This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53e87d3-676d-3439-a277-6f58f207d6c8.roa File: c53e87d3-676d-3439-a277-6f58f207d6c8.roa (raw, json) Hash identifier: U9xF1Z8zr9hPIwa4oUvfE1zhMdkFNeNdtOVj3NT67eo= Subject key identifier: 34:60:A5:C7:20:82:20:9E:10:7F:BB:5F:32:81:36:32:84:96:91:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666B90E5FECE6EAC371CC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53e87d3-676d-3439-a277-6f58f207d6c8.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.7.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b9:0e:5f:ec:e6:ea:c3:71:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=2aabd4c9-d967-43ec-b2ba-9ebec1abd721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:35:62:51:8e:5e:9a:3a:18:8f:aa:dc:73: d1:1f:a2:1e:ae:fe:27:54:f5:99:ce:f1:86:42:14: 91:95:7e:b2:ea:2b:9e:49:b9:eb:5e:94:e8:23:40: 4a:af:78:23:d5:1f:65:06:9c:cc:a3:61:41:1f:41: fc:dc:79:af:c8:99:f9:2f:a8:98:82:51:5d:87:c4: e7:a8:a5:4a:88:8d:1d:68:82:1f:dc:d6:09:c2:7b: 74:2e:bf:a6:64:a5:66:e4:8a:a7:87:6e:89:f8:28: ae:8e:11:88:12:c9:84:b0:05:f7:f7:d1:81:81:89: 87:1d:bd:b6:4b:78:f1:83:af:e6:19:95:d4:63:6f: 4c:8a:cc:fe:b3:c4:6b:2d:c3:2d:ad:e2:9d:b8:8f: f1:c4:b4:82:1b:f8:e8:08:6e:72:db:cf:37:53:31: 05:06:aa:6b:18:1c:4a:19:d3:e0:9e:1a:66:dd:95: 14:ce:6c:c1:d2:06:75:f5:90:df:63:dd:45:86:21: c3:6b:56:50:be:ee:6a:e7:dc:34:c6:7e:0e:03:5d: 69:ec:dd:ca:c6:31:e4:bf:d8:7b:69:ba:65:a0:2d: c3:c4:5a:c3:15:3c:54:3b:af:4e:5b:d5:85:21:21: 7a:52:8e:83:10:15:ab:60:7a:b6:dd:45:b7:24:8a: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:A5:C7:20:82:20:9E:10:7F:BB:5F:32:81:36:32:84:96:91:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53e87d3-676d-3439-a277-6f58f207d6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2e:da:a3:0a:36:f7:05:7d:77:5b:03:6d:a8:d3:f5:aa:a0: e5:ea:7b:c2:ed:c9:20:02:56:90:b6:49:05:67:2b:e3:27:14: d6:60:6d:71:28:49:b4:8c:8c:93:fc:1c:35:c8:da:10:fb:b1: dd:28:12:f1:c6:fd:0c:f5:d2:bf:e6:c0:f1:d8:71:eb:2d:42: a4:ee:c4:5a:6e:69:2d:f8:5b:63:56:eb:00:d9:21:75:0d:78: 90:b5:4a:ac:a6:68:99:7b:25:a7:c9:60:e2:b5:a6:de:68:ec: 5d:ca:33:8f:85:57:03:45:da:48:19:8a:03:a7:c7:29:9b:3e: 17:ce:c5:c1:a9:d3:3a:d4:69:02:42:8b:27:45:3e:79:82:2a: e5:bd:5f:7a:75:43:97:bf:82:26:f0:96:c6:e8:0b:2e:f1:85: 08:8f:33:f2:4c:e5:6e:bd:c4:f7:1e:8a:ca:4f:2f:bf:00:ff: 34:d4:fc:dd:4c:0f:57:56:95:1b:6b:64:e3:2b:8d:cf:05:d0: 3b:ef:f6:73:8d:49:fa:19:15:ab:3d:cd:db:0c:cf:a6:2d:1e: ca:22:4a:37:b3:93:fd:6c:39:ea:c9:df:f2:82:69:a6:8c:48: 0f:41:1b:d3:d1:d9:35:13:03:20:9e:8f:ed:9d:07:a7:52:5c: 14:58:2a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrkOX+zm6sNxzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MmFhYmQ0YzktZDk2Ny00M2VjLWIyYmEtOWViZWMxYWJkNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUs1YlGOXpo6GI+q3HPRH6Ierv4nVPWZzvGG QhSRlX6y6iueSbnrXpToI0BKr3gj1R9lBpzMo2FBH0H83HmvyJn5L6iYglFdh8Tn qKVKiI0daIIf3NYJwnt0Lr+mZKVm5Iqnh26J+CiujhGIEsmEsAX399GBgYmHHb22 S3jxg6/mGZXUY29Misz+s8RrLcMtreKduI/xxLSCG/joCG5y2883UzEFBqprGBxK GdPgnhpm3ZUUzmzB0gZ19ZDfY91FhiHDa1ZQvu5q59w0xn4OA11p7N3KxjHkv9h7 abploC3DxFrDFTxUO69OW9WFISF6Uo6DEBWrYHq23UW3JIqTcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRgpccggiCeEH+7XzKBNjKElpHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzUzZTg3ZDMtNjc2ZC0z NDM5LWEyNzctNmY1OGYyMDdkNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIu2qMKNvcFfXdbA22o0/WqoOXqe8LtySACVpC2SQVnK+MnFNZgbXEo SbSMjJP8HDXI2hD7sd0oEvHG/Qz10r/mwPHYcestQqTuxFpuaS34W2NW6wDZIXUN eJC1SqymaJl7JafJYOK1pt5o7F3KM4+FVwNF2kgZigOnxymbPhfOxcGp0zrUaQJC iydFPnmCKuW9X3p1Q5e/gibwlsboCy7xhQiPM/JM5W69xPceispPL78A/zTU/N1M D1dWlRtrZOMrjc8F0Dvv9nONSfoZFas9zdsMz6YtHsoiSjezk/1sOerJ3/KCaaaM SA9BG9PR2TUTAyCej+2dB6dSXBRYKk8= -----END CERTIFICATE-----Generated at Sun Jan 25 15:41:52 2026 by rpki-client