This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97798852-d448-3122-a76d-111f8e220ffd.roa File: 97798852-d448-3122-a76d-111f8e220ffd.roa (raw, json) Hash identifier: ejsy+3++QOVNFWf6SzWzo9QIwR377Z+LuFu8Wuu5yss= Subject key identifier: 08:0C:21:16:E6:5C:93:85:2E:F6:CC:83:D1:2E:5F:67:52:03:85:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD11274D77D4C76AA1E3FF20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97798852-d448-3122-a76d-111f8e220ffd.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:27:4d:77:d4:c7:6a:a1:e3:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=939f60e6-f2dc-4205-957f-e5cb39072f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:f2:38:69:e3:ca:7c:15:8b:84:a7:a3:00: 5f:72:7f:dc:68:cf:55:70:c3:95:ab:bf:b3:1e:15: ce:7e:60:42:ad:33:53:3e:b8:3c:99:c0:ba:32:39: f2:14:33:19:cf:61:87:de:11:6d:81:2c:44:da:66: a1:3b:ba:ba:03:01:e9:b0:e8:3c:7c:18:26:0b:91: 15:25:c1:f0:3e:79:2a:36:d3:0f:99:0e:60:b2:cf: d2:f1:16:39:bf:ec:53:2b:09:34:15:60:ad:2d:a2: 61:cc:fc:db:66:bd:cd:75:e9:49:6a:03:fb:97:54: 67:0c:e7:ff:0c:07:84:87:8e:3f:4d:c8:1f:01:03: 33:e7:5f:66:c7:76:a8:31:62:05:c4:70:d0:90:51: 4e:7c:d5:f9:57:72:36:ca:d3:cd:ca:b2:fe:7f:70: e4:d1:f9:f2:cc:7a:27:c4:eb:05:8f:a0:24:5c:be: fc:aa:90:33:6c:da:65:24:b3:0a:d6:99:5e:d9:49: bf:02:6d:27:ec:f3:7d:66:31:d3:34:d3:af:39:09: bc:bd:3f:ae:9d:2e:4c:d8:c2:ef:84:8e:d6:79:be: 31:b1:c2:32:cc:a9:f4:8f:0a:77:97:d6:c6:2c:fe: 1d:45:19:7b:85:2a:6d:27:68:f3:7e:bb:49:8d:8f: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:21:16:E6:5C:93:85:2E:F6:CC:83:D1:2E:5F:67:52:03:85:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97798852-d448-3122-a76d-111f8e220ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:92:7b:76:53:1f:83:d2:9a:f7:84:5c:b1:cf:92:8e:57:3a: 84:93:9b:a1:b8:ee:fa:49:df:82:0b:2d:99:9a:34:44:c5:3c: 3f:c2:10:02:ad:75:c6:28:9b:55:3d:a1:bc:ff:35:70:4b:dc: fc:fc:51:35:60:7e:0f:a2:74:25:d1:65:c7:2f:75:69:a0:2d: 05:cf:bf:aa:42:5c:0f:8f:05:16:49:b0:87:a4:34:6f:1e:72: 99:ec:ff:1e:b0:61:2a:e5:2b:9c:df:cd:3e:df:15:66:e4:53: 19:b3:c1:d0:f1:e6:35:d2:cf:60:80:d4:0e:5e:f7:1c:a4:a3: 66:4a:92:37:c1:56:09:2e:44:f5:0b:cf:75:c7:10:88:35:e5: 69:c9:85:00:db:1a:02:1a:28:a0:76:be:a2:1c:ef:7b:47:4c: 4e:52:97:e7:ff:3c:76:c4:a2:28:e2:85:e2:ff:4f:67:53:ca: 68:86:9e:03:9c:9b:27:eb:b7:7c:48:48:5b:ac:61:15:6a:fa: 09:70:8a:dc:53:17:d5:ee:0e:f7:b5:eb:c1:5b:77:5a:31:df: 37:7f:21:66:23:f5:fc:35:e1:29:45:10:61:fa:1d:11:50:62: 6f:b2:49:bd:dd:53:9b:8a:4a:00:7b:05:be:9e:5e:ab:be:b6: d6:b4:e1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ESdNd9THaqHj/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk OTM5ZjYwZTYtZjJkYy00MjA1LTk1N2YtZTVjYjM5MDcyZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGjyOGnjynwVi4SnowBfcn/caM9VcMOVq7+z HhXOfmBCrTNTPrg8mcC6MjnyFDMZz2GH3hFtgSxE2mahO7q6AwHpsOg8fBgmC5EV JcHwPnkqNtMPmQ5gss/S8RY5v+xTKwk0FWCtLaJhzPzbZr3NdelJagP7l1RnDOf/ DAeEh44/TcgfAQMz519mx3aoMWIFxHDQkFFOfNX5V3I2ytPNyrL+f3Dk0fnyzHon xOsFj6AkXL78qpAzbNplJLMK1ple2Um/Am0n7PN9ZjHTNNOvOQm8vT+unS5M2MLv hI7Web4xscIyzKn0jwp3l9bGLP4dRRl7hSptJ2jzfrtJjY/CUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgMIRbmXJOFLvbMg9EuX2dSA4U4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTc3OTg4NTItZDQ0OC0z MTIyLWE3NmQtMTExZjhlMjIwZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqSe3ZTH4PSmveEXLHPko5XOoSTm6G47vpJ34ILLZmaNETFPD/CEAKt dcYom1U9obz/NXBL3Pz8UTVgfg+idCXRZccvdWmgLQXPv6pCXA+PBRZJsIekNG8e cpns/x6wYSrlK5zfzT7fFWbkUxmzwdDx5jXSz2CA1A5e9xyko2ZKkjfBVgkuRPUL z3XHEIg15WnJhQDbGgIaKKB2vqIc73tHTE5Sl+f/PHbEoijiheL/T2dTymiGngOc myfrt3xISFusYRVq+glwitxTF9XuDve168Fbd1ox3zd/IWYj9fw14SlFEGH6HRFQ Ym+ySb3dU5uKSgB7Bb6eXqu+tta04Wc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:05 2025 by rpki-client