This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a454ae5f-c293-308f-bac1-2500aa4157ba.roa File: a454ae5f-c293-308f-bac1-2500aa4157ba.roa (raw, json) Hash identifier: iT7RUSd7d3kFSkrpJnfvyGyvAzi3DbUZZ9PDGNyjj2E= Subject key identifier: D1:23:1B:5E:1E:41:00:D9:CA:A2:B8:5D:0B:C3:E3:54:6C:F1:58:4D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140D1B545D46390FE196DA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a454ae5f-c293-308f-bac1-2500aa4157ba.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:d1:b5:45:d4:63:90:fe:19:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=e895f7a3-8c28-42d0-ac36-f3c0ac7d3e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:8e:fa:52:5e:ac:25:0d:63:9d:d0:49:f2: de:92:97:9d:a7:dd:67:1b:9d:d3:f8:2f:94:e8:99: e4:e3:80:40:ce:e2:89:32:dc:90:b4:4e:b5:82:e7: dd:21:36:17:72:25:61:ec:c8:31:3d:4b:2b:58:3d: e1:54:10:36:15:17:1f:68:cf:f2:5c:10:83:fa:91: 6a:a2:54:cd:a5:b7:0d:e7:c6:f1:4c:3e:83:81:e9: a8:39:7e:9b:bd:5b:4a:aa:fd:97:04:08:4e:b8:87: d0:14:bd:79:1c:c1:fe:32:bf:81:37:85:88:72:0c: 82:ed:6f:fa:e0:ea:11:5f:33:71:5f:2f:73:a7:36: a6:a3:42:02:51:7e:5e:29:f4:d9:e6:51:46:01:75: b0:34:85:21:8e:34:de:1f:ad:58:8c:96:db:89:c1: 19:d0:bb:84:14:93:3c:fc:87:52:c3:9f:01:ab:40: 0d:09:20:92:cd:15:36:b6:4d:41:f2:12:8d:45:8c: dc:07:83:41:4a:14:b3:9c:1e:8e:48:ea:02:69:f2: ab:fa:23:5b:a9:f2:6c:bb:3e:cf:23:6e:b1:01:e6: e5:10:09:11:fe:8a:a8:a4:cf:74:07:66:74:7e:a6: f8:79:38:9e:c0:6c:a3:74:86:ab:ad:37:af:7d:56: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:1B:5E:1E:41:00:D9:CA:A2:B8:5D:0B:C3:E3:54:6C:F1:58:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a454ae5f-c293-308f-bac1-2500aa4157ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:93:15:d7:7d:c1:6b:ed:57:80:df:f8:9d:cf:4d:f0:b3:e5: e1:0d:8f:69:dc:77:90:70:55:78:06:fa:3e:04:b2:03:ff:81: c2:b6:55:bf:3b:c3:dd:ec:f3:9b:74:18:7a:a7:39:f1:bd:ac: 8e:23:fb:47:b1:14:54:aa:b1:cd:fc:a3:5f:8f:ae:3c:1e:6d: 2f:3e:6b:c9:79:c8:0c:44:f3:9f:74:9e:bf:7c:70:a2:a7:dd: 50:e3:e5:8a:ea:0c:ae:69:af:c9:22:65:82:74:0c:22:50:7c: 98:d1:1a:ad:e9:45:5c:35:b7:ee:46:0a:dd:6e:c2:96:80:c8: 5a:8f:70:8a:ed:d9:fb:9b:28:96:34:80:a3:43:0a:36:8a:6e: 1c:ec:3c:09:b0:5a:8c:93:85:8f:cd:d2:37:65:1d:a2:18:06: 84:b2:19:27:e2:d5:76:8d:16:40:19:8a:08:c9:1b:63:55:39: b1:ff:14:e3:11:cc:41:aa:de:6c:f7:c7:1b:f2:ec:42:66:50: 89:cb:b9:bc:70:11:f2:51:da:3a:62:b0:39:89:12:6e:57:a9: 3f:64:76:2b:aa:74:79:77:ee:7c:b1:f5:07:b5:77:12:33:d8: fb:8c:7e:dd:aa:08:f5:06:93:04:53:f5:82:0a:64:d8:30:3f: 31:c8:f7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQNG1RdRjkP4ZbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk ZTg5NWY3YTMtOGMyOC00MmQwLWFjMzYtZjNjMGFjN2QzZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrKO+lJerCUNY53QSfLekpedp91nG53T+C+U 6Jnk44BAzuKJMtyQtE61gufdITYXciVh7MgxPUsrWD3hVBA2FRcfaM/yXBCD+pFq olTNpbcN58bxTD6DgemoOX6bvVtKqv2XBAhOuIfQFL15HMH+Mr+BN4WIcgyC7W/6 4OoRXzNxXy9zpzamo0ICUX5eKfTZ5lFGAXWwNIUhjjTeH61YjJbbicEZ0LuEFJM8 /IdSw58Bq0ANCSCSzRU2tk1B8hKNRYzcB4NBShSznB6OSOoCafKr+iNbqfJsuz7P I26xAeblEAkR/oqopM90B2Z0fqb4eTiewGyjdIarrTevfVbTqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEjG14eQQDZyqK4XQvD41Rs8VhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTQ1NGFlNWYtYzI5My0z MDhmLWJhYzEtMjUwMGFhNDE1N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOTFdd9wWvtV4Df+J3PTfCz5eENj2ncd5BwVXgG+j4EsgP/gcK2Vb87 w93s85t0GHqnOfG9rI4j+0exFFSqsc38o1+PrjwebS8+a8l5yAxE8590nr98cKKn 3VDj5YrqDK5pr8kiZYJ0DCJQfJjRGq3pRVw1t+5GCt1uwpaAyFqPcIrt2fubKJY0 gKNDCjaKbhzsPAmwWoyThY/N0jdlHaIYBoSyGSfi1XaNFkAZigjJG2NVObH/FOMR zEGq3mz3xxvy7EJmUInLubxwEfJR2jpisDmJEm5XqT9kdiuqdHl37nyx9Qe1dxIz 2PuMft2qCPUGkwRT9YIKZNgwPzHI9/A= -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:22 2025 by rpki-client