This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6fa3b12-f44c-3804-8daf-09a89d973a19.roa File: d6fa3b12-f44c-3804-8daf-09a89d973a19.roa (raw, json) Hash identifier: LXDB/kgrtCESd9yIReulcROX4eEtOPXlZBJurGxG1iM= Subject key identifier: 4B:D1:27:CA:9D:30:AD:CF:7D:A6:21:D1:CB:C6:DC:FA:D5:51:10:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10B6C0D054CE47648EF200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6fa3b12-f44c-3804-8daf-09a89d973a19.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.98.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:b6:c0:d0:54:ce:47:64:8e:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=a7947eee-f0dc-452d-919a-af2ddafd838d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:88:db:5f:6a:1c:58:b6:2c:5f:d3:92:18: a0:b5:07:3d:80:da:47:bf:c0:c5:a2:74:86:70:1c: 19:87:50:d8:34:ef:42:56:e0:3a:65:1e:c4:b1:df: 03:ba:c4:9f:45:b8:58:8e:b1:38:2d:40:2c:1e:c9: 31:8f:59:19:34:94:0f:b1:cc:2f:bb:4c:f3:65:65: 31:f7:e9:9b:8e:f7:72:79:6a:36:f9:93:84:42:cb: a2:a0:34:2f:a1:cf:ad:97:8f:3f:7c:48:b9:ab:12: 32:1c:dc:6e:5b:35:4b:a2:d7:20:8f:14:f7:f5:ba: 6e:46:36:b1:24:b5:68:0f:28:eb:71:f8:8a:89:0d: c3:ba:36:de:09:84:79:ee:12:fc:e2:f0:29:9a:35: 1d:22:0b:4e:f4:12:bd:6d:e2:d4:c8:df:8e:ac:47: ea:50:6b:21:3d:e2:7e:68:57:b7:52:f5:39:5f:11: 4d:64:32:3f:63:11:2d:4c:88:3c:f7:b9:63:0e:0b: 56:bf:20:cc:a2:1a:8f:70:33:cf:1c:f8:ae:c1:8a: bf:e8:c8:39:fb:03:83:d7:dc:61:12:2d:5c:c1:18: c7:fb:e0:03:53:98:b2:47:3c:03:37:e9:c0:ca:fa: 08:ab:4a:e1:4c:3e:82:a5:11:74:4a:e5:ff:bd:fa: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:27:CA:9D:30:AD:CF:7D:A6:21:D1:CB:C6:DC:FA:D5:51:10:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6fa3b12-f44c-3804-8daf-09a89d973a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8d:c5:9a:9f:e0:50:7b:9a:d1:4f:20:9b:e8:f9:67:3a:d3: 0b:9a:c5:80:d5:94:32:97:1b:78:4f:0d:5f:76:77:59:ef:e9: 73:a2:2e:7a:82:d7:c0:b8:24:d8:ce:83:51:3a:60:63:ed:bf: 26:f1:6f:af:7d:a4:5e:f5:b1:b5:7c:1c:58:87:d4:6f:55:6e: 61:bf:11:1a:42:03:6c:43:ba:b5:dd:bc:c2:a8:fc:d7:3e:4c: 2a:47:a8:7d:44:f5:7d:34:ba:5d:28:dd:3b:34:e0:8b:5b:f8: 7c:f6:49:41:3d:53:ed:15:5e:e6:6d:63:bd:9f:93:d9:69:c8: e7:97:27:66:69:c4:2a:79:32:62:af:45:db:03:90:b7:83:8d: d8:95:94:d8:be:3a:d0:57:1d:da:25:be:2c:28:f2:f7:dd:8b: 99:ad:78:de:f5:b0:7f:7d:98:09:74:c5:ca:70:22:81:76:48: 99:88:2f:1e:98:e3:d1:de:b7:5c:4d:09:a0:77:d5:2d:1e:65: 04:66:b9:48:cb:89:7a:f7:69:8d:57:a4:67:86:1e:b7:64:7a: e1:5b:3f:fd:b4:0b:34:27:d8:c2:d8:cd:07:5b:0c:f7:32:b5: 51:22:ae:24:e6:15:e8:41:c3:1e:37:33:3b:57:3a:26:ba:41: 47:75:3d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELbA0FTOR2SO8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YTc5NDdlZWUtZjBkYy00NTJkLTkxOWEtYWYyZGRhZmQ4MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHyI219qHFi2LF/TkhigtQc9gNpHv8DFonSG cBwZh1DYNO9CVuA6ZR7Esd8DusSfRbhYjrE4LUAsHskxj1kZNJQPscwvu0zzZWUx 9+mbjvdyeWo2+ZOEQsuioDQvoc+tl48/fEi5qxIyHNxuWzVLotcgjxT39bpuRjax JLVoDyjrcfiKiQ3DujbeCYR57hL84vApmjUdIgtO9BK9beLUyN+OrEfqUGshPeJ+ aFe3UvU5XxFNZDI/YxEtTIg897ljDgtWvyDMohqPcDPPHPiuwYq/6Mg5+wOD19xh Ei1cwRjH++ADU5iyRzwDN+nAyvoIq0rhTD6CpRF0SuX/vfra8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvRJ8qdMK3PfaYh0cvG3PrVURATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDZmYTNiMTItZjQ0Yy0z ODA0LThkYWYtMDlhODlkOTczYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6NxZqf4FB7mtFPIJvo+Wc60wuaxYDVlDKXG3hPDV92d1nv6XOiLnqC 18C4JNjOg1E6YGPtvybxb699pF71sbV8HFiH1G9VbmG/ERpCA2xDurXdvMKo/Nc+ TCpHqH1E9X00ul0o3Ts04Itb+Hz2SUE9U+0VXuZtY72fk9lpyOeXJ2ZpxCp5MmKv RdsDkLeDjdiVlNi+OtBXHdolviwo8vfdi5mteN71sH99mAl0xcpwIoF2SJmILx6Y 49Het1xNCaB31S0eZQRmuUjLiXr3aY1XpGeGHrdkeuFbP/20CzQn2MLYzQdbDPcy tVEiriTmFehBwx43MztXOia6QUd1PZQ= -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:13 2025 by rpki-client