This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf23c8c8-baf1-3aae-8a46-61c7b70c924e.roa File: bf23c8c8-baf1-3aae-8a46-61c7b70c924e.roa (raw, json) Hash identifier: tkbi9C9UlkvcAdEUVhNXbZEfn3SW0BquIlOIMLrKgM0= Subject key identifier: 08:9D:B4:BF:FB:AD:32:5A:C0:3D:43:7B:A5:5E:A6:D0:64:BA:75:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10B79778B0C7A420CEBA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf23c8c8-baf1-3aae-8a46-61c7b70c924e.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.96.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:b7:97:78:b0:c7:a4:20:ce:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=e342d730-6d59-4691-8735-14a3b4fba64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:c3:6b:47:04:eb:26:bc:9d:5b:8d:e5:9c: 43:d3:f6:c1:10:75:03:ae:ea:32:d6:b1:2a:67:ba: 4f:6c:fa:56:4c:7c:fe:28:49:0e:ad:bb:fd:46:68: 28:21:a5:f3:f1:6e:f9:42:32:81:82:76:5b:61:0a: 5a:95:ca:a2:4a:79:9a:7b:4a:70:7d:2e:51:d9:0e: c7:8f:1e:96:6f:6b:15:f2:83:4a:0f:19:d7:b6:bf: b3:6b:b1:d7:30:79:74:5d:c4:91:71:90:7d:94:01: dc:19:ad:b5:a5:61:e5:fd:66:be:13:96:9d:79:9b: c5:ad:e8:01:2e:a9:d7:bb:cf:9c:d6:db:b8:2a:73: 0a:99:95:d0:6d:62:0b:a3:af:36:9a:4c:42:1b:02: 55:3e:6c:37:df:8b:84:ce:9d:8c:3c:43:99:ba:a5: 7a:62:0a:e0:eb:ed:31:14:e7:66:26:08:1a:01:c7: 52:26:5f:7c:1a:8d:9e:95:e5:2c:9e:75:df:17:74: 7a:da:9e:53:e2:e3:19:18:6e:f1:33:c5:91:f6:63: fc:64:fa:97:74:e7:1b:5b:c0:c4:5f:d3:84:9f:06: eb:5c:73:cb:8a:00:ae:80:8f:51:36:ab:e2:6d:38: f9:fb:ab:ae:d3:26:ae:c7:87:4c:82:39:e7:95:e6: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9D:B4:BF:FB:AD:32:5A:C0:3D:43:7B:A5:5E:A6:D0:64:BA:75:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf23c8c8-baf1-3aae-8a46-61c7b70c924e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:73:4d:c2:e8:0c:f0:53:6f:ca:7b:46:b4:94:4f:f9:29:d5: 7b:5f:25:ee:09:ff:ff:3a:b4:ff:f8:39:da:3b:7e:6b:94:6e: a6:95:86:16:b1:aa:d2:83:f6:39:04:2d:3a:2a:93:01:a0:0d: c1:57:92:af:72:d5:80:04:1b:a9:7b:01:78:e9:cc:93:9c:3e: 4b:57:9f:e7:69:e3:0e:c7:1b:92:2d:13:9a:eb:d5:19:46:04: 05:91:8b:af:aa:45:39:51:ed:0a:62:02:c3:4e:cc:1e:2d:82: 7e:31:98:a9:55:bf:cc:78:cd:36:b2:3c:1a:51:f2:9c:ee:6c: fa:e3:64:39:03:36:12:64:77:6d:57:dc:00:c0:00:9c:97:a1: 1e:07:3d:82:d6:7f:01:50:2d:49:01:3e:75:72:7e:f5:9d:4f: e2:10:b2:24:6f:ef:b6:58:87:94:0a:d2:73:7e:cb:20:7e:4b: 89:bb:80:eb:05:30:f9:25:30:50:0b:07:b9:8d:71:86:a5:29: 98:23:3b:0b:45:41:ca:81:8e:ed:db:39:96:6d:22:ca:01:e2: 97:b2:6d:9e:38:25:32:c8:aa:39:53:f6:43:5a:2f:3f:dc:5b: c8:2c:2d:78:92:be:c4:69:84:dd:fe:a3:79:87:71:c2:00:8b: 99:53:7f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELeXeLDHpCDOugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk ZTM0MmQ3MzAtNmQ1OS00NjkxLTg3MzUtMTRhM2I0ZmJhNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc3Da0cE6ya8nVuN5ZxD0/bBEHUDruoy1rEq Z7pPbPpWTHz+KEkOrbv9RmgoIaXz8W75QjKBgnZbYQpalcqiSnmae0pwfS5R2Q7H jx6Wb2sV8oNKDxnXtr+za7HXMHl0XcSRcZB9lAHcGa21pWHl/Wa+E5adeZvFregB LqnXu8+c1tu4KnMKmZXQbWILo682mkxCGwJVPmw334uEzp2MPEOZuqV6Ygrg6+0x FOdmJggaAcdSJl98Go2eleUsnnXfF3R62p5T4uMZGG7xM8WR9mP8ZPqXdOcbW8DE X9OEnwbrXHPLigCugI9RNqvibTj5+6uu0yaux4dMgjnnleaISQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAidtL/7rTJawD1De6VeptBkunX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmYyM2M4YzgtYmFmMS0z YWFlLThhNDYtNjFjN2I3MGM5MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGA+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlzTcLoDPBTb8p7RrSUT/kp1XtfJe4J//86tP/4Odo7fmuUbqaVhhax qtKD9jkELToqkwGgDcFXkq9y1YAEG6l7AXjpzJOcPktXn+dp4w7HG5ItE5rr1RlG BAWRi6+qRTlR7QpiAsNOzB4tgn4xmKlVv8x4zTayPBpR8pzubPrjZDkDNhJkd21X 3ADAAJyXoR4HPYLWfwFQLUkBPnVyfvWdT+IQsiRv77ZYh5QK0nN+yyB+S4m7gOsF MPklMFALB7mNcYalKZgjOwtFQcqBju3bOZZtIsoB4peybZ44JTLIqjlT9kNaLz/c W8gsLXiSvsRphN3+o3mHccIAi5lTf+I= -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:36 2025 by rpki-client