This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af38672e-5045-3127-a4b1-1713d25b6067.roa File: af38672e-5045-3127-a4b1-1713d25b6067.roa (raw, json) Hash identifier: DOfv7+7hEYGLg+qIqRHeuhg3HIr3rB3n9RuFRG7fAuk= Subject key identifier: 5A:35:E3:E6:09:E7:6C:A4:F3:F9:62:E6:8B:78:83:DA:8C:D2:9F:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C566708428F65A4E9B8281760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af38672e-5045-3127-a4b1-1713d25b6067.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.7.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:08:42:8f:65:a4:e9:b8:28:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=eef3dbc1-a943-4e2c-80da-154a9adc9ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:cd:a7:35:66:3d:0b:e8:e8:cf:c7:4c:eb: 86:fa:00:ff:d1:2f:09:0e:18:82:ce:27:7a:08:34: eb:21:f7:ef:ae:f8:30:c4:f1:33:43:d6:e9:73:5a: cf:74:28:af:c5:83:3a:c2:6e:09:a0:e6:7e:45:f6: c2:f8:3f:96:bc:8a:c3:eb:a0:29:8d:ce:e7:d4:a5: 5b:8e:83:be:a6:d1:b7:27:3b:6b:20:ed:28:67:5e: ed:1d:1e:35:dd:9c:61:08:93:ed:c2:fa:4a:c0:79: 96:33:b8:ed:12:17:fa:46:65:fd:a7:26:fa:78:e2: e7:40:09:97:18:9b:81:95:c0:89:d5:cf:72:dc:88: 5d:8d:d4:f9:58:7d:c4:dd:54:7f:48:19:82:4c:2f: 79:ae:f9:91:86:68:0a:a0:99:10:d6:c9:9e:3a:98: a1:10:24:ee:51:1a:2a:38:97:b9:90:34:d9:83:1b: 5d:50:81:85:42:30:ee:0a:af:b3:d9:44:2c:f2:07: 2d:25:70:08:b9:e8:7a:b6:7b:4e:4e:77:cb:a4:d4: 81:d6:5c:4b:1d:44:a5:78:3d:ce:25:fa:a0:d0:bf: 3c:c9:2d:62:e5:d1:a6:0e:1c:60:9d:49:b6:9b:2f: 89:ec:01:a5:cf:6f:ce:a5:56:93:e4:bb:bf:6a:fb: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:E3:E6:09:E7:6C:A4:F3:F9:62:E6:8B:78:83:DA:8C:D2:9F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af38672e-5045-3127-a4b1-1713d25b6067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:23:3b:b2:dc:66:4d:cd:ed:71:52:f0:5a:6b:cc:f2:5f:f2: e6:61:85:f8:5e:9e:3c:63:1a:8b:6b:56:c8:fc:ce:41:bb:a3: 97:49:f0:97:51:03:db:67:5e:fb:59:d2:de:79:f1:02:95:85: af:26:1d:47:b2:dd:65:75:d4:8d:af:1d:a8:59:80:9f:59:71: 89:f0:fa:32:30:0b:69:03:56:ee:90:8f:8a:2d:d7:3e:da:b3: 8f:83:11:1c:e4:9f:b7:96:fb:8d:17:6c:c6:40:35:97:84:9e: 15:be:95:6c:92:61:bf:70:38:fc:0f:19:3c:07:01:55:ce:e4: e3:ae:e7:35:4f:b0:bc:6f:3e:1a:1e:f6:c4:97:bf:27:34:a4: b0:05:19:f2:99:79:dd:ff:c7:37:2e:3c:6a:e3:3c:e1:e3:29: cc:47:df:2c:4d:33:98:22:a5:72:e5:77:09:d4:f5:95:ca:2a: a2:4b:9c:64:8a:58:43:52:88:fb:0e:9a:9c:fc:bb:3a:8d:35: 92:83:5f:90:7c:e9:e6:22:e2:5f:df:2b:ab:66:64:a9:8d:bc: 0e:52:3e:b6:a6:4b:f1:00:56:f4:bf:b2:27:90:a9:ca:94:f2: 45:4a:e1:9c:dc:1e:4b:74:f1:d7:ef:12:5f:4f:4e:c8:15:08: d3:36:0e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZwhCj2Wk6bgoF2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZWVmM2RiYzEtYTk0My00ZTJjLTgwZGEtMTU0YTlhZGM5ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/PNpzVmPQvo6M/HTOuG+gD/0S8JDhiCzid6 CDTrIffvrvgwxPEzQ9bpc1rPdCivxYM6wm4JoOZ+RfbC+D+WvIrD66Apjc7n1KVb joO+ptG3JztrIO0oZ17tHR413ZxhCJPtwvpKwHmWM7jtEhf6RmX9pyb6eOLnQAmX GJuBlcCJ1c9y3IhdjdT5WH3E3VR/SBmCTC95rvmRhmgKoJkQ1smeOpihECTuURoq OJe5kDTZgxtdUIGFQjDuCq+z2UQs8gctJXAIueh6tntOTnfLpNSB1lxLHUSleD3O Jfqg0L88yS1i5dGmDhxgnUm2my+J7AGlz2/OpVaT5Lu/avtNBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo14+YJ52yk8/li5ot4g9qM0p9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYzODY3MmUtNTA0NS0z MTI3LWE0YjEtMTcxM2QyNWI2MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIjO7LcZk3N7XFS8FprzPJf8uZhhfhenjxjGotrVsj8zkG7o5dJ8JdR A9tnXvtZ0t558QKVha8mHUey3WV11I2vHahZgJ9ZcYnw+jIwC2kDVu6Qj4ot1z7a s4+DERzkn7eW+40XbMZANZeEnhW+lWySYb9wOPwPGTwHAVXO5OOu5zVPsLxvPhoe 9sSXvyc0pLAFGfKZed3/xzcuPGrjPOHjKcxH3yxNM5gipXLldwnU9ZXKKqJLnGSK WENSiPsOmpz8uzqNNZKDX5B86eYi4l/fK6tmZKmNvA5SPramS/EAVvS/sieQqcqU 8kVK4ZzcHkt08dfvEl9PTsgVCNM2Do0= -----END CERTIFICATE-----Generated at Sun Jan 25 15:57:13 2026 by rpki-client