This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cae32259-205b-3e24-9439-5fb4899e96a0.roa File: cae32259-205b-3e24-9439-5fb4899e96a0.roa (raw, json) Hash identifier: WP1aoz9feHlYuEx9Tm1tOBFd8n0pVWkzfdBvMabEDZA= Subject key identifier: 23:28:56:3E:B9:0E:74:69:E4:50:BC:C8:AC:4A:BD:A1:E6:A2:8D:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140F3C12D58AB29CE55FDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cae32259-205b-3e24-9439-5fb4899e96a0.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.104.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:f3:c1:2d:58:ab:29:ce:55:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=a19348b3-c013-41db-b1f0-7f4219cc5a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:e4:d1:63:3a:c4:2d:dd:ec:0f:a1:9e:2a: 8d:23:0a:ff:8e:a5:e2:e4:c9:30:0e:5c:84:5f:a7: 8e:71:60:17:f6:f5:9c:de:41:c6:51:c4:09:28:7d: 2b:4a:fd:1f:56:ff:f9:da:10:97:98:4a:3f:b1:4c: a3:ec:ae:bb:57:66:b3:73:9e:c9:63:cb:30:ab:d7: 96:8c:36:3e:b1:f1:98:d0:f1:d3:10:6e:23:81:f7: 12:6b:ca:f8:59:d0:8f:7f:8e:aa:f6:e1:1a:88:77: 88:5d:b3:40:f0:d9:4f:e1:ce:f1:c4:49:19:1b:23: fe:ec:6b:74:70:0c:9b:d2:9c:53:fe:70:b8:65:0d: 9b:7c:ae:89:76:83:02:69:70:a1:28:90:30:d0:80: 35:76:35:45:cd:ee:04:bb:5c:06:a3:87:a7:7d:35: 88:47:6a:fe:bd:0e:e1:69:24:7f:e6:89:48:ad:2a: 3c:c5:ba:c1:08:1a:f3:d0:87:42:41:1f:df:1c:b9: fb:f1:4f:fc:10:42:44:c3:2c:65:4f:d1:ea:88:96: ce:91:fa:11:62:34:69:73:35:2f:6d:8e:01:5e:c9: ad:ee:58:29:30:cb:4a:91:6b:0b:c4:d6:04:cb:2b: fb:da:80:56:22:16:26:e8:51:dc:76:b1:5b:e6:17: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:56:3E:B9:0E:74:69:E4:50:BC:C8:AC:4A:BD:A1:E6:A2:8D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cae32259-205b-3e24-9439-5fb4899e96a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9f:f7:77:c1:8e:d5:8a:f8:5a:32:82:3d:bc:d0:a5:49:ec: 9a:a4:11:3d:80:2c:af:3a:61:d4:58:ca:53:4f:90:7a:34:b6: d4:e4:2c:59:3a:7c:34:2e:06:b4:a1:b4:d3:95:24:5a:65:4d: ec:8a:3e:f6:2e:a2:98:1a:91:00:95:ea:22:89:56:b4:00:5b: 7d:a4:32:26:eb:6a:46:a3:09:63:42:8d:e2:7a:d6:05:d0:89: 82:6c:64:2b:fa:1b:6e:23:c8:52:e7:45:16:11:f7:09:0d:3c: 21:56:2c:1c:9a:56:0c:3f:f8:60:20:9e:94:d2:70:5f:b1:82: 4e:53:b6:da:31:d7:22:82:9a:9d:1f:6c:52:17:0a:db:d0:a2: 74:49:ba:bf:de:51:8a:a0:d7:91:8d:6b:2b:76:55:bf:a1:ab: 51:28:ee:7c:30:b9:8e:ca:a0:8e:f8:92:91:d6:57:d8:59:02: cf:7d:d0:a5:8c:43:17:b6:d9:76:92:45:73:98:53:3d:21:1b: 92:a1:48:01:bb:3b:c9:10:02:7e:e9:75:86:e2:32:64:25:be: 88:75:16:8c:dd:9c:d7:b3:7c:b4:80:c6:c6:30:91:02:31:e3: 81:58:63:bb:37:6c:b1:cd:4b:d8:a0:ca:54:ba:01:fe:09:27: 6b:21:b3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQPPBLVirKc5V/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk YTE5MzQ4YjMtYzAxMy00MWRiLWIxZjAtN2Y0MjE5Y2M1YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3k0WM6xC3d7A+hniqNIwr/jqXi5MkwDlyE X6eOcWAX9vWc3kHGUcQJKH0rSv0fVv/52hCXmEo/sUyj7K67V2azc57JY8swq9eW jDY+sfGY0PHTEG4jgfcSa8r4WdCPf46q9uEaiHeIXbNA8NlP4c7xxEkZGyP+7Gt0 cAyb0pxT/nC4ZQ2bfK6JdoMCaXChKJAw0IA1djVFze4Eu1wGo4enfTWIR2r+vQ7h aSR/5olIrSo8xbrBCBrz0IdCQR/fHLn78U/8EEJEwyxlT9HqiJbOkfoRYjRpczUv bY4BXsmt7lgpMMtKkWsLxNYEyyv72oBWIhYm6FHcdrFb5hcAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMoVj65DnRp5FC8yKxKvaHmoo3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FlMzIyNTktMjA1Yi0z ZTI0LTk0MzktNWZiNDg5OWU5NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaf93fBjtWK+Foygj280KVJ7JqkET2ALK86YdRYylNPkHo0ttTkLFk6 fDQuBrShtNOVJFplTeyKPvYuopgakQCV6iKJVrQAW32kMibrakajCWNCjeJ61gXQ iYJsZCv6G24jyFLnRRYR9wkNPCFWLByaVgw/+GAgnpTScF+xgk5Tttox1yKCmp0f bFIXCtvQonRJur/eUYqg15GNayt2Vb+hq1Eo7nwwuY7KoI74kpHWV9hZAs990KWM Qxe22XaSRXOYUz0hG5KhSAG7O8kQAn7pdYbiMmQlvoh1FozdnNezfLSAxsYwkQIx 44FYY7s3bLHNS9igylS6Af4JJ2shs7I= -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:38 2025 by rpki-client