This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0e644cc-1305-3c78-9e31-b2decd89c747.roa File: b0e644cc-1305-3c78-9e31-b2decd89c747.roa (raw, json) Hash identifier: oYIuLSggkEMuggv+HDP8fcJB8Hi4P5nwPMD0Ke2NWu8= Subject key identifier: 35:9C:82:50:C0:2E:11:19:C4:9C:90:AC:9D:FF:91:F1:5D:19:41:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666AAA89A58F766317FF720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0e644cc-1305-3c78-9e31-b2decd89c747.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.229.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:aa:a8:9a:58:f7:66:31:7f:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=8d9a1813-4eaa-42bc-8a82-bbf09fc8111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:6e:62:55:ca:2d:5f:28:b7:c8:a6:03:7d: 8b:b9:10:ea:d7:e3:02:a2:6d:61:fb:07:14:55:d3: d9:f8:95:35:8f:4c:d7:ab:6e:6a:99:3d:43:40:b7: 1d:17:21:2d:5c:58:d8:a1:dc:f3:33:c8:78:1e:54: 0d:a1:51:87:f3:74:3c:bd:0f:e8:94:74:cb:ea:37: dd:91:5d:28:96:39:30:6b:42:e7:f6:ca:f0:8f:c8: c8:51:07:4c:c9:16:9f:2f:b4:c0:5b:c5:91:a4:3f: 20:63:76:00:4b:03:6b:61:80:20:8a:0f:9a:50:a3: a6:e9:d8:48:95:a8:b7:3f:5c:55:25:8e:b4:dc:f3: 72:69:0d:21:dc:83:dd:7a:9a:90:89:b4:84:39:4c: 11:c0:bd:e1:17:9a:7d:5c:9e:da:5b:fe:82:13:7a: c5:a2:4a:96:a7:d2:78:c8:29:8c:45:df:d0:f4:bd: 47:00:ea:80:d8:a9:7a:6e:6e:f2:e9:90:46:84:34: 36:59:44:53:bd:84:d7:ac:fd:64:bd:d4:c4:ad:05: dd:04:95:ec:64:48:92:0e:9c:88:b9:01:d0:d2:28: c0:27:a5:ea:0c:a0:c6:25:de:69:a7:4c:e9:6e:fa: 8e:5c:3a:62:82:5f:02:be:99:0d:e2:bd:c9:04:50: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9C:82:50:C0:2E:11:19:C4:9C:90:AC:9D:FF:91:F1:5D:19:41:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0e644cc-1305-3c78-9e31-b2decd89c747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:9e:80:02:37:27:5e:8e:4e:60:90:00:d5:ee:28:ca:a0: 1e:80:5e:e1:d4:14:55:1c:c7:e9:13:0f:04:12:80:95:1e:fd: 8e:5d:cf:75:48:86:50:7c:ee:92:97:a8:2f:f9:77:25:20:29: 4a:6b:8f:f4:b3:ad:51:ee:7d:85:1a:c8:53:b8:29:33:8c:4b: 0c:27:54:0a:eb:47:eb:95:a9:de:93:27:3b:53:b4:ea:9f:e3: 26:77:a8:35:d8:08:7e:b6:42:f8:da:ac:c2:c4:d4:1d:b5:d4: 38:24:e8:4e:0e:78:b5:80:4f:a6:97:ce:9a:5f:d3:1d:86:44: 99:81:d5:f9:51:62:f2:ca:7e:77:26:d3:23:4f:1e:e3:3e:89: 6f:92:d6:c5:d7:89:f4:77:4a:a8:ce:81:a3:b0:e9:1f:45:4f: 69:e7:19:6a:f6:a5:6e:41:08:69:7a:b2:bd:78:04:ab:fa:b3: ae:dc:3d:f5:ee:cd:74:44:79:83:65:d6:c4:f6:3c:ec:dd:17: 44:9e:fe:33:f5:28:be:94:a3:d2:a3:7d:42:83:01:de:f0:34: 85:bc:ae:7f:82:06:d1:f3:44:dd:60:c2:c6:81:5a:03:63:7c: e1:74:e3:63:41:c1:9e:92:ff:b1:4b:5a:c0:fa:29:89:dd:e3: ef:03:70:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZqqomlj3ZjF/9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OGQ5YTE4MTMtNGVhYS00MmJjLThhODItYmJmMDlmYzgxMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoNuYlXKLV8ot8imA32LuRDq1+MCom1h+wcU VdPZ+JU1j0zXq25qmT1DQLcdFyEtXFjYodzzM8h4HlQNoVGH83Q8vQ/olHTL6jfd kV0oljkwa0Ln9srwj8jIUQdMyRafL7TAW8WRpD8gY3YASwNrYYAgig+aUKOm6dhI lai3P1xVJY603PNyaQ0h3IPdepqQibSEOUwRwL3hF5p9XJ7aW/6CE3rFokqWp9J4 yCmMRd/Q9L1HAOqA2Kl6bm7y6ZBGhDQ2WURTvYTXrP1kvdTErQXdBJXsZEiSDpyI uQHQ0ijAJ6XqDKDGJd5pp0zpbvqOXDpigl8CvpkN4r3JBFCjAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWcglDALhEZxJyQrJ3/kfFdGUETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjBlNjQ0Y2MtMTMwNS0z Yzc4LTllMzEtYjJkZWNkODljNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT0noACNydejk5gkADV7ijKoB6AXuHUFFUcx+kTDwQSgJUe/Y5dz3VI hlB87pKXqC/5dyUgKUprj/SzrVHufYUayFO4KTOMSwwnVArrR+uVqd6TJztTtOqf 4yZ3qDXYCH62QvjarMLE1B211Dgk6E4OeLWAT6aXzppf0x2GRJmB1flRYvLKfncm 0yNPHuM+iW+S1sXXifR3SqjOgaOw6R9FT2nnGWr2pW5BCGl6sr14BKv6s67cPfXu zXREeYNl1sT2POzdF0Se/jP1KL6Uo9KjfUKDAd7wNIW8rn+CBtHzRN1gwsaBWgNj fOF042NBwZ6S/7FLWsD6KYnd4+8DcAM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:50 2026 by rpki-client