77:bc:09:9f:f7:ae: 5b:c9:5a:c4:4a:d4:6d:b9:07:0f:a4:73:fd:33:0b:8e:23:1b: 98:db:71:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQJdXYI6Axnv/9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk NGZkYWUxOTctNzVkYS00Mjg5LTlhYmQtZGU2NTUxZjM2N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPXAn94AUvuChH/HMhRpkJD0ojZPgGHI5+4O TRm1jshKEgXpDzvyTxw73Dy0LXyz1syZXd6iB9pAAoeai4ER4ReRDA+Ju4eXOEum fiDac256V2rgM4zPKmW3F6iiOI2GaFGawkkOi50N8HkFAgxCurBFL+qNuElRDZSU IedMWsKmIItIdBsw9Aqa1o1Wa69jWvwktoFn49wSjFCn8DsF7/y96dREA9YEXGDw 7CxYA0qZ/fbJcjg03yYmQpaHXaBtlvJhV5TaI6NiSb/u+DOtOoouyauBYjRP8zG5 TZhNmiwThMiuJcMIf0qu28KP362hYOpnixJTfdPuYbDqgef0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECQT3PoTs3XIFN9sCH+Y7OnVnqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTZlMmM5MzgtODRkNS0z Y2E0LTgyOGMtNjdmNzQ0MjYwMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACghf9KM2xQ1BLckBATCbmmOQpnl8fQv7IN3rBSEdm5EgMdjJoVmrzJt FEYA4HP7Nd05cRngLqgv7TbVWJwb93H0H8FZRkOUXonL/eWeuY5P+rCKoD4WarI3 wpoEl8Gw3lVRzx/u1ylNOy8itKt5Mqa3DqOnnnnATxxlVLretM9DWN+o4Ff1th1k xVPux/l6TFpuUyR68cHCvy+4KmKJ4na21SnHKRgVFr5L018QBNV7uL3JPMmYYZl1 fg8G71zoOGWQnwa6xWW+nPYxOv6V10QJs7bIk3U32UpJS6O+uIS9mV+iAne8CZ/3 rlvJWsRK1G25Bw+kc/0zC44jG5jbcYg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:41 2025 by rpki-client