This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca286c05-7771-3732-9e60-ddc189ac4dae.roa File: ca286c05-7771-3732-9e60-ddc189ac4dae.roa (raw, json) Hash identifier: NhKfQkc80oQp+Geo5slOSdYjYyQMJtoai0pzp0n4DsA= Subject key identifier: 86:22:21:68:C0:D8:3E:19:E6:B3:DD:63:56:82:B3:CE:33:3C:02:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFA45ED2CE30919F464C62F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca286c05-7771-3732-9e60-ddc189ac4dae.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 22773 IP address blocks: 68.2.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:ed:2c:e3:09:19:f4:64:c6:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=8bfc98b4-f170-4371-b141-e5944cbea319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:f9:e8:c5:f6:da:56:65:13:32:cd:85:e3: 04:eb:3b:09:7c:5a:76:25:ae:01:4d:52:37:0b:aa: df:86:2d:62:c0:bf:55:5a:25:f9:ba:a3:db:58:cf: 79:3f:98:3d:d8:06:72:f1:d9:be:c0:39:43:61:4a: ce:32:2e:b7:32:5b:c9:71:13:e8:cf:b2:65:be:26: fa:e7:9e:d5:8a:e1:84:2d:66:7f:bf:8b:95:82:9c: e6:f1:f4:6f:d8:f0:2d:c8:34:10:7d:c6:3b:c4:eb: 4e:88:b8:19:74:b0:3b:f0:1e:87:2d:72:4e:00:a8: 76:50:c6:0f:13:59:40:4b:a9:dd:01:3b:6e:ac:90: 90:6a:d0:40:b3:67:6e:58:c7:43:c9:6b:3d:fa:61: 3c:91:01:2c:71:41:88:d5:16:92:0a:da:a1:e4:8f: 15:e3:b1:0a:a3:07:2a:1f:d1:d6:85:eb:75:62:22: e0:4d:02:98:ba:ae:7d:65:4f:8b:bf:7a:dc:de:f4: 2c:a6:0b:18:1b:7a:57:d0:b0:61:7d:76:37:70:61: a5:1f:d6:a8:bd:79:3c:fe:f2:75:2d:2b:92:b4:14: 2a:db:d4:fb:76:a4:3c:07:af:05:d7:69:5a:d5:eb: 27:10:e1:31:66:42:25:b3:bc:6d:73:18:86:a9:a8: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:22:21:68:C0:D8:3E:19:E6:B3:DD:63:56:82:B3:CE:33:3C:02:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca286c05-7771-3732-9e60-ddc189ac4dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b6:68:c3:1d:e3:39:7b:29:a5:65:56:80:b7:7f:6e:0a:dc: b5:5d:51:41:76:ef:76:90:ce:2a:13:68:52:e0:45:4c:70:b3: 33:bc:48:e1:cd:be:9f:62:13:aa:ae:24:a3:2c:be:6e:b1:24: 7b:9a:e4:d2:20:d0:46:ce:42:7a:d2:e2:23:0c:9e:8b:29:a2: 38:d0:35:ba:e9:74:f3:9d:6e:b2:cf:40:7f:7b:b1:97:c1:1f: 2f:9d:f6:f5:06:25:1f:89:a6:2a:eb:5f:58:d9:ef:53:1e:e8: 06:d2:7d:62:28:d9:81:a5:2b:43:15:95:67:7a:b0:70:07:d1: d0:36:45:cc:a4:68:58:59:b8:80:4b:7a:61:5e:3f:a2:73:b6: 15:49:7d:e8:af:0c:1b:af:11:24:72:40:87:ac:77:27:1c:52: 03:50:a1:0f:d6:37:62:ed:1a:8a:07:85:c8:1a:92:fb:7a:3f: 09:6e:62:71:05:76:8a:22:7b:37:76:ff:18:fe:78:57:6b:69: ef:e3:79:0a:6d:d5:da:5c:a5:97:56:7c:dd:72:f7:d7:82:2d: a8:3c:9f:e3:4c:a6:46:b6:b6:e1:ab:d2:95:f4:7e:15:1a:03: 08:b6:46:c4:e8:13:3a:8b:58:d2:6b:de:b9:f9:40:07:83:3d: b0:e3:89:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6Re0s4wkZ9GTGLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk OGJmYzk4YjQtZjE3MC00MzcxLWIxNDEtZTU5NDRjYmVhMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlX56MX22lZlEzLNheME6zsJfFp2Ja4BTVI3 C6rfhi1iwL9VWiX5uqPbWM95P5g92AZy8dm+wDlDYUrOMi63MlvJcRPoz7Jlvib6 557ViuGELWZ/v4uVgpzm8fRv2PAtyDQQfcY7xOtOiLgZdLA78B6HLXJOAKh2UMYP E1lAS6ndATturJCQatBAs2duWMdDyWs9+mE8kQEscUGI1RaSCtqh5I8V47EKowcq H9HWhet1YiLgTQKYuq59ZU+Lv3rc3vQspgsYG3pX0LBhfXY3cGGlH9aovXk8/vJ1 LSuStBQq29T7dqQ8B68F12la1esnEOExZkIls7xtcxiGqaiSzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYiIWjA2D4Z5rPdY1aCs84zPAJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2EyODZjMDUtNzc3MS0z NzMyLTllNjAtZGRjMTg5YWM0ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa2aMMd4zl7KaVlVoC3f24K3LVdUUF273aQzioTaFLgRUxwszO8SOHN vp9iE6quJKMsvm6xJHua5NIg0EbOQnrS4iMMnospojjQNbrpdPOdbrLPQH97sZfB Hy+d9vUGJR+JpirrX1jZ71Me6AbSfWIo2YGlK0MVlWd6sHAH0dA2RcykaFhZuIBL emFeP6JzthVJfeivDBuvESRyQIesdyccUgNQoQ/WN2LtGooHhcgakvt6PwluYnEF dooiezd2/xj+eFdrae/jeQpt1dpcpZdWfN1y99eCLag8n+NMpka2tuGr0pX0fhUa Awi2RsToEzqLWNJr3rn5QAeDPbDjick= -----END CERTIFICATE-----Generated at Sat Dec 6 18:27:36 2025 by rpki-client