This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff6f14c-489d-3016-9494-42a2a615e3b6.roa File: aff6f14c-489d-3016-9494-42a2a615e3b6.roa (raw, json) Hash identifier: vXLqEiwnd+k9tGR7gX+q/CetIBHGwOg8psUG5P1VIkE= Subject key identifier: 27:C2:EC:C2:0A:4D:7E:15:D3:99:8E:BA:31:D5:3A:04:CE:6E:59:59 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFA45FF3B61FCF49B95675A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff6f14c-489d-3016-9494-42a2a615e3b6.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 22773 IP address blocks: 68.2.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:ff:3b:61:fc:f4:9b:95:67:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=2a99e801-efed-4e0c-8f21-aea7925f7b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:5a:1a:3d:7c:aa:b6:86:a1:cc:a1:97:13: 7a:61:30:0c:95:43:84:c3:b3:11:66:6d:d3:d5:28: 4f:14:1c:6f:df:2b:d4:a9:20:5d:19:6d:7d:20:03: e8:e1:e5:b7:c4:ad:fa:6f:90:a0:f7:26:22:49:54: 56:a0:1f:2f:bd:80:cf:63:05:4c:e8:6b:e5:73:99: d5:7f:ee:9f:db:2c:08:36:33:6f:39:29:bd:d6:8a: 14:76:f3:ae:1e:0b:a5:81:98:ef:cc:a8:a3:ec:da: 01:80:5c:79:d4:92:c1:15:f6:89:f5:bb:67:5b:8c: db:88:06:d6:88:fd:c4:38:f0:56:2c:b6:63:e4:a4: 45:2e:4d:c8:e0:66:a5:09:05:0c:24:3d:94:d4:39: 33:03:95:6f:d5:37:4a:43:bf:ac:b1:30:f8:6a:e5: 39:25:fa:0d:89:1b:37:b3:42:69:1a:61:50:7e:78: 83:e8:65:d1:0e:ba:fe:81:d8:f9:e9:32:89:e2:e1: 5f:0b:8c:58:28:71:ab:09:e7:70:60:38:c1:d1:f0: d8:7a:72:49:bd:53:d1:d4:4f:2c:b0:bb:13:d4:a4: 0e:00:42:ed:dd:b9:1e:2b:b6:99:c8:7d:c4:e4:a8: d7:f4:f6:a2:37:2d:f8:b6:0e:2f:61:fd:cf:9b:0b: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C2:EC:C2:0A:4D:7E:15:D3:99:8E:BA:31:D5:3A:04:CE:6E:59:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff6f14c-489d-3016-9494-42a2a615e3b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c4:c9:d5:5c:71:0d:5c:63:fb:02:e2:77:2a:84:5a:b4:83: 93:40:39:aa:0f:9a:09:ae:72:55:8f:3d:a6:35:58:b3:b8:4d: a4:66:30:21:18:06:dd:16:7c:e6:76:cc:60:81:7e:09:00:75: 40:2d:d9:f7:90:c5:ab:59:db:87:65:a1:e1:1a:b0:00:79:10: e8:f0:64:ef:67:a4:31:2d:59:64:2c:cf:1c:a3:e5:85:16:c1: fb:ff:97:4d:1f:5b:af:87:f3:3e:16:34:ed:ef:95:1e:d4:82: ad:ba:48:8e:85:fe:5b:72:b4:d8:5c:08:71:8d:06:01:40:b1: bc:15:a6:66:89:ce:72:40:a1:e4:a4:43:f5:07:b9:dc:10:4b: 8f:f2:8a:85:10:2e:de:87:c6:90:35:13:2f:b3:8c:2a:e8:da: 74:0a:57:3e:ae:18:9c:e7:91:43:89:f1:df:ae:2c:2c:74:50: c5:4b:29:a0:78:bb:7d:73:c7:d1:eb:41:fa:f8:18:ac:8e:af: e1:6a:e4:69:58:66:87:59:fc:65:2f:bf:5f:24:77:e3:1f:93: ff:5d:5b:0d:2e:fa:0d:c6:12:61:09:f2:7e:05:a1:41:e3:2f: 8f:9b:e7:6c:6c:00:a3:ba:57:8c:bb:e0:d7:cb:a7:ac:c5:0e: f3:43:06:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6Rf87Yfz0m5VnWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk MmE5OWU4MDEtZWZlZC00ZTBjLThmMjEtYWVhNzkyNWY3YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraZaGj18qraGocyhlxN6YTAMlUOEw7MRZm3T 1ShPFBxv3yvUqSBdGW19IAPo4eW3xK36b5Cg9yYiSVRWoB8vvYDPYwVM6Gvlc5nV f+6f2ywINjNvOSm91ooUdvOuHgulgZjvzKij7NoBgFx51JLBFfaJ9btnW4zbiAbW iP3EOPBWLLZj5KRFLk3I4GalCQUMJD2U1DkzA5Vv1TdKQ7+ssTD4auU5JfoNiRs3 s0JpGmFQfniD6GXRDrr+gdj56TKJ4uFfC4xYKHGrCedwYDjB0fDYenJJvVPR1E8s sLsT1KQOAELt3bkeK7aZyH3E5KjX9PaiNy34tg4vYf3PmwtsfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfC7MIKTX4V05mOujHVOgTObllZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZmNmYxNGMtNDg5ZC0z MDE2LTk0OTQtNDJhMmE2MTVlM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDEydVccQ1cY/sC4ncqhFq0g5NAOaoPmgmuclWPPaY1WLO4TaRmMCEY Bt0WfOZ2zGCBfgkAdUAt2feQxatZ24dloeEasAB5EOjwZO9npDEtWWQszxyj5YUW wfv/l00fW6+H8z4WNO3vlR7Ugq26SI6F/ltytNhcCHGNBgFAsbwVpmaJznJAoeSk Q/UHudwQS4/yioUQLt6HxpA1Ey+zjCro2nQKVz6uGJznkUOJ8d+uLCx0UMVLKaB4 u31zx9HrQfr4GKyOr+Fq5GlYZodZ/GUvv18kd+Mfk/9dWw0u+g3GEmEJ8n4FoUHj L4+b52xsAKO6V4y74NfLp6zFDvNDBoI= -----END CERTIFICATE-----Generated at Sat Dec 6 21:18:57 2025 by rpki-client