This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa File: af7da248-524d-3bf8-a7d1-341e26104528.roa (raw, json) Hash identifier: 1c4YzmE6GYQX24QtsiFandXfPRlOL2TKqjFpWw8Hrhk= Subject key identifier: 5B:0B:4E:2F:B7:FC:97:27:FA:BD:35:25:AF:C6:9A:93:70:1E:8A:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C48711872582ED3BFBB001A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 22773 IP address blocks: 70.190.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:18:72:58:2e:d3:bf:bb:00:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=a3a386a5-9491-401a-b77e-32884f87f59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:27:e0:27:25:91:68:dd:28:c8:2c:e8:d5: c8:d0:4c:89:d0:a7:b0:3f:c5:90:38:13:b6:ae:76: cb:7b:22:eb:b9:88:be:27:86:51:db:40:5a:30:65: 60:ef:88:1f:8f:2e:8f:8b:d3:66:99:23:c5:97:ef: da:90:b7:21:80:83:d8:70:52:d2:e6:15:b0:34:04: 13:d9:9a:70:9f:af:ec:13:60:e7:24:16:2d:2c:a0: 7e:4e:57:16:03:a4:ba:cc:25:77:b4:36:c0:3f:62: 2f:3a:9b:a5:32:d8:93:7f:21:2e:bf:24:36:f3:4c: e5:20:ab:87:33:02:23:ce:02:ba:78:4d:f6:53:b4: fe:bb:60:9b:d6:86:6e:e6:89:2f:b1:6a:46:50:45: bf:7a:e9:e0:f5:d8:63:b8:55:f2:69:db:7d:ca:08: 4f:0a:2d:6a:03:91:f4:48:30:f1:e4:a8:e5:fb:51: 49:a1:de:3f:34:d8:95:9f:38:b6:b2:e1:d7:3a:fd: 23:5d:66:ee:5f:98:c2:30:e0:47:7b:aa:ba:a2:f7: ae:57:d9:a1:65:8b:c4:95:14:8b:8f:f6:e9:e2:6d: 99:0b:66:ef:f3:5b:77:1f:fa:09:a5:ca:d7:8c:79: 66:4f:43:7c:db:a6:8f:a7:dc:96:ef:7e:f7:96:49: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:4E:2F:B7:FC:97:27:FA:BD:35:25:AF:C6:9A:93:70:1E:8A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7da248-524d-3bf8-a7d1-341e26104528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:88:f9:87:51:5d:57:a4:53:ec:b1:2f:13:5d:0b:f3:a6:da: a3:a8:60:97:09:dc:cc:c4:28:56:7a:6a:bf:36:d6:f4:cb:e4: 74:61:12:16:bd:fc:8a:41:05:05:ce:e5:13:88:d0:2d:4f:7b: 8b:5c:b9:45:63:11:02:5c:57:b9:21:b1:5d:e3:7f:5b:a9:61: 84:2e:8a:b1:a7:25:ee:03:4b:6b:66:ec:e2:32:9a:de:d9:39: 13:fa:92:68:be:0f:1e:15:cd:c1:3c:29:aa:e3:ea:43:1e:c7: fb:77:8c:3f:4b:4a:04:a4:89:e2:ab:ec:4d:ad:e6:30:9f:32: 79:48:2a:a5:d0:4f:ef:7e:d4:87:1a:11:12:6f:4c:13:28:08: c7:af:82:94:f7:1a:cc:bb:e8:ef:72:7a:c3:07:2c:60:cd:01: 6f:f1:3b:f3:c8:17:1e:d1:b6:0a:6c:4c:92:6a:93:4b:ca:45: 72:40:a6:4c:9d:54:a8:97:f9:0b:c9:3a:53:18:0e:13:c5:8a: f0:75:5d:64:33:80:f2:92:81:51:a7:1a:01:8c:e4:6a:9f:1d: 5e:d2:ec:77:d8:47:22:0e:cb:af:61:26:fe:e6:5d:31:cb:67: 82:bc:63:c3:45:45:f2:42:21:15:b8:a7:2c:61:38:37:11:53: 7b:07:35:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcRhyWC7Tv7sAGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YTNhMzg2YTUtOTQ5MS00MDFhLWI3N2UtMzI4ODRmODdmNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzkn4CclkWjdKMgs6NXI0EyJ0KewP8WQOBO2 rnbLeyLruYi+J4ZR20BaMGVg74gfjy6Pi9NmmSPFl+/akLchgIPYcFLS5hWwNAQT 2Zpwn6/sE2DnJBYtLKB+TlcWA6S6zCV3tDbAP2IvOpulMtiTfyEuvyQ280zlIKuH MwIjzgK6eE32U7T+u2Cb1oZu5okvsWpGUEW/eung9dhjuFXyadt9yghPCi1qA5H0 SDDx5Kjl+1FJod4/NNiVnzi2suHXOv0jXWbuX5jCMOBHe6q6oveuV9mhZYvElRSL j/bp4m2ZC2bv81t3H/oJpcrXjHlmT0N826aPp9yW7373lkmqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsLTi+3/Jcn+r01Ja/GmpNwHopMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY3ZGEyNDgtNTI0ZC0z YmY4LWE3ZDEtMzQxZTI2MTA0NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKI+YdRXVekU+yxLxNdC/Om2qOoYJcJ3MzEKFZ6ar821vTL5HRhEha9 /IpBBQXO5ROI0C1Pe4tcuUVjEQJcV7khsV3jf1upYYQuirGnJe4DS2tm7OIymt7Z ORP6kmi+Dx4VzcE8Karj6kMex/t3jD9LSgSkieKr7E2t5jCfMnlIKqXQT+9+1Ica ERJvTBMoCMevgpT3Gsy76O9yesMHLGDNAW/xO/PIFx7RtgpsTJJqk0vKRXJApkyd VKiX+QvJOlMYDhPFivB1XWQzgPKSgVGnGgGM5GqfHV7S7HfYRyIOy69hJv7mXTHL Z4K8Y8NFRfJCIRW4pyxhODcRU3sHNdw= -----END CERTIFICATE-----Generated at Sun Jan 25 14:07:46 2026 by rpki-client