This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa File: e3c52c97-c290-3307-892c-62205511a25b.roa (raw, json) Hash identifier: 2RrWLXJTkAuxnMK8/qEja8jQuKrH0tds6qOk+34pN2w= Subject key identifier: 8A:BC:EE:D2:B8:05:1D:1D:BC:81:F3:E2:60:7B:01:2A:C7:6F:36:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140A1C872331ABB3BB19900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:a1:c8:72:33:1a:bb:3b:b1:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=1a67ef1d-e5fb-4fde-98b1-2904551197a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:63:ec:5e:10:4d:d7:19:b4:c1:97:1a:5e: 03:db:f2:1b:f3:33:0c:1d:4d:0c:18:5d:f7:43:da: db:88:02:d5:78:df:50:29:4c:37:90:df:d8:c5:b6: 68:22:66:3d:f9:f6:79:4f:e1:4e:9d:8d:c2:ac:34: 70:fc:af:ef:ec:32:91:04:66:15:a9:7e:97:2d:02: b9:dc:e0:0b:f1:11:e5:2e:82:48:b5:12:da:25:8e: bf:14:96:31:f1:cc:2b:9f:b8:e5:e5:b4:68:85:2f: ee:b0:ac:c6:26:c2:e9:4d:d7:73:cd:e1:6f:a4:e3: 00:fd:64:8e:74:4c:16:73:75:26:4e:24:32:5e:fb: ef:f4:2e:1d:b2:5b:d3:81:33:ad:d6:d8:68:14:98: 62:bf:1a:fd:ee:2a:fb:b9:91:13:54:69:2b:23:29: b0:dc:b1:33:f7:68:f2:22:23:ed:6f:b0:2f:63:25: dc:b0:ce:49:c6:74:d0:cc:6f:aa:9d:78:2b:48:b2: b4:28:42:d3:90:2b:5a:45:ba:5b:a6:ad:93:af:f3: 71:b3:e0:3e:16:85:cc:bf:1e:3d:3a:8d:35:26:31: 0f:68:9d:94:dc:40:0b:7c:ee:e1:4f:5f:fb:10:a8: b1:94:cc:14:0e:22:70:c8:e8:82:9d:5d:5c:b6:94: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:EE:D2:B8:05:1D:1D:BC:81:F3:E2:60:7B:01:2A:C7:6F:36:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:78:81:59:7c:74:b1:ff:49:12:23:57:9f:23:c3:83:cf:03: 69:5e:a1:16:42:81:0a:11:8b:24:d2:36:65:5b:c5:6d:fa:2e: b8:d2:17:ca:26:27:9c:e6:1c:ec:38:09:56:4b:d2:57:60:6e: 9a:2e:d3:07:5b:42:24:4f:df:e8:d7:55:8d:fd:f6:a7:cd:55: d5:95:9a:f2:52:f3:dd:54:2a:70:1c:af:a0:a1:2e:85:d5:af: f8:36:b8:40:b3:b7:00:ba:b7:b6:22:11:64:38:f1:8e:e3:d0: cd:5c:a4:dd:ea:7f:0b:c8:9d:17:cf:b1:ab:ad:3c:d4:bf:2e: ad:b3:03:61:2a:93:cc:b8:54:a9:34:a4:4a:d4:3d:09:88:5f: 83:7b:59:92:6f:e1:6a:59:6e:62:aa:75:76:0e:b4:c8:48:07: 5d:fc:70:c6:db:54:7b:5d:9c:81:1d:20:0b:8b:0c:2f:db:0e: e7:09:f4:a5:72:7c:4d:35:3e:73:18:a6:6a:7d:b3:fe:fa:d7: 81:07:8a:e1:92:2e:cd:14:af:6c:05:08:73:56:b5:57:a3:83: ec:43:f0:ad:06:bc:54:cf:3a:77:89:82:34:5f:17:4d:6a:f6: 8b:b5:5b:76:f6:2f:af:7d:44:e4:81:8e:a9:73:2b:3f:f8:9c: 4e:c2:43:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQKHIcjMauzuxmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MWE2N2VmMWQtZTVmYi00ZmRlLTk4YjEtMjkwNDU1MTE5N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc9j7F4QTdcZtMGXGl4D2/Ib8zMMHU0MGF33 Q9rbiALVeN9QKUw3kN/YxbZoImY9+fZ5T+FOnY3CrDRw/K/v7DKRBGYVqX6XLQK5 3OAL8RHlLoJItRLaJY6/FJYx8cwrn7jl5bRohS/usKzGJsLpTddzzeFvpOMA/WSO dEwWc3UmTiQyXvvv9C4dslvTgTOt1thoFJhivxr97ir7uZETVGkrIymw3LEz92jy IiPtb7AvYyXcsM5JxnTQzG+qnXgrSLK0KELTkCtaRbpbpq2Tr/Nxs+A+FoXMvx49 Oo01JjEPaJ2U3EALfO7hT1/7EKixlMwUDiJwyOiCnV1ctpTxgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq87tK4BR0dvIHz4mB7ASrHbzZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTNjNTJjOTctYzI5MC0z MzA3LTg5MmMtNjIyMDU1MTFhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ4gVl8dLH/SRIjV58jw4PPA2leoRZCgQoRiyTSNmVbxW36LrjSF8om J5zmHOw4CVZL0ldgbpou0wdbQiRP3+jXVY399qfNVdWVmvJS891UKnAcr6ChLoXV r/g2uECztwC6t7YiEWQ48Y7j0M1cpN3qfwvInRfPsautPNS/Lq2zA2Eqk8y4VKk0 pErUPQmIX4N7WZJv4WpZbmKqdXYOtMhIB138cMbbVHtdnIEdIAuLDC/bDucJ9KVy fE01PnMYpmp9s/7614EHiuGSLs0Ur2wFCHNWtVejg+xD8K0GvFTPOneJgjRfF01q 9ou1W3b2L699ROSBjqlzKz/4nE7CQ+8= -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:00 2025 by rpki-client