This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa File: a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa (raw, json) Hash identifier: dxe1NrQp2tw9TtgnM4/zQaIBjo0mKV06/9UUKGalfVw= Subject key identifier: 28:34:FE:45:F6:96:77:DE:EF:EE:82:A3:CC:86:75:1C:EA:C9:FF:E3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE7627CE1C0468F942A03E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.227.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:27:ce:1c:04:68:f9:42:a0:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=fd4698fb-b20d-4daa-ab26-85639af93506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:4f:2d:fc:8a:19:20:f7:3e:98:08:3e:6d: 3b:b9:fb:64:26:ad:dd:04:b3:0d:fb:92:40:90:50: e3:f5:8a:cd:22:46:68:f5:a6:76:6b:97:8d:94:15: c5:f2:12:c3:e7:f2:fa:c6:0b:7a:96:f3:39:2d:68: 33:ce:fb:56:e3:c1:78:6b:d8:18:42:22:35:09:e8: 5f:7d:8d:54:ad:5c:95:d3:e7:8f:eb:cf:dc:02:21: 13:76:23:30:e0:2d:ef:89:f3:06:52:98:8b:32:b2: fa:a5:b2:26:cb:3b:a8:ff:35:59:0b:0a:25:fb:50: 6a:4f:04:c0:fc:10:dd:c7:ac:c0:14:62:b8:17:70: 9a:30:92:d5:d1:4d:c2:d3:39:0c:53:bd:74:8a:e0: 52:51:88:f9:5c:4a:d9:ed:b9:35:c6:75:f5:0a:0d: 82:f2:b1:76:34:8b:1f:b6:6c:05:30:0e:2e:d9:23: f9:a8:2f:c3:99:7b:2f:08:b2:06:04:30:86:14:23: 31:e2:51:2c:63:1d:eb:57:c9:9d:aa:e0:54:36:e6: 93:f2:74:52:f3:d4:13:f5:b8:65:7c:00:0b:8e:96: 34:08:4b:7d:9d:37:80:85:4e:18:c8:cd:86:c4:0a: fe:77:d5:fb:6d:79:d1:85:23:37:a7:c1:5a:e8:20: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:FE:45:F6:96:77:DE:EF:EE:82:A3:CC:86:75:1C:EA:C9:FF:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e7:84:d7:85:8d:fa:fb:e9:23:68:56:5e:1c:7b:9e:7a:35: fb:20:6e:35:50:11:02:96:d3:ee:de:1f:9e:9c:e1:f5:d4:96: 24:12:cd:bc:92:e4:74:68:fd:69:0d:1c:95:11:25:2e:d9:8a: 56:75:fe:dc:d8:bc:31:40:ef:84:a2:a0:13:17:6c:70:91:0e: b3:3b:45:6f:3d:f0:44:a3:26:91:6c:65:1a:53:db:0e:6f:13: 14:00:2f:19:62:7a:92:f2:5d:57:7f:3d:ec:54:6d:19:0c:c1: 5a:6e:a5:cf:8d:a9:bb:b3:82:f8:a1:bd:e1:c8:e1:9d:b2:61: 28:ce:dc:ec:f8:ad:73:94:93:2a:6c:2e:c7:cf:00:df:3c:86: 86:11:21:fd:89:ae:bf:0d:ab:5b:d4:58:24:9f:28:df:32:34: 38:9c:be:70:12:aa:42:f5:16:21:39:57:df:83:82:00:83:ac: 72:1b:f4:60:78:f5:ee:a6:e4:df:2b:83:37:e8:c2:d3:29:13: ef:1e:95:03:07:bc:94:e2:57:9d:22:08:5f:88:55:4e:11:3e: 42:67:e3:84:55:3e:7f:0a:12:5f:c1:bb:64:ba:bc:8a:94:1b: 89:26:72:e8:14:35:5a:5a:48:a4:28:94:f9:eb:3f:ac:61:37: 73:f7:da:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+difOHARo+UKgPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ0Njk4ZmItYjIwZC00ZGFhLWFiMjYtODU2MzlhZjkzNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHRPLfyKGSD3PpgIPm07uftkJq3dBLMN+5JA kFDj9YrNIkZo9aZ2a5eNlBXF8hLD5/L6xgt6lvM5LWgzzvtW48F4a9gYQiI1Cehf fY1UrVyV0+eP68/cAiETdiMw4C3vifMGUpiLMrL6pbImyzuo/zVZCwol+1BqTwTA /BDdx6zAFGK4F3CaMJLV0U3C0zkMU710iuBSUYj5XErZ7bk1xnX1Cg2C8rF2NIsf tmwFMA4u2SP5qC/DmXsvCLIGBDCGFCMx4lEsYx3rV8mdquBUNuaT8nRS89QT9bhl fAALjpY0CEt9nTeAhU4YyM2GxAr+d9X7bXnRhSM3p8Fa6CB+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg0/kX2lnfe7+6Co8yGdRzqyf/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTIyNGRjNWYtYjllNC0z ZjUzLWEwNWItODhjMGEwZThhNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEznhNeFjfr76SNoVl4ce556NfsgbjVQEQKW0+7eH56c4fXUliQSzbyS 5HRo/WkNHJURJS7ZilZ1/tzYvDFA74SioBMXbHCRDrM7RW898ESjJpFsZRpT2w5v ExQALxliepLyXVd/PexUbRkMwVpupc+NqbuzgvihveHI4Z2yYSjO3Oz4rXOUkyps LsfPAN88hoYRIf2Jrr8Nq1vUWCSfKN8yNDicvnASqkL1FiE5V9+DggCDrHIb9GB4 9e6m5N8rgzfowtMpE+8elQMHvJTiV50iCF+IVU4RPkJn44RVPn8KEl/Bu2S6vIqU G4kmcugUNVpaSKQolPnrP6xhN3P32t4= -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:07 2025 by rpki-client