This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa File: b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa (raw, json) Hash identifier: Npl/T9Zg/BlcGCv8yjTkxfU100gwZXKqae2TnRAB1j0= Subject key identifier: 1D:F9:8E:AA:DB:E7:36:4B:3A:1A:EB:7F:6B:EE:1F:83:95:B8:79:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140A2781AD583D8857E6F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.108.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:a2:78:1a:d5:83:d8:85:7e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=9b249236-8945-4602-8997-8009f78f584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:a7:9c:a7:de:2f:be:a4:fc:06:b3:80:ae: 47:66:22:f0:a4:d5:01:26:b2:bf:cb:ec:52:01:ce: 63:eb:c2:a1:ee:1f:97:57:d8:9c:6a:0f:00:57:16: c3:4e:e9:9f:dc:1c:cc:21:e7:71:87:f7:ea:98:00: 4d:8f:f2:4a:f3:94:54:46:1a:75:0b:90:c6:c9:97: f7:09:2e:66:e8:44:95:4a:ab:31:d6:63:ef:a8:41: f7:71:28:09:eb:e7:2b:92:a2:db:aa:b0:49:b4:e7: 6c:93:d3:6e:97:54:7f:be:a5:60:be:d9:9f:e1:e0: 5f:e8:3d:7a:8b:39:ad:4e:de:19:d5:36:f5:80:3f: a3:e6:e0:6b:b2:a7:ee:a5:34:22:3b:67:93:9e:9f: e7:63:5d:88:04:31:d2:3f:94:bf:c4:af:79:37:0d: 01:0c:d9:1a:60:7b:a3:cc:b6:2a:40:9e:db:cc:c7: f8:a2:a5:99:6e:51:ad:b0:b9:c9:d5:a3:af:39:69: 83:72:f8:cc:dc:58:1e:5c:ce:d2:ad:46:c1:9c:d4: 06:4f:bc:d7:a2:be:82:67:6b:87:91:c7:84:76:56: b3:4f:c8:9c:0d:56:ce:e1:8a:cb:a7:0d:c3:d0:31: 5d:24:c5:01:56:6a:f1:d5:5d:2f:14:f2:3b:b3:20: 0e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F9:8E:AA:DB:E7:36:4B:3A:1A:EB:7F:6B:EE:1F:83:95:B8:79:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:dc:df:69:75:69:cc:ab:22:5d:49:7d:64:fd:f4:1c:4e:4d: 62:1e:a2:a3:50:b0:68:c0:a7:c8:58:4b:67:da:5d:38:66:79: 5a:44:3e:fb:4a:1e:11:7f:2e:bc:3c:50:22:23:82:4f:7d:d9: 97:a8:e7:df:0d:97:9c:56:fc:87:0c:d0:d1:6d:ff:33:eb:39: b1:f0:70:75:31:34:95:01:a7:87:36:59:a8:1c:12:82:be:b3: 53:b9:95:b8:b2:49:a4:f5:e6:72:81:da:a4:c9:07:3b:18:52: 7f:18:57:85:e5:f5:e2:2e:43:75:fa:4e:1e:59:49:32:2c:ad: 1b:b4:ab:0f:08:6e:32:2c:01:57:46:3c:b7:58:07:9f:0a:f8: 4c:be:45:6c:75:4c:97:77:25:7a:d0:c9:47:6f:7e:9a:b7:be: 8e:53:55:83:3b:63:46:f7:b1:59:01:3f:85:95:cf:c9:36:76: fa:ed:bc:0b:f2:53:68:7d:a2:34:f3:d1:f4:ce:88:ce:b1:40: 4f:5b:3f:a7:e5:c6:9c:02:b4:5d:f0:1b:2f:93:28:c3:31:46: 95:44:d8:cd:7b:44:2c:f4:08:2c:84:77:52:07:61:fa:7d:6c: b3:9b:98:4f:47:ea:19:77:f9:18:60:85:26:45:45:2d:c3:88: 7e:81:b4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQKJ4GtWD2IV+bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk OWIyNDkyMzYtODk0NS00NjAyLTg5OTctODAwOWY3OGY1ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+nnKfeL76k/AazgK5HZiLwpNUBJrK/y+xS Ac5j68Kh7h+XV9icag8AVxbDTumf3BzMIedxh/fqmABNj/JK85RURhp1C5DGyZf3 CS5m6ESVSqsx1mPvqEH3cSgJ6+crkqLbqrBJtOdsk9Nul1R/vqVgvtmf4eBf6D16 izmtTt4Z1Tb1gD+j5uBrsqfupTQiO2eTnp/nY12IBDHSP5S/xK95Nw0BDNkaYHuj zLYqQJ7bzMf4oqWZblGtsLnJ1aOvOWmDcvjM3FgeXM7SrUbBnNQGT7zXor6CZ2uH kceEdlazT8icDVbO4YrLpw3D0DFdJMUBVmrx1V0vFPI7syAOiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB35jqrb5zZLOhrrf2vuH4OVuHmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjA5YTNkMjEtYjEwMS0z MWNiLTljNGItZjE4ZjI1ZTEyYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfc32l1acyrIl1JfWT99BxOTWIeoqNQsGjAp8hYS2faXThmeVpEPvtK HhF/Lrw8UCIjgk992Zeo598Nl5xW/IcM0NFt/zPrObHwcHUxNJUBp4c2WagcEoK+ s1O5lbiySaT15nKB2qTJBzsYUn8YV4Xl9eIuQ3X6Th5ZSTIsrRu0qw8IbjIsAVdG PLdYB58K+Ey+RWx1TJd3JXrQyUdvfpq3vo5TVYM7Y0b3sVkBP4WVz8k2dvrtvAvy U2h9ojTz0fTOiM6xQE9bP6flxpwCtF3wGy+TKMMxRpVE2M17RCz0CCyEd1IHYfp9 bLObmE9H6hl3+RhghSZFRS3DiH6BtGE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:31 2025 by rpki-client