This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb7132e8-d0ae-3c8c-994a-6e3c7dd57ab2.roa File: bb7132e8-d0ae-3c8c-994a-6e3c7dd57ab2.roa (raw, json) Hash identifier: EZ9NVskk4unIpKBOgCcxFQYYS0cg/zBNnytfXeFmoJQ= Subject key identifier: CA:74:2B:EC:92:33:20:47:3F:64:CB:63:AE:9E:9B:B4:A2:1A:2B:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666BA787AA74B773FC4AD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb7132e8-d0ae-3c8c-994a-6e3c7dd57ab2.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.0.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ba:78:7a:a7:4b:77:3f:c4:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=d8e13d79-aa96-4827-af94-daf2dcc99638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:dc:d7:27:2f:65:e4:54:55:d3:a6:be:e7: b1:4f:23:c8:a5:2c:46:88:84:74:fc:31:90:9b:d8: 8b:0f:a0:a0:ed:bb:84:29:72:c9:22:c9:db:86:40: 9c:d5:79:31:c4:ba:60:e5:50:36:e4:e9:fb:a3:24: 02:2a:83:47:f8:b7:37:3b:23:54:31:ea:4a:cc:d0: 4a:b2:16:63:14:88:51:5c:1a:6c:bb:06:e6:92:1b: c1:14:ea:e2:56:ef:18:15:6b:1d:17:3f:48:ab:52: 22:ad:19:c2:41:c7:2f:da:67:6e:94:43:50:13:ac: 8d:11:be:9b:0e:88:b4:3f:ad:e9:8d:f5:71:5a:a6: 04:29:07:f5:58:ad:82:7a:58:c7:47:20:41:a0:77: 2a:7e:4a:2f:d1:3d:1a:a0:e2:b2:ad:b9:e5:bd:85: 23:04:56:f8:c4:71:2f:c3:95:f4:23:53:4d:6c:20: e5:76:52:30:18:6d:80:03:2d:b2:92:37:a1:73:d2: d3:e2:df:d6:a4:86:5e:00:30:c2:97:5d:c4:6e:b6: 70:70:c4:2e:fc:75:70:93:c9:d4:05:06:2f:2c:61: 7d:6e:e7:5c:0b:5a:eb:c6:7d:93:e1:33:6a:80:af: 89:11:b3:fe:06:50:09:33:f6:ef:8d:99:51:1a:73: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:74:2B:EC:92:33:20:47:3F:64:CB:63:AE:9E:9B:B4:A2:1A:2B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb7132e8-d0ae-3c8c-994a-6e3c7dd57ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:86:7b:0e:8a:e9:71:f1:c0:b4:0d:b7:ad:aa:1f:2d:fd:c1: f9:9c:83:07:dd:d8:c7:a8:5a:d1:5d:19:ea:89:05:9d:fe:61: b4:99:de:95:39:a4:5d:2f:dc:79:11:92:0b:c7:32:da:12:4d: 77:e2:c7:72:11:e9:81:88:0f:c8:6d:94:12:12:34:5f:48:0c: bb:36:98:5a:3e:cd:d1:d4:6b:71:12:0d:e7:2a:8e:66:76:d7: 25:de:25:c7:76:67:36:87:9f:fa:55:9d:5c:e0:73:48:6b:4a: 80:8a:76:24:e0:7b:2f:0f:73:6b:6b:a3:35:bc:25:ec:b3:23: a9:18:7b:cb:db:e0:32:ca:e7:5a:7c:1e:a7:18:1d:27:a5:37: 25:58:a1:fd:df:64:46:0a:db:52:c0:37:10:38:62:bc:4b:ed: f0:e0:30:af:2e:7d:f1:f3:6a:a6:c4:09:4f:ea:0e:c3:35:16: 33:e6:91:a6:18:4b:01:57:7e:0e:05:a8:59:89:09:a0:c7:c9: 98:68:a6:aa:b9:a7:75:c6:3e:7a:1e:a3:b1:01:eb:94:46:9e: b7:bf:2f:94:e4:00:46:ec:e7:9d:83:b9:e0:6e:e5:a5:c0:84: 53:d5:53:27:be:5d:96:2d:1e:d3:e7:63:93:5d:dc:bd:10:56: 5c:b3:cb:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrp4eqdLdz/ErYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZDhlMTNkNzktYWE5Ni00ODI3LWFmOTQtZGFmMmRjYzk5NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqzc1ycvZeRUVdOmvuexTyPIpSxGiIR0/DGQ m9iLD6Cg7buEKXLJIsnbhkCc1XkxxLpg5VA25On7oyQCKoNH+Lc3OyNUMepKzNBK shZjFIhRXBpsuwbmkhvBFOriVu8YFWsdFz9Iq1IirRnCQccv2mdulENQE6yNEb6b Doi0P63pjfVxWqYEKQf1WK2CeljHRyBBoHcqfkov0T0aoOKyrbnlvYUjBFb4xHEv w5X0I1NNbCDldlIwGG2AAy2ykjehc9LT4t/WpIZeADDCl13EbrZwcMQu/HVwk8nU BQYvLGF9budcC1rrxn2T4TNqgK+JEbP+BlAJM/bvjZlRGnPwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp0K+ySMyBHP2TLY66em7SiGivUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI3MTMyZTgtZDBhZS0z YzhjLTk5NGEtNmUzYzdkZDU3YWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWGew6K6XHxwLQNt62qHy39wfmcgwfd2MeoWtFdGeqJBZ3+YbSZ3pU5 pF0v3HkRkgvHMtoSTXfix3IR6YGID8htlBISNF9IDLs2mFo+zdHUa3ESDecqjmZ2 1yXeJcd2ZzaHn/pVnVzgc0hrSoCKdiTgey8Pc2trozW8JeyzI6kYe8vb4DLK51p8 HqcYHSelNyVYof3fZEYK21LANxA4YrxL7fDgMK8uffHzaqbECU/qDsM1FjPmkaYY SwFXfg4FqFmJCaDHyZhopqq5p3XGPnoeo7EB65RGnre/L5TkAEbs552DueBu5aXA hFPVUye+XZYtHtPnY5Nd3L0QVlyzy2k= -----END CERTIFICATE-----Generated at Sun Jan 25 09:30:08 2026 by rpki-client