This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa File: acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa (raw, json) Hash identifier: PlEtJSapR50E+mekR4zVn65gjpQRsfGf1p2uOeisZs8= Subject key identifier: D5:D5:95:B8:42:18:BF:6A:51:97:37:E1:A0:9C:9C:8F:19:38:F8:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB5C24F3767E934D731AA1F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.167.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:4f:37:67:e9:34:d7:31:aa:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=37b06763-4f7a-4236-bb07-ed67167be30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:b0:6f:b8:43:51:3b:08:e6:d7:6a:be:ed: 64:fd:c9:8a:94:3e:81:08:7e:90:0b:59:5f:ef:f7: 8c:c1:5a:f4:3b:13:77:7e:f3:cf:50:65:69:f7:d0: 20:69:b2:e1:39:2d:a2:13:69:22:78:76:f1:71:f9: 00:5d:85:5c:2f:6d:0d:8f:23:1b:02:da:7f:e8:0e: 58:1f:71:f7:1b:64:cf:ae:19:1d:e3:6a:4b:12:32: 5a:13:75:ff:20:2a:3d:8f:9b:b7:d2:40:01:f7:99: 8b:2c:8c:34:05:9b:d6:fd:0a:16:fb:b0:5b:2b:be: e6:5b:3a:fa:93:b1:5f:60:fe:1d:c4:ae:cb:5a:9f: e5:2a:d3:15:34:1c:61:92:a5:52:ae:d8:40:d5:64: 0a:fe:02:d7:65:24:0b:b9:6f:f1:cd:b3:4b:31:9c: 20:d6:28:b8:ee:70:9e:fc:42:95:eb:13:60:86:b2: bd:24:fb:54:d5:1f:55:cd:40:1e:88:ab:f4:c9:c3: 06:56:f0:5f:de:07:bf:57:ef:d7:17:5b:02:84:d5: a6:f6:f8:8b:29:f2:c0:12:1f:94:18:a8:7e:72:3c: e2:bf:01:ad:d6:88:d3:c6:91:e8:c7:b9:a0:ac:2d: 48:be:c1:e6:33:94:ac:0d:0c:bd:66:11:9a:6f:5a: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:95:B8:42:18:BF:6A:51:97:37:E1:A0:9C:9C:8F:19:38:F8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.167.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b8:ab:5d:96:ee:a8:90:99:81:5a:0e:32:93:5e:00:8d:24: 95:cb:64:3d:9f:5b:b8:8f:5c:2d:a6:e5:0f:2a:c2:9f:4f:d0: 44:d9:2d:03:0b:96:96:de:c1:c3:e6:61:9c:1f:f8:3c:3a:07: be:15:c4:28:3f:5c:b3:4c:4d:8b:51:6c:5e:ce:1a:7c:d8:fa: 83:37:f2:19:0c:f4:58:27:f6:20:9d:ee:33:b5:b9:54:c7:85: 23:53:62:8d:51:dd:c5:ad:e8:63:48:46:14:d4:03:48:4c:39: 1b:4d:c6:99:73:70:06:6b:2a:05:85:87:e4:de:e3:52:8e:2b: 30:cb:86:2f:ce:7d:8e:a9:1f:d4:7e:72:bf:f8:69:9c:41:be: 21:d0:cb:5e:de:58:a6:75:46:23:e9:d0:d7:87:f3:69:d5:1f: 1f:b3:03:99:bb:f9:2e:30:20:c2:34:8b:34:5f:8d:64:a4:00: c6:54:cc:b8:b4:00:d7:44:8b:ee:75:5f:d8:ea:40:e3:71:a3: 6a:ec:9d:5d:11:97:d1:c7:e8:25:0b:66:85:1b:18:69:ed:d7: b3:1c:9e:86:58:1e:ac:41:3a:5c:59:27:f5:56:ec:6b:fd:da: 30:58:64:bb:00:f5:17:ac:49:c2:29:5e:38:aa:3d:f0:ca:79: 5d:13:02:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wk83Z+k01zGqH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MzdiMDY3NjMtNGY3YS00MjM2LWJiMDctZWQ2NzE2N2JlMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ywb7hDUTsI5tdqvu1k/cmKlD6BCH6QC1lf 7/eMwVr0OxN3fvPPUGVp99AgabLhOS2iE2kieHbxcfkAXYVcL20NjyMbAtp/6A5Y H3H3G2TPrhkd42pLEjJaE3X/ICo9j5u30kAB95mLLIw0BZvW/QoW+7BbK77mWzr6 k7FfYP4dxK7LWp/lKtMVNBxhkqVSrthA1WQK/gLXZSQLuW/xzbNLMZwg1ii47nCe /EKV6xNghrK9JPtU1R9VzUAeiKv0ycMGVvBf3ge/V+/XF1sChNWm9viLKfLAEh+U GKh+cjzivwGt1ojTxpHox7mgrC1IvsHmM5SsDQy9ZhGab1rlawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXVlbhCGL9qUZc34aCcnI8ZOPiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWNmNDdhMGItMTY5ZS0z OWYxLWIwNjgtZDNiOTZiNmEyZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI24q12W7qiQmYFaDjKTXgCNJJXLZD2fW7iPXC2m5Q8qwp9P0ETZLQML lpbewcPmYZwf+Dw6B74VxCg/XLNMTYtRbF7OGnzY+oM38hkM9Fgn9iCd7jO1uVTH hSNTYo1R3cWt6GNIRhTUA0hMORtNxplzcAZrKgWFh+Te41KOKzDLhi/OfY6pH9R+ cr/4aZxBviHQy17eWKZ1RiPp0NeH82nVHx+zA5m7+S4wIMI0izRfjWSkAMZUzLi0 ANdEi+51X9jqQONxo2rsnV0Rl9HH6CULZoUbGGnt17McnoZYHqxBOlxZJ/VW7Gv9 2jBYZLsA9ResScIpXjiqPfDKeV0TAsA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:00 2025 by rpki-client