This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa File: a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa (raw, json) Hash identifier: pC20Y1k1CTVd6KoGtFsYaetHdcMmlfUyqlEpyCPM0bk= Subject key identifier: EA:81:20:82:5B:3D:45:D0:7F:7B:28:87:A7:5E:D1:5D:F9:C5:19:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56668F06319E06168122DA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.225.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:8f:06:31:9e:06:16:81:22:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=d58ac9ed-c6be-45f4-9c30-8c5f6ddb3d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:bb:8e:77:52:8b:79:48:ad:88:3d:f2:2e: 21:19:28:aa:de:62:4c:2d:8e:67:64:d9:2a:ec:44: ec:ee:53:fe:4a:65:64:70:70:93:2d:5a:00:3e:87: 0c:7a:a6:46:c1:94:05:22:d8:f7:49:a8:f3:63:32: 51:60:c2:03:97:d7:a4:e2:52:72:7b:78:09:b3:8f: 0b:64:66:bf:cc:4d:e5:5f:30:9b:92:9d:41:42:f1: 5d:2a:7a:a7:fb:ee:4d:ff:f8:60:ac:e1:99:76:57: 1e:00:65:33:58:1f:2c:44:00:bf:c1:c0:e1:80:ee: c3:9b:69:52:84:bf:53:5e:83:b0:06:08:5e:68:7a: 52:08:a5:27:de:ef:50:70:ae:e8:d7:b2:dd:21:bf: de:9a:26:81:05:e3:84:f4:d8:f2:a3:a6:3e:58:3e: e7:2e:69:7c:67:23:c6:50:cc:2d:73:b0:33:39:1c: 61:4c:cb:5d:3e:21:ee:c6:04:d2:c5:cc:06:c3:49: e1:3e:fa:82:e1:6c:3e:5f:1a:26:73:05:f2:6d:63: 04:07:91:85:ee:53:11:20:73:7d:f2:e8:21:9b:fe: b4:26:2a:57:cc:d6:03:82:bf:fe:d9:fd:8c:fe:2f: 14:b4:a6:21:f5:f3:79:1d:21:22:1d:81:ba:e4:75: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:20:82:5B:3D:45:D0:7F:7B:28:87:A7:5E:D1:5D:F9:C5:19:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ae:3f:72:78:ba:87:ae:b3:65:96:2a:09:b9:57:b6:2a:e2: 57:5f:78:0b:89:47:59:da:92:1c:18:ac:56:21:62:9a:1b:ba: 14:5f:fa:40:ec:30:3f:46:4e:ca:ec:b9:f6:01:df:c3:99:32: 52:6d:55:71:ff:68:b5:14:d0:87:bc:b5:c5:04:3a:83:62:81: 25:e1:36:68:aa:64:c3:27:07:fd:e4:8f:1c:6a:81:ec:1b:93: ca:00:05:fe:4a:ab:83:0e:ed:ca:86:ae:fe:50:62:1c:ef:95: 46:56:6e:95:95:b8:cb:98:4a:6b:b1:5b:db:77:e1:c3:e0:97: 6b:79:93:9d:82:dd:a3:aa:fe:3c:91:3a:2e:9f:22:7f:87:2e: 1d:ea:23:29:09:29:41:89:0e:c5:62:43:89:3c:d1:10:84:bb: 7e:f3:a6:8c:d8:d0:fb:d7:ff:9b:f3:94:ab:12:7c:d1:d1:11: 8e:ee:74:9a:25:ff:38:3c:46:12:fe:4e:e9:a9:e1:a2:f1:43: d6:17:8b:57:4a:84:1d:c4:b1:30:da:76:5c:96:f7:28:d5:a0: 0d:8d:1f:3c:48:70:d4:ab:ea:c6:a3:05:33:63:33:7e:aa:dd: 8f:e6:75:db:4e:60:27:9c:04:e6:64:b4:96:08:a2:b2:f5:7b: 4d:ad:9d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZo8GMZ4GFoEi2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZDU4YWM5ZWQtYzZiZS00NWY0LTljMzAtOGM1ZjZkZGIzZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis+7jndSi3lIrYg98i4hGSiq3mJMLY5nZNkq 7ETs7lP+SmVkcHCTLVoAPocMeqZGwZQFItj3SajzYzJRYMIDl9ek4lJye3gJs48L ZGa/zE3lXzCbkp1BQvFdKnqn++5N//hgrOGZdlceAGUzWB8sRAC/wcDhgO7Dm2lS hL9TXoOwBgheaHpSCKUn3u9QcK7o17LdIb/emiaBBeOE9Njyo6Y+WD7nLml8ZyPG UMwtc7AzORxhTMtdPiHuxgTSxcwGw0nhPvqC4Ww+XxomcwXybWMEB5GF7lMRIHN9 8ughm/60JipXzNYDgr/+2f2M/i8UtKYh9fN5HSEiHYG65HVeiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqBIIJbPUXQf3soh6de0V35xRl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2ZmI4ZGYtNzhiMS0z MWVjLWI0ZTQtODRlNWUwNjZhNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuuP3J4uoeus2WWKgm5V7Yq4ldfeAuJR1nakhwYrFYhYpobuhRf+kDs MD9GTsrsufYB38OZMlJtVXH/aLUU0Ie8tcUEOoNigSXhNmiqZMMnB/3kjxxqgewb k8oABf5Kq4MO7cqGrv5QYhzvlUZWbpWVuMuYSmuxW9t34cPgl2t5k52C3aOq/jyR Oi6fIn+HLh3qIykJKUGJDsViQ4k80RCEu37zpozY0PvX/5vzlKsSfNHREY7udJol /zg8RhL+Tump4aLxQ9YXi1dKhB3EsTDadlyW9yjVoA2NHzxIcNSr6sajBTNjM36q 3Y/mddtOYCecBOZktJYIorL1e02tnQ8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:36 2026 by rpki-client