This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa File: c39668ce-0b15-33e0-95de-a15f5cde3544.roa (raw, json) Hash identifier: N5pbQIxEdPdUNHLfSeND1kyVVwHVDFyjOrDu6m1gQQw= Subject key identifier: BD:87:DD:4A:24:D3:97:43:C9:FE:70:A9:08:87:FD:51:68:5D:A4:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666A4097B7E9ABDB8944700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.229.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:a4:09:7b:7e:9a:bd:b8:94:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=2a47b028-ea00-45f3-8982-456cb5e8d29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c3:4b:7d:fd:33:0f:1a:a6:96:a5:35:93:95: 09:32:a7:10:a3:ab:1c:fd:dd:8b:9c:49:0f:94:e6: 58:b5:18:08:e2:66:1c:2c:37:a3:99:9c:1f:83:12: 17:01:f0:23:c4:f4:97:6e:d4:65:25:28:13:63:5f: 8a:31:55:8e:20:92:54:fd:09:7d:fa:b6:84:d6:c4: 9b:e7:17:ba:c2:bc:4e:04:14:a7:a8:41:b7:52:0e: 11:82:b0:03:9b:ec:0c:ed:c3:c4:9c:42:03:eb:28: 17:eb:c1:81:be:9b:e3:0c:22:0d:aa:41:8d:40:b7: c1:8c:7f:40:f2:ee:c3:90:9a:c7:9c:4d:01:ec:4d: 56:cb:3a:ce:c7:ad:60:9b:5e:e3:09:0f:d2:e2:01: 37:ca:b2:d1:7a:48:e5:7b:75:ed:88:4e:7b:61:a7: 03:b4:71:58:e5:13:0f:5e:df:00:d9:87:ed:38:e2: 4c:ba:6b:af:a1:ad:8a:5a:8d:0d:71:c2:a1:73:59: ce:aa:3e:fb:5f:d0:a5:38:ec:68:cc:62:da:cc:85: f6:75:52:a7:ad:d0:e4:5b:fe:8a:ba:77:91:ab:cb: a2:ef:99:6f:c1:55:89:c3:64:02:ca:a5:c3:28:49: 12:95:99:ec:d9:e0:bf:d4:54:a1:b1:9f:c5:78:75: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:DD:4A:24:D3:97:43:C9:FE:70:A9:08:87:FD:51:68:5D:A4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:83:78:0f:3d:13:47:e4:e0:58:0e:41:fd:e7:68:e1:6b:91: c6:6f:f2:96:32:bb:e2:5d:db:62:60:28:89:f9:3e:ca:ac:c3: e3:21:4a:10:28:ef:57:79:27:a6:9e:f5:1f:84:55:a5:ab:d2: 8e:fd:0c:23:a0:99:47:01:4c:85:f3:3f:6b:b6:8b:8a:b1:0f: 38:8f:46:ac:db:83:e2:56:f1:99:91:6b:1d:82:3a:66:9d:64: 98:d7:37:9c:1a:f3:3c:c2:d3:c0:ac:23:41:5e:68:01:94:bf: db:10:dc:7b:d5:33:9a:9d:c5:fb:76:13:af:8d:9c:86:2a:c6: e4:c1:df:5e:2c:e3:be:33:7e:8e:99:e8:2e:75:b7:de:3d:89: bb:55:d0:33:25:6b:4c:ab:11:ce:61:28:07:b5:a7:32:0b:b6: 89:f7:3c:2f:e4:b4:22:a4:4d:5f:00:22:43:e1:40:2d:ce:8e: 16:a3:af:c9:b7:2d:fd:cb:ce:19:4d:8a:86:ea:c1:ce:9b:f0: 18:ee:e8:1b:e0:6a:9d:78:4e:f2:46:4e:76:1e:e3:82:6b:6c: 64:a0:24:69:10:10:09:03:c9:db:ca:2e:0f:b1:53:ef:88:22: 7a:6f:1b:bc:b8:8a:1b:61:fe:a0:3f:ab:b1:fc:60:08:70:2e: 8b:d6:b2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZqQJe36avbiURwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MmE0N2IwMjgtZWEwMC00NWYzLTg5ODItNDU2Y2I1ZThkMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8NLff0zDxqmlqU1k5UJMqcQo6sc/d2LnEkP lOZYtRgI4mYcLDejmZwfgxIXAfAjxPSXbtRlJSgTY1+KMVWOIJJU/Ql9+raE1sSb 5xe6wrxOBBSnqEG3Ug4RgrADm+wM7cPEnEID6ygX68GBvpvjDCINqkGNQLfBjH9A 8u7DkJrHnE0B7E1WyzrOx61gm17jCQ/S4gE3yrLRekjle3XtiE57YacDtHFY5RMP Xt8A2YftOOJMumuvoa2KWo0NccKhc1nOqj77X9ClOOxozGLazIX2dVKnrdDkW/6K uneRq8ui75lvwVWJw2QCyqXDKEkSlZns2eC/1FShsZ/FeHXAOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2H3Uok05dDyf5wqQiH/VFoXaSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM5NjY4Y2UtMGIxNS0z M2UwLTk1ZGUtYTE1ZjVjZGUzNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmDeA89E0fk4FgOQf3naOFrkcZv8pYyu+Jd22JgKIn5Psqsw+MhShAo 71d5J6ae9R+EVaWr0o79DCOgmUcBTIXzP2u2i4qxDziPRqzbg+JW8ZmRax2COmad ZJjXN5wa8zzC08CsI0FeaAGUv9sQ3HvVM5qdxft2E6+NnIYqxuTB314s474zfo6Z 6C51t949ibtV0DMla0yrEc5hKAe1pzILton3PC/ktCKkTV8AIkPhQC3Ojhajr8m3 Lf3LzhlNiobqwc6b8Bju6Bvgap14TvJGTnYe44JrbGSgJGkQEAkDydvKLg+xU++I InpvG7y4ihth/qA/q7H8YAhwLovWsl8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:11:52 2026 by rpki-client