This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa File: ae91e922-5a13-3be6-afdf-ab879717c6f7.roa (raw, json) Hash identifier: 23Gs21WUWk2JuUQ6KzSXsa8p7BR/8zMgsD9RWwSmDvg= Subject key identifier: D6:00:C7:11:B7:D5:44:1E:9D:8A:5E:41:98:94:7A:D9:F2:D3:D2:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666CE507F01BD3E753CE7E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 70.161.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ce:50:7f:01:bd:3e:75:3c:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=280e8c5d-02ab-4522-84d8-ef9c3b815221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:62:09:21:cd:25:8e:f8:06:02:0c:9f:7f: cc:e0:c5:18:a9:f1:54:37:ad:42:2c:23:c7:95:f9: c8:9e:27:74:c5:95:58:22:ad:a9:d9:1f:18:a5:63: c3:09:86:80:a7:85:f8:f5:4c:96:6b:90:a7:e9:e2: d2:e8:b0:38:da:05:2d:63:df:04:24:9a:aa:2c:40: 30:f4:25:7f:7a:42:d3:c2:d2:99:df:39:09:66:bd: 22:36:c4:11:52:dc:37:69:2e:ea:97:92:96:c4:0b: 62:68:aa:a0:bd:a7:e3:81:ed:97:e0:da:65:60:e7: 8a:a7:66:fa:64:0c:16:07:98:d2:45:63:a1:a3:ed: f6:00:ab:40:fc:f1:e7:43:c1:2a:2b:05:02:91:eb: 12:e0:64:a3:19:d0:72:80:e5:a2:f3:fa:e4:ee:a1: c3:1a:e8:cf:33:86:30:4c:1b:f4:e5:3c:e1:92:5a: 8b:d4:58:03:b5:9d:6c:ef:4d:2e:9b:01:9b:62:1a: 91:1b:83:bc:8a:77:43:5b:77:97:71:a8:6d:1e:65: 52:d7:b7:60:05:aa:15:f6:79:84:87:12:89:f7:f9: df:c7:98:6c:22:c9:32:17:96:9c:9a:f8:4f:fb:4c: df:11:8e:79:55:bf:03:0b:e0:2f:ed:0f:af:36:39: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:00:C7:11:B7:D5:44:1E:9D:8A:5E:41:98:94:7A:D9:F2:D3:D2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a9:db:2e:26:8f:d5:62:06:5e:27:aa:dc:42:3b:d4:1c:62: 18:76:f2:0e:9b:b2:49:8f:21:db:9d:dd:b6:3c:24:55:41:f9: fc:3e:6f:21:36:9a:2a:d0:dd:f2:fd:3a:91:08:42:b6:c0:04: 4d:3b:c5:e6:23:d2:7e:f8:51:e2:57:ea:17:c8:fc:01:89:72: 9e:19:6d:1c:26:6f:43:0f:1a:c9:c5:8c:ad:e1:5f:b9:02:06: b4:78:30:86:ff:c9:4b:8b:d6:ae:37:8a:96:e8:df:1f:a3:1e: 53:57:d9:b5:ec:22:43:98:ea:be:bd:da:69:09:16:06:e5:aa: c9:b9:70:9b:2d:96:11:4b:83:e5:1c:3e:53:5e:2b:53:f1:f0: 99:38:1c:97:8f:bb:66:7e:27:3a:10:e0:00:e7:ba:f4:ba:aa: 45:b8:23:c2:1f:2d:50:70:8d:e5:fd:51:48:86:3d:e6:fe:8f: 30:83:87:62:60:07:33:db:21:87:e4:78:52:bb:96:9c:3a:a2: 04:d1:cf:9d:9a:13:d7:6a:50:91:25:8c:d9:46:a0:9a:b1:05: f6:7b:f5:3a:44:be:c3:c7:4c:da:79:cc:fd:bb:1b:9f:58:b1: c2:58:de:02:84:fe:6e:0a:65:6e:ce:97:52:a9:10:1b:b9:27: cb:a1:93:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZs5QfwG9PnU85+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MjgwZThjNWQtMDJhYi00NTIyLTg0ZDgtZWY5YzNiODE1MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlViCSHNJY74BgIMn3/M4MUYqfFUN61CLCPH lfnInid0xZVYIq2p2R8YpWPDCYaAp4X49UyWa5Cn6eLS6LA42gUtY98EJJqqLEAw 9CV/ekLTwtKZ3zkJZr0iNsQRUtw3aS7ql5KWxAtiaKqgvafjge2X4NplYOeKp2b6 ZAwWB5jSRWOho+32AKtA/PHnQ8EqKwUCkesS4GSjGdBygOWi8/rk7qHDGujPM4Yw TBv05TzhklqL1FgDtZ1s700umwGbYhqRG4O8indDW3eXcahtHmVS17dgBaoV9nmE hxKJ9/nfx5hsIskyF5acmvhP+0zfEY55Vb8DC+Av7Q+vNjmCRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYAxxG31UQenYpeQZiUetny09KhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU5MWU5MjItNWExMy0z YmU2LWFmZGYtYWI4Nzk3MTdjNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICp2y4mj9ViBl4nqtxCO9QcYhh28g6bskmPIdud3bY8JFVB+fw+byE2 mirQ3fL9OpEIQrbABE07xeYj0n74UeJX6hfI/AGJcp4ZbRwmb0MPGsnFjK3hX7kC BrR4MIb/yUuL1q43ipbo3x+jHlNX2bXsIkOY6r692mkJFgblqsm5cJstlhFLg+Uc PlNeK1Px8Jk4HJePu2Z+JzoQ4ADnuvS6qkW4I8IfLVBwjeX9UUiGPeb+jzCDh2Jg BzPbIYfkeFK7lpw6ogTRz52aE9dqUJEljNlGoJqxBfZ79TpEvsPHTNp5zP27G59Y scJY3gKE/m4KZW7Ol1KpEBu5J8uhk1U= -----END CERTIFICATE-----Generated at Sun Jan 25 11:10:07 2026 by rpki-client