This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf2bef47-012d-3dfa-ae35-0d867931a0fa.roa File: cf2bef47-012d-3dfa-ae35-0d867931a0fa.roa (raw, json) Hash identifier: j7rFOPp2vVKfK5Rbwlccr8Krj0UKIGmP74i6XikVU/4= Subject key identifier: CB:39:2C:05:4D:84:10:97:CE:67:01:54:3A:7D:BB:59:0C:63:05:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140B0CD97B5694B424E0780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf2bef47-012d-3dfa-ae35-0d867931a0fa.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 24.253.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:b0:cd:97:b5:69:4b:42:4e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=2303c2d4-5d1c-4b9e-afa0-f346bd4ca392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:11:ba:96:ac:2f:9d:37:13:7b:e1:29:60: 44:9b:8a:ff:ee:41:64:17:b8:f6:9c:d6:7c:0a:7c: c7:15:35:63:97:5b:ef:6a:e5:12:06:2d:f2:07:e5: 95:c4:5e:ef:80:9c:1d:b1:4c:c8:6f:4e:94:60:93: b9:b7:72:e2:f8:e1:dc:46:e2:17:13:09:e1:65:72: f9:80:7b:e7:e6:8e:7d:d3:e8:2c:b2:d5:b3:4d:02: 18:33:7b:13:76:de:a0:12:06:ee:ed:8d:5a:fa:cc: 9e:c3:60:39:d0:84:e7:70:ff:42:cc:de:8e:88:d7: 5d:fb:52:7a:7e:22:6c:47:10:7b:dd:23:b9:ae:99: 3c:7e:83:13:5e:68:17:f0:ca:b4:b3:20:e9:b4:75: 67:a2:0a:71:d6:ac:d5:df:f7:ae:1c:0b:81:bd:b8: e3:97:9b:02:97:ab:da:8b:81:92:5d:0f:5e:06:65: e6:1f:55:54:b5:f0:92:75:df:8f:66:da:46:2a:ab: 91:0c:1c:a4:1a:e5:30:a0:26:a5:15:c1:4c:11:e4: 29:c5:0d:5a:8a:09:40:b7:3a:7d:f9:1d:fd:01:fe: a2:6f:c6:02:14:af:d5:e9:7b:8b:eb:ad:65:d3:97: b5:ec:02:2b:35:a6:1d:c2:b5:98:34:99:a3:db:08: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:39:2C:05:4D:84:10:97:CE:67:01:54:3A:7D:BB:59:0C:63:05:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf2bef47-012d-3dfa-ae35-0d867931a0fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:86:b1:5f:29:6f:b9:82:8c:76:7d:bd:ce:e4:24:0f:4a:56: 94:a5:16:a6:a1:0f:65:7f:3f:e7:c1:ae:69:75:cf:27:a1:d8: 0e:8c:be:9e:6f:ba:c2:15:85:13:47:93:36:bb:ef:cd:a4:58: cb:47:ac:39:a7:cc:38:0c:79:10:48:a8:b3:5b:e7:81:c1:0c: 98:08:c1:ec:41:e1:81:a5:b4:66:80:c7:56:4c:31:19:96:4c: 52:bb:b4:54:2a:af:23:cc:40:32:b9:13:5f:a6:05:ec:54:18: 4a:fe:84:9d:04:da:3b:71:a2:7b:29:23:78:cd:bf:ab:9f:26: e9:89:31:b0:37:a9:ea:9f:70:ed:76:d7:f8:52:71:f9:86:ec: 6b:dc:8d:77:04:6d:03:81:5f:0d:f7:92:10:18:cc:16:ec:88: 02:6d:b9:ea:dc:ad:e4:48:da:59:d3:b5:b8:18:20:d4:12:12: be:d9:ac:be:55:42:54:a7:6b:75:31:47:d9:d3:25:df:b7:7f: 3e:63:23:20:74:cd:b8:6f:8f:6b:fa:83:1c:3e:f8:14:52:69: e9:1e:c3:36:03:4f:88:a0:06:d2:9f:ca:b4:bc:a8:41:ee:65: 3a:45:da:b6:ed:0b:de:fa:88:86:b0:dc:f3:62:14:51:69:ff: df:78:7b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQLDNl7VpS0JOB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MjMwM2MyZDQtNWQxYy00YjllLWFmYTAtZjM0NmJkNGNhMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAingRupasL503E3vhKWBEm4r/7kFkF7j2nNZ8 CnzHFTVjl1vvauUSBi3yB+WVxF7vgJwdsUzIb06UYJO5t3Li+OHcRuIXEwnhZXL5 gHvn5o590+gsstWzTQIYM3sTdt6gEgbu7Y1a+syew2A50ITncP9CzN6OiNdd+1J6 fiJsRxB73SO5rpk8foMTXmgX8Mq0syDptHVnogpx1qzV3/euHAuBvbjjl5sCl6va i4GSXQ9eBmXmH1VUtfCSdd+PZtpGKquRDBykGuUwoCalFcFMEeQpxQ1aiglAtzp9 +R39Af6ib8YCFK/V6XuL661l05e17AIrNaYdwrWYNJmj2wiG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs5LAVNhBCXzmcBVDp9u1kMYwW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2YyYmVmNDctMDEyZC0z ZGZhLWFlMzUtMGQ4Njc5MzFhMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2GsV8pb7mCjHZ9vc7kJA9KVpSlFqahD2V/P+fBrml1zyeh2A6Mvp5v usIVhRNHkza7782kWMtHrDmnzDgMeRBIqLNb54HBDJgIwexB4YGltGaAx1ZMMRmW TFK7tFQqryPMQDK5E1+mBexUGEr+hJ0E2jtxonspI3jNv6ufJumJMbA3qeqfcO12 1/hScfmG7GvcjXcEbQOBXw33khAYzBbsiAJtuercreRI2lnTtbgYINQSEr7ZrL5V QlSna3UxR9nTJd+3fz5jIyB0zbhvj2v6gxw++BRSaekewzYDT4igBtKfyrS8qEHu ZTpF2rbtC976iIaw3PNiFFFp/994e5Y= -----END CERTIFICATE-----Generated at Sun Dec 7 02:32:29 2025 by rpki-client