This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a506c3a4-9fc2-3eff-a60e-aa8fac3a9f1d.roa File: a506c3a4-9fc2-3eff-a60e-aa8fac3a9f1d.roa (raw, json) Hash identifier: jmZrf4A+sUzSP84TtLTw/li148e0+5/osuKDl7ljguI= Subject key identifier: 58:6E:61:CC:14:A0:B8:20:DD:14:57:8A:14:50:BA:C7:45:0F:B8:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140B661FCEBDB66A51804D2 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a506c3a4-9fc2-3eff-a60e-aa8fac3a9f1d.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.104.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:b6:61:fc:eb:db:66:a5:18:04:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=4d3bd07a-7521-4753-b06c-3fb9974fdea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:2c:0e:61:fd:6d:0d:fc:7d:d9:01:35:ae: 91:7d:13:b1:66:fc:fe:6b:66:5e:36:89:8f:71:7f: e7:0f:bc:49:53:45:63:fd:c5:a1:de:34:1f:52:f1: a1:38:25:6b:50:e4:e3:81:39:8a:90:b6:f0:04:8c: e0:53:9b:30:c1:94:f3:5a:02:97:14:de:45:0d:71: 9d:f5:ef:49:17:0d:23:db:3f:85:81:61:55:b7:43: 5a:cd:9b:84:3c:82:ba:a4:6a:e2:ac:74:fb:d9:1b: fd:ea:23:19:06:48:2b:76:d6:66:f4:38:9f:f2:1e: e9:d2:be:84:c6:75:d0:15:80:c2:df:e4:1a:e5:9f: ac:02:5e:a0:7d:fd:87:54:f4:a0:79:1e:85:c7:d0: 20:4a:bf:84:cf:fd:8f:5f:72:9a:9c:49:c5:22:40: fb:18:97:21:74:57:75:ce:3f:c5:64:89:67:98:76: cf:c3:03:c0:dd:48:61:94:0b:4b:f6:d3:c2:fd:3e: 73:16:30:f2:6e:19:67:cc:17:b6:44:64:1d:a2:32: 1b:ba:67:4a:80:d3:fc:1e:a8:b8:14:a5:a6:30:20: 70:f4:99:93:cf:e9:33:88:a7:51:7f:76:10:5d:5a: bf:74:d8:76:ed:d6:8b:f5:a0:0f:bc:45:05:a0:1d: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6E:61:CC:14:A0:B8:20:DD:14:57:8A:14:50:BA:C7:45:0F:B8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a506c3a4-9fc2-3eff-a60e-aa8fac3a9f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d2:65:f1:aa:cd:2d:e1:43:46:82:ce:b5:0f:31:db:38:28: f5:c7:78:9a:86:ba:8f:9b:53:e7:f0:d2:13:29:d4:73:23:a0: 06:e2:3f:56:1a:52:88:d3:98:0b:53:7b:f7:ae:0a:54:c2:13: 74:e0:35:69:c9:2b:c8:bf:11:77:0c:cb:01:70:1d:73:65:92: ed:aa:29:75:87:01:2e:86:4e:87:0d:05:e8:3b:63:c4:fa:0d: 9e:10:d3:75:03:e0:86:82:91:17:3e:c1:95:a0:24:6a:11:62: e0:41:bd:d5:db:7d:ce:fd:4d:40:a7:78:e2:06:da:d6:07:c3: ed:90:2f:b3:ce:50:57:cc:64:86:a5:c8:a7:5c:5c:2a:55:e8: 59:e0:04:02:02:ec:d9:ca:5e:dd:56:8b:e3:52:89:9a:29:f6: 18:cb:c3:ca:5b:8c:b9:34:f1:d9:61:d3:4f:fd:b7:d2:be:20: d2:9f:b0:ee:77:b9:33:d7:a3:e3:4e:b8:c7:97:e7:8a:44:2d: ec:8e:46:c1:d7:e0:65:59:87:50:ff:89:47:a0:1d:18:5e:13: 73:11:e4:f5:e7:50:e1:fc:0d:3c:78:37:7f:28:de:85:2c:01: b7:89:0a:6b:84:ca:78:bc:7f:b0:8c:59:a4:6e:45:ea:f9:9c: ee:22:2e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQLZh/OvbZqUYBNIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk NGQzYmQwN2EtNzUyMS00NzUzLWIwNmMtM2ZiOTk3NGZkZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEUsDmH9bQ38fdkBNa6RfROxZvz+a2ZeNomP cX/nD7xJU0Vj/cWh3jQfUvGhOCVrUOTjgTmKkLbwBIzgU5swwZTzWgKXFN5FDXGd 9e9JFw0j2z+FgWFVt0NazZuEPIK6pGrirHT72Rv96iMZBkgrdtZm9Dif8h7p0r6E xnXQFYDC3+Qa5Z+sAl6gff2HVPSgeR6Fx9AgSr+Ez/2PX3KanEnFIkD7GJchdFd1 zj/FZIlnmHbPwwPA3UhhlAtL9tPC/T5zFjDybhlnzBe2RGQdojIbumdKgNP8Hqi4 FKWmMCBw9JmTz+kziKdRf3YQXVq/dNh27daL9aAPvEUFoB15nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhuYcwUoLgg3RRXihRQusdFD7jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTUwNmMzYTQtOWZjMi0z ZWZmLWE2MGUtYWE4ZmFjM2E5ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLSZfGqzS3hQ0aCzrUPMds4KPXHeJqGuo+bU+fw0hMp1HMjoAbiP1Ya UojTmAtTe/euClTCE3TgNWnJK8i/EXcMywFwHXNlku2qKXWHAS6GTocNBeg7Y8T6 DZ4Q03UD4IaCkRc+wZWgJGoRYuBBvdXbfc79TUCneOIG2tYHw+2QL7POUFfMZIal yKdcXCpV6FngBAIC7NnKXt1Wi+NSiZop9hjLw8pbjLk08dlh00/9t9K+INKfsO53 uTPXo+NOuMeX54pELeyORsHX4GVZh1D/iUegHRheE3MR5PXnUOH8DTx4N38o3oUs AbeJCmuEyni8f7CMWaRuRer5nO4iLoc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:06 2025 by rpki-client