This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b483869a-a5ec-3dd5-ab38-6becb2c89e2a.roa File: b483869a-a5ec-3dd5-ab38-6becb2c89e2a.roa (raw, json) Hash identifier: 4fSDOMKEnSDQ5dtikILp0OcGoTfYiQbOpDwMrDO6rAI= Subject key identifier: 64:CD:BE:23:38:67:98:2C:6D:73:A9:AE:C5:1D:49:B3:A8:60:B7:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140972C824F43212066CF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b483869a-a5ec-3dd5-ab38-6becb2c89e2a.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:97:2c:82:4f:43:21:20:66:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=f3f3528d-d42c-40c5-891a-bc1f5c46e8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7f:ad:39:4b:a5:34:02:09:b7:c3:9c:41:82: 28:22:06:18:74:87:7e:a5:ff:04:cc:22:bd:a7:dd: 10:6b:e4:3f:24:e0:de:69:7b:cc:91:43:3c:01:78: 40:13:9c:1a:1f:c0:a2:e4:f4:94:d1:32:de:75:95: ec:3d:31:88:84:d1:61:57:8c:67:e8:75:a6:1f:38: 23:86:3f:79:a0:7a:36:a0:73:2e:73:6c:dd:5e:45: 91:fb:95:26:11:d6:fe:4c:95:58:82:66:83:0b:71: 42:90:5a:de:16:43:c7:c2:0c:ad:5d:42:a1:de:b9: b6:48:64:59:07:17:32:7c:e2:d2:2c:21:6a:14:3e: 61:db:02:64:34:36:3b:2c:17:9e:28:7a:b5:3e:da: 1b:fb:1d:64:43:fb:9e:cf:35:18:d2:c0:2f:a8:8a: 1f:6e:45:e8:af:43:53:c6:9b:bc:74:6c:cc:74:81: a5:86:96:6c:f4:39:c8:58:2a:f8:84:11:3f:4c:c3: d3:6c:77:6c:c7:26:47:6d:43:50:55:e3:be:5f:d5: 1d:b5:c7:89:ad:70:90:ba:12:37:d3:5a:dd:04:10: 57:68:bd:84:06:3b:66:44:57:27:e5:87:85:7f:14: cf:4b:46:39:da:60:74:a7:8c:b4:80:74:f5:a7:a5: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CD:BE:23:38:67:98:2C:6D:73:A9:AE:C5:1D:49:B3:A8:60:B7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b483869a-a5ec-3dd5-ab38-6becb2c89e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:27:e2:4f:c4:1e:24:ad:9e:e7:4d:1f:44:16:05:a9:27:94: 16:75:67:ee:cf:e3:fb:3a:ae:93:56:b2:7c:11:e0:d7:a2:b2: b2:6f:a7:9e:4d:da:2d:69:91:c9:b9:00:cb:3b:3b:b1:14:f3: 21:26:92:07:90:cd:30:32:88:fd:e2:df:43:f5:9e:e8:e0:a4: 17:f2:3f:26:66:8c:e0:14:55:e4:08:db:4f:dc:3f:65:0e:27: 3d:b4:0e:d4:e2:57:25:f4:32:a9:34:37:11:db:be:f9:a1:39: 6a:b6:1c:b1:28:61:13:ab:c4:c9:3e:87:b8:90:0c:c7:fa:ac: 2b:a0:b7:e6:37:7c:57:da:2d:00:72:95:a6:e7:4e:5f:79:6f: dc:e7:f1:fb:da:0e:96:bb:4d:5c:77:58:7f:c4:8f:50:3e:62: f0:31:61:36:76:e0:ed:fb:fb:83:b7:f5:78:2e:15:52:8b:b0: 50:a0:c0:18:24:0e:a8:58:32:7b:66:35:3d:8a:1b:b4:75:ae: 48:8c:36:69:2e:8e:25:de:f5:06:2a:4a:64:dc:49:60:17:02: 2d:44:65:8c:4c:ce:bc:9d:35:4f:ff:be:ac:6b:4b:ad:cb:bc: dc:93:ce:b1:4d:c8:e8:b3:ee:07:18:62:82:35:10:dd:30:e0: 5c:eb:c5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQJcsgk9DISBmz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjNmMzUyOGQtZDQyYy00MGM1LTg5MWEtYmMxZjVjNDZlOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH+tOUulNAIJt8OcQYIoIgYYdId+pf8EzCK9 p90Qa+Q/JODeaXvMkUM8AXhAE5waH8Ci5PSU0TLedZXsPTGIhNFhV4xn6HWmHzgj hj95oHo2oHMuc2zdXkWR+5UmEdb+TJVYgmaDC3FCkFreFkPHwgytXUKh3rm2SGRZ BxcyfOLSLCFqFD5h2wJkNDY7LBeeKHq1Ptob+x1kQ/uezzUY0sAvqIofbkXor0NT xpu8dGzMdIGlhpZs9DnIWCr4hBE/TMPTbHdsxyZHbUNQVeO+X9UdtceJrXCQuhI3 01rdBBBXaL2EBjtmRFcn5YeFfxTPS0Y52mB0p4y0gHT1p6VfpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTNviM4Z5gsbXOprsUdSbOoYLcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQ4Mzg2OWEtYTVlYy0z ZGQ1LWFiMzgtNmJlY2IyYzg5ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEn4k/EHiStnudNH0QWBaknlBZ1Z+7P4/s6rpNWsnwR4NeisrJvp55N 2i1pkcm5AMs7O7EU8yEmkgeQzTAyiP3i30P1nujgpBfyPyZmjOAUVeQI20/cP2UO Jz20DtTiVyX0Mqk0NxHbvvmhOWq2HLEoYROrxMk+h7iQDMf6rCugt+Y3fFfaLQBy labnTl95b9zn8fvaDpa7TVx3WH/Ej1A+YvAxYTZ24O37+4O39XguFVKLsFCgwBgk DqhYMntmNT2KG7R1rkiMNmkujiXe9QYqSmTcSWAXAi1EZYxMzrydNU//vqxrS63L vNyTzrFNyOiz7gcYYoI1EN0w4FzrxSk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:36 2025 by rpki-client