This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7492d45-b781-3229-9666-4c4c4734ac14.roa File: a7492d45-b781-3229-9666-4c4c4734ac14.roa (raw, json) Hash identifier: tSgC4z6ftzqmJKh53awPj7/EgfzE+cvD8Z+Lwb02llU= Subject key identifier: 7D:35:A3:02:7B:3C:9B:99:53:1C:20:31:90:65:3E:C4:1F:FA:12:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFA45FA7B71312259C23CDE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7492d45-b781-3229-9666-4c4c4734ac14.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 22773 IP address blocks: 68.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:fa:7b:71:31:22:59:c2:3c:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=2f2a551c-280f-463c-964b-6622fbc8eb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:40:78:13:7a:2f:33:a8:eb:7c:8b:5f:c8: ee:ec:f8:b3:cd:4a:77:bb:46:8e:42:2c:e3:1e:29: 46:fe:5b:92:3c:23:6f:0e:f3:58:58:1b:9d:7a:3b: de:21:c2:53:c0:d1:1a:ac:1c:95:b4:2d:ed:19:6c: e9:0a:05:fb:e6:58:14:ee:c7:e6:df:ce:d3:c5:6d: 8c:07:0a:54:5c:e6:37:1a:42:f6:46:30:be:4e:3c: 0d:69:fd:68:b4:83:2c:a0:7f:c2:1b:01:20:76:f4: 2a:a6:dc:b7:43:65:11:6b:16:26:e7:be:29:19:fd: 03:a5:62:9d:66:d7:d0:e8:33:46:d9:5a:7b:e9:a0: 2e:e9:70:3e:7a:2c:d2:5e:05:e4:d0:59:42:b2:82: 52:7b:ae:42:e0:12:06:1b:70:26:67:86:c2:6f:73: 64:31:ba:fe:fb:46:32:95:ea:76:58:fd:e9:8c:0f: ef:1e:56:9a:9d:ed:e8:70:65:22:3f:98:d1:ac:50: 5e:a6:6c:f5:2c:33:b0:60:aa:41:43:2f:7e:b2:24: 55:ae:7c:cc:b8:c7:dc:5a:4e:51:82:55:4a:68:5f: 41:c1:d7:32:21:14:b2:b4:52:a7:06:dc:63:56:26: 42:25:71:8f:0a:53:7a:4c:ec:98:98:cc:4a:76:91: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:A3:02:7B:3C:9B:99:53:1C:20:31:90:65:3E:C4:1F:FA:12:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7492d45-b781-3229-9666-4c4c4734ac14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:1a:23:a8:2a:93:4c:2c:6c:52:43:df:39:f2:a6:00:d6:4f: a1:e8:ad:80:94:86:82:26:2e:8e:dc:be:4c:46:8f:1b:3b:3a: c1:8d:33:b3:90:0b:33:68:cc:bb:50:68:4b:43:ae:33:a5:90: d0:ac:69:9d:91:a2:eb:8f:38:c5:37:1c:9d:a3:28:c8:a5:4c: 49:59:31:66:a7:7d:48:66:c9:40:1f:72:72:6c:6d:28:c3:11: af:c3:eb:b0:f7:4c:72:0c:cb:7b:e1:19:2f:4f:ec:6b:7b:d7: 4a:e3:ea:6c:d1:4b:13:b2:94:2f:78:3b:a4:08:df:43:fe:06: 16:0d:4d:3d:94:99:cc:6a:23:92:25:36:ad:40:bd:39:5b:ae: 99:5d:c5:c4:a1:4f:d6:16:2e:04:f5:54:12:48:a1:85:f7:9a: 93:95:26:51:97:e9:ed:b9:00:ab:0e:7f:ff:b1:b1:06:60:4c: 1a:ec:84:cf:57:a9:ac:ed:73:26:42:11:22:36:8d:17:a9:3e: 01:f9:51:f9:92:d9:6d:3a:09:fd:46:60:65:80:03:9b:3d:ed: 6a:e2:36:16:77:c6:4b:02:11:f3:0e:7f:a6:11:dc:fd:4c:db: f7:19:a6:7c:f3:e9:31:64:1b:aa:80:d2:8c:26:fa:92:15:3a: ad:a3:6d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6Rfp7cTEiWcI83gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk MmYyYTU1MWMtMjgwZi00NjNjLTk2NGItNjYyMmZiYzhlYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t1AeBN6LzOo63yLX8ju7PizzUp3u0aOQizj HilG/luSPCNvDvNYWBudejveIcJTwNEarByVtC3tGWzpCgX75lgU7sfm387TxW2M BwpUXOY3GkL2RjC+TjwNaf1otIMsoH/CGwEgdvQqpty3Q2URaxYm574pGf0DpWKd ZtfQ6DNG2Vp76aAu6XA+eizSXgXk0FlCsoJSe65C4BIGG3AmZ4bCb3NkMbr++0Yy lep2WP3pjA/vHlaane3ocGUiP5jRrFBepmz1LDOwYKpBQy9+siRVrnzMuMfcWk5R glVKaF9BwdcyIRSytFKnBtxjViZCJXGPClN6TOyYmMxKdpE2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH01owJ7PJuZUxwgMZBlPsQf+hJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTc0OTJkNDUtYjc4MS0z MjI5LTk2NjYtNGM0YzQ3MzRhYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQaI6gqk0wsbFJD3znypgDWT6HorYCUhoImLo7cvkxGjxs7OsGNM7OQ CzNozLtQaEtDrjOlkNCsaZ2RouuPOMU3HJ2jKMilTElZMWanfUhmyUAfcnJsbSjD Ea/D67D3THIMy3vhGS9P7Gt710rj6mzRSxOylC94O6QI30P+BhYNTT2UmcxqI5Il Nq1AvTlbrpldxcShT9YWLgT1VBJIoYX3mpOVJlGX6e25AKsOf/+xsQZgTBrshM9X qaztcyZCESI2jRepPgH5UfmS2W06Cf1GYGWAA5s97WriNhZ3xksCEfMOf6YR3P1M 2/cZpnzz6TFkG6qA0owm+pIVOq2jbcE= -----END CERTIFICATE-----Generated at Sat Dec 6 18:27:51 2025 by rpki-client