This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1cd3e87-c201-3adc-b7e1-e079739b0930.roa File: c1cd3e87-c201-3adc-b7e1-e079739b0930.roa (raw, json) Hash identifier: T8zQE/QHForqDGlSzvQXcjAMXWk3kmFa4Ts6vTjHqo0= Subject key identifier: AF:42:AF:B2:C1:4C:1D:94:C1:48:06:30:7B:81:32:85:D5:7E:4B:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE75FD141D0580135D9BDC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1cd3e87-c201-3adc-b7e1-e079739b0930.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.108.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:75:fd:14:1d:05:80:13:5d:9b:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=bf83aa09-f246-409c-975b-28d9c07b0fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:ed:7d:81:45:8b:18:a3:8a:2c:eb:31:d5: 89:cb:f5:40:ce:2e:e7:e2:11:42:aa:f1:a1:4c:d9: 89:2b:53:4c:1d:23:b7:16:80:95:83:0c:ad:e4:79: 13:43:a5:bb:ae:43:21:43:77:2d:57:f7:1e:77:ae: 5d:fc:6a:1e:1c:b0:70:1b:23:ed:73:c4:42:6d:a7: 05:d3:19:84:5f:51:07:eb:82:18:61:f4:89:67:32: 9f:5e:a5:8b:20:60:28:2a:7f:42:39:81:e3:da:be: 9d:f1:50:d1:af:ee:a9:5d:97:97:6e:e4:a1:85:49: e1:b7:d9:dc:67:f2:41:38:02:f1:be:7a:2e:72:1a: 0a:4e:65:2c:62:fa:1c:67:1c:f2:3b:f8:18:a9:4d: cc:21:45:7e:2c:37:89:97:16:ad:eb:2a:3b:ae:de: 76:8f:09:13:39:33:ac:9f:ca:7e:16:d9:d5:d8:a4: fe:d4:12:0c:f8:10:ff:89:33:5a:b4:e2:04:c1:75: 5e:2a:53:db:96:9a:57:29:fd:fb:3d:16:dd:32:bd: 63:53:84:df:49:f4:f7:a4:5f:d2:53:b6:c1:d1:aa: 24:ef:ac:3c:bb:d7:39:f2:11:44:73:24:99:81:5e: 43:5c:4f:cf:ae:94:d3:19:64:60:77:93:e0:36:0e: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:AF:B2:C1:4C:1D:94:C1:48:06:30:7B:81:32:85:D5:7E:4B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1cd3e87-c201-3adc-b7e1-e079739b0930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d2:77:b1:d8:cb:5e:cc:40:21:36:86:79:1c:fa:a8:8c:ca: a9:eb:34:4a:f6:ad:fe:fa:36:a4:0f:a9:63:7d:94:e3:67:e1: 82:8f:a5:3c:b4:17:1f:50:f9:68:ed:61:3f:71:43:c9:b2:28: 32:2a:6b:8a:0b:e5:cb:a8:b5:fc:81:9f:b4:9f:f6:fe:40:65: a3:0c:d6:e0:71:8b:f6:b3:13:b2:41:51:d5:fb:b8:b8:75:c9: 6c:5e:8d:97:32:6f:ef:e8:a7:77:5a:02:b0:3a:f1:d2:4c:b5: de:bc:8b:d5:2e:cb:eb:72:b0:e2:44:bd:84:2b:30:3d:7f:26: d3:9d:76:4b:77:61:0d:8a:13:e5:2a:3e:b8:8b:fb:c5:43:b6: 28:9d:b6:90:66:3f:d5:38:a6:4b:01:19:e6:8a:e9:c9:17:60: f8:7e:a1:65:b7:35:2b:57:9f:08:58:85:d2:52:07:06:f4:2e: f9:86:fc:c5:b7:2c:82:d3:2a:2e:c6:97:e7:ed:2d:2e:b7:0a: 5d:02:58:9e:83:96:d2:31:71:e4:d4:2b:bd:48:78:d0:6a:48: 04:7f:ac:75:23:0e:5c:df:5e:d1:c5:4d:c4:2a:6e:fc:25:4a: 71:cf:99:05:e7:97:19:bc:10:5a:21:a2:6c:98:15:c7:3f:54: c7:2e:f4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+df0UHQWAE12b3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk YmY4M2FhMDktZjI0Ni00MDljLTk3NWItMjhkOWMwN2IwZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yLtfYFFixijiizrMdWJy/VAzi7n4hFCqvGh TNmJK1NMHSO3FoCVgwyt5HkTQ6W7rkMhQ3ctV/ced65d/GoeHLBwGyPtc8RCbacF 0xmEX1EH64IYYfSJZzKfXqWLIGAoKn9COYHj2r6d8VDRr+6pXZeXbuShhUnht9nc Z/JBOALxvnouchoKTmUsYvocZxzyO/gYqU3MIUV+LDeJlxat6yo7rt52jwkTOTOs n8p+FtnV2KT+1BIM+BD/iTNatOIEwXVeKlPblppXKf37PRbdMr1jU4TfSfT3pF/S U7bB0aok76w8u9c58hFEcySZgV5DXE/PrpTTGWRgd5PgNg4LSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Cr7LBTB2UwUgGMHuBMoXVfkucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFjZDNlODctYzIwMS0z YWRjLWI3ZTEtZTA3OTczOWIwOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGzPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATSd7HYy17MQCE2hnkc+qiMyqnrNEr2rf76NqQPqWN9lONn4YKPpTy0 Fx9Q+WjtYT9xQ8myKDIqa4oL5cuotfyBn7Sf9v5AZaMM1uBxi/azE7JBUdX7uLh1 yWxejZcyb+/op3daArA68dJMtd68i9Uuy+tysOJEvYQrMD1/JtOddkt3YQ2KE+Uq PriL+8VDtiidtpBmP9U4pksBGeaK6ckXYPh+oWW3NStXnwhYhdJSBwb0LvmG/MW3 LILTKi7Gl+ftLS63Cl0CWJ6DltIxceTUK71IeNBqSAR/rHUjDlzfXtHFTcQqbvwl SnHPmQXnlxm8EFohomyYFcc/VMcu9L4= -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:36 2025 by rpki-client