This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa File: a9e9f418-93e9-3eeb-b336-c509d8583262.roa (raw, json) Hash identifier: WCebRgyLQinGQWcUHwtrA5l1bzW32gRJKwZQ4RxVmjg= Subject key identifier: F6:62:76:DD:26:AF:1B:EA:B9:94:9A:B9:8B:32:70:BA:CE:99:8B:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666F22FB9315E8CDB243F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.99.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:f2:2f:b9:31:5e:8c:db:24:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=f58b7dcd-5329-4547-8e1c-587485fd13bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:2e:ef:19:5a:65:b1:0b:fe:5f:2f:b9:81: 74:00:da:95:0b:6a:f6:c9:e0:ef:28:99:1f:fd:50: 88:fb:32:f4:ff:e8:34:02:87:1e:e6:4e:43:31:09: dd:18:cb:8c:c5:7f:20:d3:09:5d:53:b3:d4:08:8d: bd:21:b0:ba:05:c2:96:6a:f5:a6:d7:17:2c:fe:4c: 14:03:9d:62:9d:1c:ff:59:cf:b1:52:93:fb:ee:79: eb:aa:17:33:46:4e:16:51:92:2e:fc:99:f0:8e:5c: 40:8f:99:aa:35:22:15:65:4d:8b:f0:62:41:5f:e0: da:f4:d2:b1:50:db:51:ca:18:3f:90:2a:d3:c1:16: 34:8e:15:b6:f3:ad:ab:02:70:d9:ec:99:56:fc:53: f2:bb:b1:cf:b6:22:ab:05:11:35:c3:08:15:01:70: b5:af:0c:b2:9c:ee:23:49:01:ed:cd:05:ba:2c:87: c4:50:ac:0a:13:4e:3d:57:d9:05:de:8b:55:76:00: 51:f2:49:c0:ef:ce:3f:81:d2:37:f1:b1:e9:80:10: e3:f0:0b:96:2f:af:32:4d:ca:23:21:22:b4:72:61: 8d:75:04:d6:1c:c3:76:4f:2a:86:86:8e:79:a2:b9: 78:c6:ac:23:70:05:93:af:ff:ed:8a:10:b6:99:52: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:62:76:DD:26:AF:1B:EA:B9:94:9A:B9:8B:32:70:BA:CE:99:8B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5e:49:46:2e:e8:df:a1:6c:82:e8:7e:2a:57:b8:92:82:29: af:79:c5:83:94:0a:9d:c3:61:c0:fa:a5:26:03:5e:59:c5:77: 07:8c:b3:89:6b:7e:01:4a:ed:25:63:73:9e:5f:a0:ea:97:67: 56:91:6d:4d:e0:64:89:84:79:28:43:09:d5:b5:dc:8b:d8:fe: 04:bd:1e:de:fa:cb:55:55:7f:86:ee:c3:db:dd:2f:22:71:3b: 17:24:e3:df:82:d0:36:f3:3f:7a:36:2a:fb:de:85:df:4a:9c: c7:40:5b:af:6f:f6:ec:66:1c:e1:82:ae:2e:91:ce:4d:3c:9e: a3:19:35:18:49:f8:ea:da:95:33:25:fc:c4:91:71:e4:c5:53: 93:76:75:c4:43:84:11:92:40:aa:cc:91:42:51:5d:4a:d7:a7: 11:3c:45:50:c1:0e:df:70:87:16:96:78:5b:06:77:31:c4:55: 45:d1:4a:de:c2:89:a6:a4:57:19:66:38:cc:24:d8:72:fb:1b: 5d:e6:9d:d7:25:6c:79:bb:11:af:38:2e:51:1f:19:1b:a9:84: 2d:9d:2d:55:4c:da:39:d1:aa:35:6c:a3:59:98:58:53:cd:8e: 13:83:bd:9e:e1:22:7a:91:7d:4d:ca:4d:94:14:3b:25:d3:d6: f7:ec:03:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZvIvuTFejNskP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZjU4YjdkY2QtNTMyOS00NTQ3LThlMWMtNTg3NDg1ZmQxM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysUu7xlaZbEL/l8vuYF0ANqVC2r2yeDvKJkf /VCI+zL0/+g0Aoce5k5DMQndGMuMxX8g0wldU7PUCI29IbC6BcKWavWm1xcs/kwU A51inRz/Wc+xUpP77nnrqhczRk4WUZIu/JnwjlxAj5mqNSIVZU2L8GJBX+Da9NKx UNtRyhg/kCrTwRY0jhW2862rAnDZ7JlW/FPyu7HPtiKrBRE1wwgVAXC1rwyynO4j SQHtzQW6LIfEUKwKE049V9kF3otVdgBR8knA784/gdI38bHpgBDj8AuWL68yTcoj ISK0cmGNdQTWHMN2TyqGho55orl4xqwjcAWTr//tihC2mVJN9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZidt0mrxvquZSauYsycLrOmYtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTllOWY0MTgtOTNlOS0z ZWViLWIzMzYtYzUwOWQ4NTgzMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5eSUYu6N+hbILofipXuJKCKa95xYOUCp3DYcD6pSYDXlnFdweMs4lr fgFK7SVjc55foOqXZ1aRbU3gZImEeShDCdW13IvY/gS9Ht76y1VVf4buw9vdLyJx Oxck49+C0DbzP3o2Kvvehd9KnMdAW69v9uxmHOGCri6Rzk08nqMZNRhJ+OralTMl /MSRceTFU5N2dcRDhBGSQKrMkUJRXUrXpxE8RVDBDt9whxaWeFsGdzHEVUXRSt7C iaakVxlmOMwk2HL7G13mndclbHm7Ea84LlEfGRuphC2dLVVM2jnRqjVso1mYWFPN jhODvZ7hInqRfU3KTZQUOyXT1vfsA38= -----END CERTIFICATE-----Generated at Sun Jan 25 11:10:26 2026 by rpki-client