This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d753120d-c6c9-382a-8515-eed7f5a16d1f.roa File: d753120d-c6c9-382a-8515-eed7f5a16d1f.roa (raw, json) Hash identifier: XD+KNFnX5w2opruE0TprUSU/clyCzFzWipRJJwrqyFI= Subject key identifier: 3C:1C:46:CB:2F:B3:7B:A5:03:BA:3F:3E:8C:25:F8:7A:7C:50:A2:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C014092E604946779998CEB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d753120d-c6c9-382a-8515-eed7f5a16d1f.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.189.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:92:e6:04:94:67:79:99:8c:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=9879d60d-1c7a-4296-aadf-e44173ff2e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:0a:7d:a7:65:3a:50:55:90:61:cd:f0:28: ee:59:b7:e8:49:30:5e:b1:8c:c5:96:13:ce:53:29: 6f:5e:f0:1e:15:5f:b7:aa:f5:d1:05:4c:e1:bf:95: da:95:c7:3d:84:eb:8e:fb:18:5d:4b:ba:0e:6a:d0: 21:3a:bc:c7:20:26:ae:79:cf:fe:9a:65:33:eb:a5: 29:8c:8f:34:e2:4f:34:10:21:1b:91:d8:74:99:48: d0:04:db:10:ce:2a:89:d9:07:e1:27:f2:18:38:3b: 96:4e:93:cf:cc:2e:fa:7b:97:ae:09:20:60:fb:36: d4:cc:47:91:63:7a:60:f4:fc:d1:b1:d3:04:40:c6: 07:89:e3:92:43:13:41:ba:a3:be:a5:bb:c8:8c:97: ba:17:73:63:9a:86:65:89:5c:d1:2d:f0:e9:09:89: 70:bf:8b:6d:9a:25:95:9b:39:58:e5:2b:79:d5:3b: 29:95:4f:57:f7:02:1f:17:09:20:8c:c2:dd:a2:df: 3d:98:9e:16:f1:dc:b3:af:dd:40:4d:ba:cf:5b:e7: f4:c2:c2:72:35:17:e9:2d:b9:b4:37:59:79:f8:4f: e2:15:3e:c1:f8:6e:29:0e:ab:48:9d:72:27:ec:ed: e3:6d:d8:77:a3:01:61:ed:28:cb:88:5d:e4:3d:40: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1C:46:CB:2F:B3:7B:A5:03:BA:3F:3E:8C:25:F8:7A:7C:50:A2:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d753120d-c6c9-382a-8515-eed7f5a16d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6c:04:bc:bb:17:ab:ae:b7:0b:52:2b:98:f2:dc:b8:1b:15: 6f:80:10:b1:2a:d2:48:1e:ac:22:75:44:e3:c6:aa:8d:c3:da: c4:7e:f0:d1:c4:74:77:a3:ee:63:d0:0e:1f:b9:35:20:0d:45: cf:e7:62:9f:50:ee:9d:14:70:fc:fc:a8:51:ac:ac:36:95:ef: de:24:56:96:7d:b5:64:ff:da:83:86:3c:86:49:8f:84:60:ad: 08:d4:2d:e2:7e:d5:92:5a:a8:27:d9:73:3e:56:46:a1:a4:22: a1:a9:ce:ca:a0:7c:f2:9a:b7:2a:12:c6:a0:5a:a2:c4:dc:05: 86:58:d5:ac:ba:75:ad:28:ac:4c:ea:93:ee:77:3d:53:0d:bf: 5d:8f:7d:e8:5a:3d:1c:3f:43:06:d5:96:1a:2e:22:28:6c:e4: 2f:94:5a:47:ef:09:7d:f6:f7:07:d5:62:b0:f3:03:ec:77:f6: 75:f6:ac:f3:6d:31:7f:a1:f0:18:90:74:ed:8d:51:2c:d4:75: 1b:dc:53:5a:e9:65:af:f1:f4:46:68:c5:24:44:c6:eb:04:7d: c5:c0:9e:c6:a0:31:93:14:ce:ed:85:fe:23:c9:9e:81:21:a0: c7:2f:11:d4:96:b5:a3:97:10:65:50:d6:e4:ab:fc:11:57:ce: 56:88:df:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQJLmBJRneZmM6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk OTg3OWQ2MGQtMWM3YS00Mjk2LWFhZGYtZTQ0MTczZmYyZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAcKfadlOlBVkGHN8CjuWbfoSTBesYzFlhPO UylvXvAeFV+3qvXRBUzhv5Xalcc9hOuO+xhdS7oOatAhOrzHICauec/+mmUz66Up jI804k80ECEbkdh0mUjQBNsQziqJ2QfhJ/IYODuWTpPPzC76e5euCSBg+zbUzEeR Y3pg9PzRsdMEQMYHieOSQxNBuqO+pbvIjJe6F3NjmoZliVzRLfDpCYlwv4ttmiWV mzlY5St51TsplU9X9wIfFwkgjMLdot89mJ4W8dyzr91ATbrPW+f0wsJyNRfpLbm0 N1l5+E/iFT7B+G4pDqtInXIn7O3jbdh3owFh7SjLiF3kPUCx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwcRssvs3ulA7o/Powl+Hp8UKKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDc1MzEyMGQtYzZjOS0z ODJhLTg1MTUtZWVkN2Y1YTE2ZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1sBLy7F6uutwtSK5jy3LgbFW+AELEq0kgerCJ1ROPGqo3D2sR+8NHE dHej7mPQDh+5NSANRc/nYp9Q7p0UcPz8qFGsrDaV794kVpZ9tWT/2oOGPIZJj4Rg rQjULeJ+1ZJaqCfZcz5WRqGkIqGpzsqgfPKatyoSxqBaosTcBYZY1ay6da0orEzq k+53PVMNv12PfehaPRw/QwbVlhouIihs5C+UWkfvCX329wfVYrDzA+x39nX2rPNt MX+h8BiQdO2NUSzUdRvcU1rpZa/x9EZoxSRExusEfcXAnsagMZMUzu2F/iPJnoEh oMcvEdSWtaOXEGVQ1uSr/BFXzlaI3zA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:18:53 2025 by rpki-client