This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1a3af71-c454-3eeb-81fe-ea54a2a3a181.roa
File: d1a3af71-c454-3eeb-81fe-ea54a2a3a181.roa (raw, json)
Hash identifier: gByWSbhlkMSUyVNt7sRUB61EQBbrrAllc56CQOGGh+A=
Subject key identifier: 74:F9:E5:F2:CC:1E:83:64:63:57:C5:AB:6C:0C:B8:78:0A:FE:76:90
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584C0140E9DD02E770DA624FDEC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1a3af71-c454-3eeb-81fe-ea54a2a3a181.roa
Signing time: Fri 28 Nov 2025 02:00:30 +0000
ROA not before: Fri 28 Nov 2025 02:00:30 +0000
ROA not after: Thu 26 Feb 2026 02:00:30 +0000
asID: 22773
IP address blocks: 68.224.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:01:40:e9:dd:02:e7:70:da:62:4f:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 28 02:00:30 2025 GMT
Not After : Feb 26 02:00:30 2026 GMT
Subject: CN=e195d879-0281-4518-bcb7-948c0e97cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:23:87:42:ec:84:0b:1f:63:61:db:61:7f:
ba:d7:9b:3f:92:c9:6c:04:1f:ec:c5:07:26:c8:84:
db:8c:1d:3e:dd:0f:48:26:b5:c2:c5:34:fc:7e:7d:
ef:46:b3:1e:98:f8:7d:64:6a:d5:c7:a7:52:01:0b:
32:a8:6e:02:1a:fe:b8:eb:3f:05:9e:6d:30:57:de:
f6:ed:3c:20:cf:aa:6b:0a:36:17:88:b9:f8:56:8b:
9b:b5:71:d7:a1:f5:d5:3f:c1:b6:6f:59:a2:38:56:
36:79:bc:6c:43:41:53:c9:5d:98:20:26:32:c7:2d:
1f:1c:96:c3:3c:23:ad:97:ce:77:17:9f:00:51:c5:
51:bf:06:a2:90:45:7d:b6:48:80:b8:b9:69:9d:dd:
b8:dc:8a:2f:9e:62:24:ea:a1:44:c0:c5:38:de:1c:
62:ea:d8:07:5a:e7:22:8f:aa:be:16:43:cd:3c:9b:
ae:89:96:44:d4:78:94:ad:e5:7a:9a:46:04:3b:10:
78:9c:de:be:92:74:96:18:9d:24:ac:51:9b:61:f0:
1d:5a:20:8d:a4:4c:c1:3c:b7:1e:53:8f:67:77:78:
0f:fa:b9:2c:6d:53:b6:ab:60:da:40:13:ef:fa:cd:
d1:64:25:d1:a4:1c:31:49:34:af:b8:ec:ee:d9:15:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:E5:F2:CC:1E:83:64:63:57:C5:AB:6C:0C:B8:78:0A:FE:76:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1a3af71-c454-3eeb-81fe-ea54a2a3a181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9d:49:24:12:5d:92:67:a6:d2:fe:45:af:e0:2d:8e:c8:cb:
bb:8f:05:be:2a:6a:39:48:56:4c:f6:83:5f:ef:e4:16:18:1c:
01:bc:2e:a0:b0:87:0c:08:32:e8:29:aa:1e:7c:0c:f7:f8:08:
09:56:db:2a:f4:cb:0e:68:9e:eb:97:1e:fd:95:3e:aa:95:ca:
ee:77:72:f5:6d:42:33:90:e8:6a:0d:43:de:ec:65:39:37:5c:
a9:c3:8b:86:84:19:e9:c5:0f:57:a7:8c:ee:57:38:f4:5f:08:
b3:59:89:75:a0:23:1a:20:7f:59:23:c6:6d:52:b1:ef:9e:91:
0c:92:d1:25:83:56:53:e5:35:87:12:2f:91:bd:31:9a:9b:27:
e3:e5:8b:b4:41:ee:f0:ad:e4:da:05:26:61:ab:7e:92:bf:cc:
6b:d5:02:f9:4c:94:cf:5f:29:98:dc:bf:11:96:55:f0:45:70:
b3:2a:7b:87:0b:09:02:c1:8a:3d:e7:5f:88:6a:8a:4a:f0:7b:
12:ee:3b:b6:b1:68:fc:d2:8d:06:20:06:52:ee:7a:37:74:b9:
19:2d:d2:55:db:e3:d7:65:fd:33:30:48:af:34:62:ae:82:f1:
a4:04:e2:3c:b5:30:d4:e0:25:98:b7:c0:54:3f:d4:32:42:e8:
62:db:e1:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQOndAudw2mJP3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk
ZTE5NWQ4NzktMDI4MS00NTE4LWJjYjctOTQ4YzBlOTdjYjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTMjh0LshAsfY2HbYX+615s/kslsBB/sxQcm
yITbjB0+3Q9IJrXCxTT8fn3vRrMemPh9ZGrVx6dSAQsyqG4CGv646z8Fnm0wV972
7Twgz6prCjYXiLn4VoubtXHXofXVP8G2b1miOFY2ebxsQ0FTyV2YICYyxy0fHJbD
PCOtl853F58AUcVRvwaikEV9tkiAuLlpnd243IovnmIk6qFEwMU43hxi6tgHWuci
j6q+FkPNPJuuiZZE1HiUreV6mkYEOxB4nN6+knSWGJ0krFGbYfAdWiCNpEzBPLce
U49nd3gP+rksbVO2q2DaQBPv+s3RZCXRpBwxSTSvuOzu2RVKLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHT55fLMHoNkY1fFq2wMuHgK/naQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDFhM2FmNzEtYzQ1NC0z
ZWViLTgxZmUtZWE1NGEyYTNhMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmdSSQSXZJnptL+Ra/gLY7Iy7uPBb4qajlIVkz2g1/v5BYYHAG8LqCw
hwwIMugpqh58DPf4CAlW2yr0yw5onuuXHv2VPqqVyu53cvVtQjOQ6GoNQ97sZTk3
XKnDi4aEGenFD1enjO5XOPRfCLNZiXWgIxogf1kjxm1Sse+ekQyS0SWDVlPlNYcS
L5G9MZqbJ+Pli7RB7vCt5NoFJmGrfpK/zGvVAvlMlM9fKZjcvxGWVfBFcLMqe4cL
CQLBij3nX4hqikrwexLuO7axaPzSjQYgBlLuejd0uRkt0lXb49dl/TMwSK80Yq6C
8aQE4jy1MNTgJZi3wFQ/1DJC6GLb4R4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:25:50 2025 by rpki-client