This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9afddce8-a12b-3570-8868-371fd5adf033.roa File: 9afddce8-a12b-3570-8868-371fd5adf033.roa (raw, json) Hash identifier: 5nuCJJYMl7Lc1GufTHr7Rme8h4j0RizcUwcwDAu5Dlk= Subject key identifier: 59:20:8D:8E:D3:C5:DC:A1:C0:41:69:00:81:4F:5C:2C:2D:E2:42:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666D45866E5263578EC2F10 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9afddce8-a12b-3570-8868-371fd5adf033.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.1.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:d4:58:66:e5:26:35:78:ec:2f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=c345e4e3-09f9-4f6b-945c-50c5fc29f221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:53:1e:e9:4e:0f:93:10:c4:ed:d4:70:37: 0a:35:08:7b:4d:d5:90:b9:ab:61:01:83:19:66:08: e2:a0:54:b7:e2:70:81:08:54:17:4d:5c:ee:ca:90: f1:fa:86:95:63:6b:86:69:c5:d9:0c:73:63:28:58: 42:f0:e8:1a:90:1d:2c:1a:12:63:28:64:a3:c8:6c: d9:9e:e5:71:50:df:c0:10:e2:d3:d9:f6:5d:4c:90: a7:74:e1:e0:6f:90:34:a8:d2:e3:7c:2d:7b:5b:ab: c8:5d:48:3a:4d:32:a9:35:97:63:05:8f:a4:0c:6a: 84:61:e5:52:bd:38:c2:a7:7a:d9:d7:53:01:52:98: c2:cd:f4:81:da:a8:c5:13:85:a5:2c:8f:91:31:f1: cf:d9:a4:e1:8a:49:f5:e4:54:08:39:1c:ec:f4:14: c4:40:8d:97:16:0c:a6:da:8f:da:ba:e2:19:3f:b7: 87:cc:65:6a:95:d1:1a:7e:5e:ee:b5:c6:2d:1f:15: 1b:0b:6b:64:3b:2f:23:10:74:a0:e2:06:ab:2c:88: d1:83:74:ca:a9:41:37:04:eb:c0:17:7c:e0:88:ab: 6e:32:97:57:d9:a4:63:09:5e:cd:7d:b6:f8:bd:e9: f9:1c:77:c8:e4:72:4f:c0:34:b3:ff:3d:92:1c:ce: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:8D:8E:D3:C5:DC:A1:C0:41:69:00:81:4F:5C:2C:2D:E2:42:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9afddce8-a12b-3570-8868-371fd5adf033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:35:24:47:36:c7:57:f5:64:ff:e0:80:d7:61:5c:71:e0:f9: a9:c1:c3:a7:ef:69:66:c0:74:50:5b:05:e6:66:62:f0:26:2f: dd:f3:f2:dc:c5:19:f3:8b:52:70:7f:14:75:e1:fb:2a:9e:00: e3:95:43:cb:12:da:e6:1e:c9:a3:74:8d:8d:8c:5e:32:3a:85: bb:8f:8d:7b:ac:02:10:51:04:5e:96:35:ec:7b:07:d3:be:0c: f5:af:38:c1:da:b8:20:2e:ee:20:91:03:68:99:25:db:6b:f1: 0f:ca:85:69:dd:dc:43:9b:c2:7c:1f:ba:54:14:86:be:dc:96: 4a:d1:e1:21:1b:5a:79:86:3a:03:63:2e:20:b1:ea:32:19:a8: 1a:db:5d:5b:51:7b:23:65:39:24:8f:f5:bb:3d:18:c0:20:59: 5a:1a:32:6b:96:06:1f:95:2b:1d:08:d5:e7:57:35:42:c9:8a: 88:7b:46:63:a3:d8:a2:68:57:d1:da:a1:32:f3:32:32:3f:db: a3:97:29:47:a2:ee:03:9a:df:ed:0e:1d:2b:38:ec:0c:5c:1d: 73:fa:c2:c0:b6:39:45:78:70:db:c4:df:59:39:a7:79:92:a6: 12:33:00:a0:62:d5:24:50:f5:d8:77:97:5b:8c:b3:a7:76:56: 8e:5b:03:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZtRYZuUmNXjsLxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YzM0NWU0ZTMtMDlmOS00ZjZiLTk0NWMtNTBjNWZjMjlmMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoStTHulOD5MQxO3UcDcKNQh7TdWQuathAYMZ ZgjioFS34nCBCFQXTVzuypDx+oaVY2uGacXZDHNjKFhC8OgakB0sGhJjKGSjyGzZ nuVxUN/AEOLT2fZdTJCndOHgb5A0qNLjfC17W6vIXUg6TTKpNZdjBY+kDGqEYeVS vTjCp3rZ11MBUpjCzfSB2qjFE4WlLI+RMfHP2aThikn15FQIORzs9BTEQI2XFgym 2o/auuIZP7eHzGVqldEafl7utcYtHxUbC2tkOy8jEHSg4garLIjRg3TKqUE3BOvA F3zgiKtuMpdX2aRjCV7Nfbb4ven5HHfI5HJPwDSz/z2SHM40cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkgjY7TxdyhwEFpAIFPXCwt4kLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFmZGRjZTgtYTEyYi0z NTcwLTg4NjgtMzcxZmQ1YWRmMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAG7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM1JEc2x1f1ZP/ggNdhXHHg+anBw6fvaWbAdFBbBeZmYvAmL93z8tzF GfOLUnB/FHXh+yqeAOOVQ8sS2uYeyaN0jY2MXjI6hbuPjXusAhBRBF6WNex7B9O+ DPWvOMHauCAu7iCRA2iZJdtr8Q/KhWnd3EObwnwfulQUhr7clkrR4SEbWnmGOgNj LiCx6jIZqBrbXVtReyNlOSSP9bs9GMAgWVoaMmuWBh+VKx0I1edXNULJioh7RmOj 2KJoV9HaoTLzMjI/26OXKUei7gOa3+0OHSs47AxcHXP6wsC2OUV4cNvE31k5p3mS phIzAKBi1SRQ9dh3l1uMs6d2Vo5bA84= -----END CERTIFICATE-----Generated at Sun Jan 25 17:23:27 2026 by rpki-client