This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c69484-f2e5-3ed3-824d-146d9f761d87.roa File: 97c69484-f2e5-3ed3-824d-146d9f761d87.roa (raw, json) Hash identifier: twM/mrChUtDGgwcXV/NrOMLqS1PG+fgTrVcCuG32Zu4= Subject key identifier: 5B:38:A6:D0:8E:43:5E:32:56:12:F3:14:84:76:05:F6:7D:90:44:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD1099BC686D213F7C7FD280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c69484-f2e5-3ed3-824d-146d9f761d87.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:99:bc:68:6d:21:3f:7c:7f:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=6c8ff5b7-640c-490e-b335-7ce88b14092a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:c9:97:d3:ed:bd:42:ac:b6:49:6d:06:e9: 4b:a9:40:34:14:e7:f6:52:13:08:6a:f3:3e:3a:5b: 3c:9f:c0:f0:04:39:aa:ab:67:db:09:44:a1:b1:fc: 0f:86:62:07:03:ec:18:8d:6c:53:58:a9:dd:1d:cd: da:ea:df:e3:ff:56:e3:8d:75:52:87:a3:da:5f:f8: af:fc:a6:f6:13:5b:30:67:80:3b:1e:46:76:3f:b0: 6b:7c:ae:3a:75:b4:7c:c1:d8:e8:35:bc:02:dc:a8: 11:a2:87:1f:0f:ab:33:29:f5:33:57:94:91:f2:bf: 09:1f:57:42:a2:99:3e:d9:ce:8e:2e:62:39:2f:27: 16:23:84:a8:75:fa:31:c9:6d:82:0f:4e:43:0f:b7: db:0b:53:33:ad:06:c9:97:bd:03:97:9e:55:3b:59: f7:82:31:bc:a5:bc:64:d9:e9:dd:a1:ba:6e:8d:25: 31:ea:ca:bc:50:53:1a:85:9a:5d:1a:fd:b2:df:e2: a0:a8:6d:58:85:93:cc:4d:2c:27:da:72:80:f6:9d: b4:1f:66:ea:ac:2a:36:aa:dd:fe:2b:b9:ab:8c:82: 24:8b:82:28:e4:de:64:3f:3c:ac:e4:de:36:de:58: 60:45:6f:83:a2:b0:d0:28:2b:c6:fa:9c:d0:94:53: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:A6:D0:8E:43:5E:32:56:12:F3:14:84:76:05:F6:7D:90:44:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c69484-f2e5-3ed3-824d-146d9f761d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:af:b9:dc:1f:15:6f:87:b3:ba:cf:e9:e2:33:4c:d0:04:05: e9:95:98:b0:3a:42:8f:af:9b:e8:f8:e2:bf:a2:6e:89:80:26: 92:55:ad:70:12:b5:d4:23:e2:e5:c6:d6:7e:85:1d:6e:4b:96: 26:f3:3b:65:07:df:56:f5:54:96:d3:c1:5b:ad:42:b0:f3:96: de:ac:b0:98:ad:7e:bf:5d:5d:a2:22:c1:2e:4f:4e:f1:3c:21: 32:97:39:e9:09:53:f6:cc:aa:a7:03:dd:b9:d9:45:11:a3:d3: 96:db:78:52:40:70:87:9d:1d:d6:5c:e0:62:2f:04:c8:0e:9f: e2:51:e1:42:fa:2a:38:e2:3d:13:0a:d9:cb:cf:6f:64:36:62: 44:90:9f:00:9f:d9:1a:a8:6b:ec:19:ba:0f:3e:72:d4:b2:43: b0:e0:8a:e7:c7:fb:df:a9:92:da:2a:82:62:0f:60:34:f7:46: 01:2f:16:f2:e2:21:e5:d2:63:0b:e9:2f:d4:90:93:5c:db:65: bc:0f:49:7b:60:60:e5:a8:ea:32:67:ff:e7:83:1c:45:d3:a0: 12:35:dc:e8:4c:64:11:e5:13:da:44:90:ec:d1:e6:89:41:07: c1:3c:5f:d8:de:90:e7:e2:61:90:7a:2b:ef:e1:7f:a7:a7:00: ba:bd:d8:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EJm8aG0hP3x/0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk NmM4ZmY1YjctNjQwYy00OTBlLWIzMzUtN2NlODhiMTQwOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKDJl9PtvUKstkltBulLqUA0FOf2UhMIavM+ Ols8n8DwBDmqq2fbCUShsfwPhmIHA+wYjWxTWKndHc3a6t/j/1bjjXVSh6PaX/iv /Kb2E1swZ4A7HkZ2P7BrfK46dbR8wdjoNbwC3KgRoocfD6szKfUzV5SR8r8JH1dC opk+2c6OLmI5LycWI4SodfoxyW2CD05DD7fbC1MzrQbJl70Dl55VO1n3gjG8pbxk 2endobpujSUx6sq8UFMahZpdGv2y3+KgqG1YhZPMTSwn2nKA9p20H2bqrCo2qt3+ K7mrjIIki4Io5N5kPzys5N423lhgRW+DorDQKCvG+pzQlFNv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs4ptCOQ14yVhLzFIR2BfZ9kETzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTdjNjk0ODQtZjJlNS0z ZWQzLTgyNGQtMTQ2ZDlmNzYxZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICvudwfFW+Hs7rP6eIzTNAEBemVmLA6Qo+vm+j44r+ibomAJpJVrXAS tdQj4uXG1n6FHW5LlibzO2UH31b1VJbTwVutQrDzlt6ssJitfr9dXaIiwS5PTvE8 ITKXOekJU/bMqqcD3bnZRRGj05bbeFJAcIedHdZc4GIvBMgOn+JR4UL6KjjiPRMK 2cvPb2Q2YkSQnwCf2Rqoa+wZug8+ctSyQ7DgiufH+9+pktoqgmIPYDT3RgEvFvLi IeXSYwvpL9SQk1zbZbwPSXtgYOWo6jJn/+eDHEXToBI13OhMZBHlE9pEkOzR5olB B8E8X9jekOfiYZB6K+/hf6enALq92MU= -----END CERTIFICATE-----Generated at Sat Dec 6 20:22:08 2025 by rpki-client