This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3f11a85-f000-3bd3-91c1-dcc186d2de75.roa File: e3f11a85-f000-3bd3-91c1-dcc186d2de75.roa (raw, json) Hash identifier: 3iGSf5tYRNdaPjJg9WYfvRvxT0MQ+IeksmiY3p+xbrg= Subject key identifier: 0C:0B:F6:0F:0E:1D:60:CD:12:9E:82:52:63:54:90:3D:5B:4F:53:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD10B9878331101A40079380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3f11a85-f000-3bd3-91c1-dcc186d2de75.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:b9:87:83:31:10:1a:40:07:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=7a95aaa0-504c-473c-988b-de617b07eb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:fa:3c:ba:9f:23:a9:d3:8c:ec:2c:82:28: 0c:80:6a:94:95:40:7e:7d:62:28:d5:18:51:1b:74: 48:45:cd:54:4e:1a:12:0e:02:af:6d:5c:93:52:94: 1f:e1:d1:64:f6:eb:50:8f:f1:75:fd:1b:bc:79:c4: e2:c5:c7:cb:b2:9d:59:fb:74:f6:ab:a9:98:63:4b: c1:92:a2:bf:53:7d:26:c2:15:3f:80:f3:ee:ef:13: 45:c3:d1:38:ce:c4:60:53:62:41:7c:db:2b:16:4f: 42:21:22:8f:74:ef:01:d4:b4:30:b1:b9:b2:ff:d7: ba:f2:c0:bc:87:77:bb:3a:d1:b1:57:ea:33:e8:31: de:3f:6e:f5:84:b3:ed:fe:57:ab:35:05:64:d7:bd: ac:e1:29:7b:3a:2a:95:39:32:1b:b7:fc:be:5f:93: b9:18:31:94:05:a4:df:1a:49:5e:b7:90:d9:75:1f: 99:a7:6a:06:80:4c:eb:38:c0:31:d9:bc:a1:97:c6: 56:a1:55:5e:0e:3a:22:3c:55:87:73:d3:fa:f3:64: 53:12:11:0c:66:b0:dc:67:63:4c:fe:ab:56:f0:d8: 46:ac:f0:9c:4a:0c:77:37:5d:b7:69:2d:be:d2:a4: a7:19:9b:37:61:a4:5a:73:78:ef:0b:14:8f:7b:4f: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:F6:0F:0E:1D:60:CD:12:9E:82:52:63:54:90:3D:5B:4F:53:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3f11a85-f000-3bd3-91c1-dcc186d2de75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:47:e6:f2:2a:b5:a4:a3:1d:c6:e2:f5:0b:da:8c:7e:99:d1: 38:09:a2:98:4a:8d:1d:82:aa:1c:71:50:25:a2:ae:ee:16:d8: 60:3a:6f:55:67:ba:a3:39:45:b3:b3:27:23:a8:3e:ba:f4:9a: e1:dd:f7:bf:bf:aa:95:56:de:ec:14:53:0e:ad:e2:e8:fd:77: 7f:9c:f2:1c:82:af:82:ca:c7:8f:97:1b:c9:36:26:13:54:e9: 80:53:e6:c0:a5:46:51:70:b5:d8:75:15:8d:ac:80:39:37:c1: 24:8b:4b:bd:31:67:02:1f:bb:c8:50:5f:01:0f:f7:35:5c:b3: d5:66:68:a3:4e:12:91:f4:b2:b4:f7:84:ec:f7:df:20:87:bb: c9:24:34:9b:c6:90:d5:e6:90:02:4c:70:38:3f:dc:2d:ea:c5: f4:da:5e:96:85:5d:20:4b:e2:5a:bf:06:69:02:ae:4c:d6:a6: df:d6:e5:d2:a3:9a:89:28:4c:7b:fd:5b:ad:06:e2:fa:6e:3c: 9a:71:a6:d3:ba:fd:a0:01:14:e5:82:ac:96:6e:32:d3:8f:95: 26:bd:7a:a2:21:15:64:48:46:93:cc:37:e6:73:43:ef:7f:c4: 1f:47:82:a4:c8:9b:16:3a:dd:ad:2c:7c:32:44:e2:6e:1b:b0: 45:77:ba:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELmHgzEQGkAHk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk N2E5NWFhYTAtNTA0Yy00NzNjLTk4OGItZGU2MTdiMDdlYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbv6PLqfI6nTjOwsgigMgGqUlUB+fWIo1RhR G3RIRc1UThoSDgKvbVyTUpQf4dFk9utQj/F1/Ru8ecTixcfLsp1Z+3T2q6mYY0vB kqK/U30mwhU/gPPu7xNFw9E4zsRgU2JBfNsrFk9CISKPdO8B1LQwsbmy/9e68sC8 h3e7OtGxV+oz6DHeP271hLPt/lerNQVk172s4Sl7OiqVOTIbt/y+X5O5GDGUBaTf Gklet5DZdR+Zp2oGgEzrOMAx2byhl8ZWoVVeDjoiPFWHc9P682RTEhEMZrDcZ2NM /qtW8NhGrPCcSgx3N123aS2+0qSnGZs3YaRac3jvCxSPe09fTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwL9g8OHWDNEp6CUmNUkD1bT1NEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTNmMTFhODUtZjAwMC0z YmQzLTkxYzEtZGNjMTg2ZDJkZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAN2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElH5vIqtaSjHcbi9QvajH6Z0TgJophKjR2CqhxxUCWiru4W2GA6b1Vn uqM5RbOzJyOoPrr0muHd97+/qpVW3uwUUw6t4uj9d3+c8hyCr4LKx4+XG8k2JhNU 6YBT5sClRlFwtdh1FY2sgDk3wSSLS70xZwIfu8hQXwEP9zVcs9VmaKNOEpH0srT3 hOz33yCHu8kkNJvGkNXmkAJMcDg/3C3qxfTaXpaFXSBL4lq/BmkCrkzWpt/W5dKj mokoTHv9W60G4vpuPJpxptO6/aABFOWCrJZuMtOPlSa9eqIhFWRIRpPMN+ZzQ+9/ xB9HgqTImxY63a0sfDJE4m4bsEV3ur8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:16:50 2025 by rpki-client