This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99a6144e-a19a-3086-aa17-f82d4f06a90a.roa File: 99a6144e-a19a-3086-aa17-f82d4f06a90a.roa (raw, json) Hash identifier: 7c+p/uew5tCNotCocCjpkY/3j/cEhOOiQY9VZIl7IZk= Subject key identifier: DE:80:36:4F:F4:40:0A:F4:73:A3:E6:21:24:FC:B4:CA:F9:FF:C6:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56670FD37CEB3D2CFA19B280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99a6144e-a19a-3086-aa17-f82d4f06a90a.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.10.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:0f:d3:7c:eb:3d:2c:fa:19:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=6437e2b7-ba0b-4640-9242-ec2d57b663f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:12:b5:b9:d5:f8:b8:34:79:95:a1:07:7d: d0:16:e3:d5:82:cd:c8:27:5e:a1:63:c4:34:af:93: d8:ca:2e:66:ec:04:b4:6c:02:6d:b8:52:d2:a1:76: b3:f4:bb:9c:ae:ce:16:83:72:4c:41:25:bc:27:49: 69:80:55:c6:5b:b0:17:b2:a1:ba:b1:94:ba:47:39: 85:24:b7:40:b0:6e:88:83:a4:00:b9:c0:6b:cf:ce: 40:18:3b:8a:8b:44:63:54:2d:66:54:e9:e3:44:30: 4a:df:65:d5:2a:60:f8:b5:9e:d9:5f:90:5d:cc:6e: 70:69:4a:b6:b0:26:aa:88:da:dc:39:91:f7:0e:e6: 85:ab:e5:0a:c9:36:7a:68:45:b0:66:5e:1c:3c:75: 69:4f:36:24:43:1e:e6:ff:e6:6a:1e:e8:81:c2:9d: 06:68:8d:b5:f5:7d:77:b3:2d:39:bf:19:44:3c:3d: 52:97:af:e1:6c:66:c7:95:05:12:39:f9:25:8f:07: 75:94:78:f9:5f:40:c0:55:ac:6d:89:7b:04:d0:40: c8:92:1e:b9:2b:90:d8:37:cf:7c:b7:71:ae:42:12: 25:d5:d2:60:80:b8:53:4c:ce:39:d9:d7:1f:08:a8: 72:21:28:89:03:e5:3e:9e:ce:02:52:16:23:70:ca: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:80:36:4F:F4:40:0A:F4:73:A3:E6:21:24:FC:B4:CA:F9:FF:C6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99a6144e-a19a-3086-aa17-f82d4f06a90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:99:cb:93:ba:af:6d:3b:e3:e8:91:9c:03:95:51:7a:d7:f6: 5c:48:9e:16:39:45:55:27:e7:21:24:e9:c1:22:a3:dc:f8:50: 55:8e:2f:98:d8:5e:ab:1e:35:04:3f:3f:58:1b:81:1a:f9:b3: e6:1f:88:a7:be:6f:65:aa:d7:f9:1a:df:bb:ad:95:b6:b6:3a: c4:21:45:11:c3:0d:e2:bd:61:b9:58:aa:a9:45:f0:13:77:8a: 73:7d:fe:aa:75:d0:e8:c3:f9:ca:15:00:38:cc:5a:96:05:70: b5:e0:a4:98:45:04:87:37:e4:73:1e:0a:b4:98:7a:ae:fc:b1: d7:a2:95:29:bf:6c:61:3d:43:f5:e9:2e:82:a2:ee:62:6f:45: 4f:57:d1:9e:21:e5:39:0a:28:d7:37:a5:57:74:a5:2c:3f:67: 1e:1e:15:fe:e7:d9:fc:06:a7:31:7f:f2:1f:5f:e8:c6:c3:ea: ea:c8:79:4b:df:d1:21:a5:40:74:34:87:f8:eb:7a:aa:a5:4e: da:98:6f:17:35:61:48:02:6f:f0:76:6e:fb:3a:3a:a3:97:41: 38:d6:3b:86:97:5c:ca:65:70:f9:e1:19:23:80:46:e7:68:3d: 99:05:26:69:1f:cb:ae:62:4d:15:91:ff:54:11:0d:ef:6e:ea: df:37:dc:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZw/TfOs9LPoZsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NjQzN2UyYjctYmEwYi00NjQwLTkyNDItZWMyZDU3YjY2M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs0StbnV+Lg0eZWhB33QFuPVgs3IJ16hY8Q0 r5PYyi5m7AS0bAJtuFLSoXaz9Lucrs4Wg3JMQSW8J0lpgFXGW7AXsqG6sZS6RzmF JLdAsG6Ig6QAucBrz85AGDuKi0RjVC1mVOnjRDBK32XVKmD4tZ7ZX5BdzG5waUq2 sCaqiNrcOZH3DuaFq+UKyTZ6aEWwZl4cPHVpTzYkQx7m/+ZqHuiBwp0GaI219X13 sy05vxlEPD1Sl6/hbGbHlQUSOfkljwd1lHj5X0DAVaxtiXsE0EDIkh65K5DYN898 t3GuQhIl1dJggLhTTM452dcfCKhyISiJA+U+ns4CUhYjcMqgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6ANk/0QAr0c6PmIST8tMr5/8auMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTlhNjE0NGUtYTE5YS0z MDg2LWFhMTctZjgyZDRmMDZhOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuZy5O6r2074+iRnAOVUXrX9lxInhY5RVUn5yEk6cEio9z4UFWOL5jY XqseNQQ/P1gbgRr5s+YfiKe+b2Wq1/ka37utlba2OsQhRRHDDeK9YblYqqlF8BN3 inN9/qp10OjD+coVADjMWpYFcLXgpJhFBIc35HMeCrSYeq78sdeilSm/bGE9Q/Xp LoKi7mJvRU9X0Z4h5TkKKNc3pVd0pSw/Zx4eFf7n2fwGpzF/8h9f6MbD6urIeUvf 0SGlQHQ0h/jreqqlTtqYbxc1YUgCb/B2bvs6OqOXQTjWO4aXXMplcPnhGSOARudo PZkFJmkfy65iTRWR/1QRDe9u6t833BY= -----END CERTIFICATE-----Generated at Sun Jan 25 09:52:40 2026 by rpki-client