This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa File: c09009c5-923b-3b65-9c38-dc608e00a3d1.roa (raw, json) Hash identifier: GWiMhT+SpsjFcaJhAQLrH/XJHWxFSm8TzuC2Ac/656E= Subject key identifier: 09:3A:69:90:33:EC:AF:73:75:B1:2F:C1:D6:86:67:87:6A:32:99:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666CD0CE324FEAFC45F7F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.109.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:cd:0c:e3:24:fe:af:c4:5f:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=d554686d-76e9-4118-a5e5-77e9f4d808dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:59:be:24:2c:3f:65:48:6e:7b:de:b4:12: 22:53:35:fd:17:09:2f:02:40:ec:45:50:5c:ad:63: 7c:75:da:28:0c:1b:bd:49:80:86:79:f4:c5:14:a1: eb:70:9d:8e:c0:04:ba:2a:56:47:17:6a:53:91:3a: 82:91:0b:a4:ee:07:eb:ad:e5:58:f0:34:63:49:69: c5:9f:04:c6:50:4b:21:2c:f2:cb:6d:bc:9d:c3:4d: ca:cb:2d:6f:7b:4e:dc:81:eb:09:4b:91:e2:39:21: af:db:f0:5e:d6:96:c9:1b:03:46:ca:d4:35:8f:44: 6d:28:5d:2a:e2:e9:bd:dc:a9:7c:7a:2c:9d:7e:d3: 2e:3c:41:71:39:ac:75:af:90:61:5b:fe:7b:1c:f0: 35:9b:ed:61:65:8b:0c:19:92:23:14:05:4e:ad:13: 83:27:55:bc:e1:55:8b:46:b3:73:16:ef:e8:e1:3b: 43:38:69:b9:27:db:92:81:9a:f6:b0:8e:4d:ce:f3: 79:99:ad:59:ce:a5:31:ae:6d:cb:3a:17:4f:98:01: d3:f4:47:60:74:52:c8:79:4f:0b:89:ce:7a:9b:bd: 65:43:c2:ca:7c:4a:36:f1:c5:3f:68:51:39:33:81: 51:ad:23:5d:87:b2:98:36:d8:29:9a:21:cf:b4:14: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:69:90:33:EC:AF:73:75:B1:2F:C1:D6:86:67:87:6A:32:99:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:65:d9:68:04:37:c6:18:1c:f6:82:1e:ce:38:f4:d7:b5:8a: cb:8e:08:61:f2:83:17:76:0e:65:c9:fa:e5:7e:9e:d6:f0:a1: a1:86:06:db:f6:94:fd:76:1c:94:72:99:eb:3c:38:db:45:48: aa:7f:09:be:54:85:27:8d:01:47:32:b6:18:3e:ce:4a:74:12: 8a:3b:71:da:00:b1:ce:ae:c4:e8:60:fe:ac:57:38:36:da:00: 42:38:22:39:30:72:a9:8f:a9:4d:7e:e7:ab:70:32:6f:71:4d: 75:2d:d2:7c:ab:a0:4a:6d:92:28:35:04:a9:3c:36:bd:3e:9a: c1:5f:3b:5a:e1:82:3f:2d:35:f7:10:91:a8:fa:a7:25:80:81: 31:c4:df:d2:1d:92:75:b2:9a:2b:aa:f9:b3:fa:68:76:d5:65: 43:de:45:7f:47:cf:44:d4:09:15:7c:f1:20:64:d8:08:41:cb: c7:21:97:dd:de:17:d1:7c:cb:05:c3:fd:74:d8:76:56:c7:42: 6c:be:05:07:d7:b0:6c:3a:23:62:e7:df:39:b9:c9:47:89:b7: e8:04:92:c0:cc:e5:85:05:ce:8f:2f:be:1e:fd:c5:a6:13:2c: f1:2a:aa:5d:46:f0:90:54:5f:b5:45:0f:8f:d2:f1:e7:e4:f6: c1:0e:30:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZs0M4yT+r8RffwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZDU1NDY4NmQtNzZlOS00MTE4LWE1ZTUtNzdlOWY0ZDgwOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jFZviQsP2VIbnvetBIiUzX9FwkvAkDsRVBc rWN8ddooDBu9SYCGefTFFKHrcJ2OwAS6KlZHF2pTkTqCkQuk7gfrreVY8DRjSWnF nwTGUEshLPLLbbydw03Kyy1ve07cgesJS5HiOSGv2/Be1pbJGwNGytQ1j0RtKF0q 4um93Kl8eiydftMuPEFxOax1r5BhW/57HPA1m+1hZYsMGZIjFAVOrRODJ1W84VWL RrNzFu/o4TtDOGm5J9uSgZr2sI5NzvN5ma1ZzqUxrm3LOhdPmAHT9EdgdFLIeU8L ic56m71lQ8LKfEo28cU/aFE5M4FRrSNdh7KYNtgpmiHPtBRMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk6aZAz7K9zdbEvwdaGZ4dqMpndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzA5MDA5YzUtOTIzYi0z YjY1LTljMzgtZGM2MDhlMDBhM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNl2WgEN8YYHPaCHs449Ne1isuOCGHygxd2DmXJ+uV+ntbwoaGGBtv2 lP12HJRymes8ONtFSKp/Cb5UhSeNAUcythg+zkp0Eoo7cdoAsc6uxOhg/qxXODba AEI4IjkwcqmPqU1+56twMm9xTXUt0nyroEptkig1BKk8Nr0+msFfO1rhgj8tNfcQ kaj6pyWAgTHE39IdknWymiuq+bP6aHbVZUPeRX9Hz0TUCRV88SBk2AhBy8chl93e F9F8ywXD/XTYdlbHQmy+BQfXsGw6I2Ln3zm5yUeJt+gEksDM5YUFzo8vvh79xaYT LPEqql1G8JBUX7VFD4/S8efk9sEOMKg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:29:37 2026 by rpki-client