This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef8c3dc0-013e-313c-8593-a5dbdce0c405.roa File: ef8c3dc0-013e-313c-8593-a5dbdce0c405.roa (raw, json) Hash identifier: XCOQpqRIr+OD4jkqJKSUZlnZlGGXDrW+QxINtl+0A7Q= Subject key identifier: CE:74:0A:F5:CD:AE:4D:EB:BB:54:0F:63:18:31:3C:F1:95:89:46:BD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56671872F00B9BC0E59F5D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef8c3dc0-013e-313c-8593-a5dbdce0c405.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.225.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:18:72:f0:0b:9b:c0:e5:9f:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=7d786b3c-6185-4f57-aca6-2dffb2dc0058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:19:76:e6:f9:2f:c4:94:1a:9e:25:66:f1: 70:a3:27:ce:67:39:5c:30:f7:93:06:13:e0:28:42: c5:0f:ef:58:47:17:f3:a6:9c:d2:0b:aa:51:af:0b: ba:d7:fa:2c:7e:f4:98:5f:ab:2b:c1:b4:82:6e:b0: c5:62:94:c2:84:32:85:d8:1d:97:00:87:05:ca:4b: 7f:d3:63:24:8d:b1:cb:1e:40:ab:be:d6:60:29:40: 8d:af:f3:7b:5b:bc:40:37:ba:5d:d1:29:9a:b7:8c: b5:e9:1e:64:31:cc:ac:6e:1b:47:2b:d5:07:0e:59: ca:46:a8:35:7e:78:6a:86:27:65:7f:16:c9:e5:aa: 74:c2:6f:82:7a:4e:76:87:fb:80:92:50:74:53:40: 1b:c1:59:f4:d0:db:c6:6b:32:d2:08:61:c5:02:19: 8b:05:0b:b2:68:47:2f:ba:11:6c:19:2d:5c:c0:12: 2a:d5:da:98:29:dc:6d:5c:3b:a9:b4:73:5b:f3:f0: 8b:61:23:a6:28:d5:b9:1c:9c:74:9c:97:d5:23:f8: 48:67:fd:c3:51:8d:a3:e2:df:8b:fa:80:70:45:b9: 27:1f:ad:b2:1c:3c:c4:0a:aa:6b:d4:d0:f2:f2:d3: c4:84:59:13:64:f7:59:92:1f:c0:ce:a7:0d:b2:f5: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:74:0A:F5:CD:AE:4D:EB:BB:54:0F:63:18:31:3C:F1:95:89:46:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef8c3dc0-013e-313c-8593-a5dbdce0c405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:44:c0:53:3d:f7:d3:3d:59:73:09:f3:65:f4:b8:07:74:c0: 87:78:fa:98:99:e8:82:8b:5d:b9:0d:18:96:23:8a:73:bc:d0: be:73:1f:c4:db:ec:a6:c1:d6:a5:4d:df:cc:dd:ef:ca:3d:dc: 6d:66:06:18:cf:cd:b7:df:c5:b1:44:84:fa:a1:41:43:d0:7f: 3a:94:76:d8:23:71:75:01:a6:98:8d:ab:d7:e8:16:53:0d:8f: 22:eb:c3:3a:b9:bd:06:6d:dd:47:c9:19:e1:ae:06:3b:fe:71: c3:17:9a:cc:b4:c5:37:f1:88:a7:b3:da:4f:9b:e9:f0:18:84: db:1a:8b:ef:c9:15:70:da:75:05:37:1d:74:f3:22:c1:25:b2: 57:6b:af:c3:1d:55:9e:32:aa:61:ac:48:73:3b:55:55:79:7a: 12:9c:10:98:bc:ab:b2:75:cc:dd:c9:4a:ae:26:ef:74:6d:53: c0:b6:ef:7e:3b:36:c8:c5:5c:b0:6c:d6:0e:9f:6b:b6:71:f2: 39:11:0c:93:9d:59:b9:0b:00:81:9e:bc:bd:2c:86:b8:9a:da: e8:3e:08:f8:9c:45:52:53:65:56:29:b8:ff:0f:d8:d7:37:1f: 05:be:7a:db:93:9f:57:b1:1d:3f:2d:0f:5e:d4:34:e6:d9:d0: 52:34:96:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZxhy8AubwOWfXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk N2Q3ODZiM2MtNjE4NS00ZjU3LWFjYTYtMmRmZmIyZGMwMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W8Zdub5L8SUGp4lZvFwoyfOZzlcMPeTBhPg KELFD+9YRxfzppzSC6pRrwu61/osfvSYX6srwbSCbrDFYpTChDKF2B2XAIcFykt/ 02MkjbHLHkCrvtZgKUCNr/N7W7xAN7pd0Smat4y16R5kMcysbhtHK9UHDlnKRqg1 fnhqhidlfxbJ5ap0wm+Cek52h/uAklB0U0AbwVn00NvGazLSCGHFAhmLBQuyaEcv uhFsGS1cwBIq1dqYKdxtXDuptHNb8/CLYSOmKNW5HJx0nJfVI/hIZ/3DUY2j4t+L +oBwRbknH62yHDzECqpr1NDy8tPEhFkTZPdZkh/AzqcNsvXgUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM50CvXNrk3ru1QPYxgxPPGViUa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY4YzNkYzAtMDEzZS0z MTNjLTg1OTMtYTVkYmRjZTBjNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9EwFM999M9WXMJ82X0uAd0wId4+piZ6IKLXbkNGJYjinO80L5zH8Tb 7KbB1qVN38zd78o93G1mBhjPzbffxbFEhPqhQUPQfzqUdtgjcXUBppiNq9foFlMN jyLrwzq5vQZt3UfJGeGuBjv+ccMXmsy0xTfxiKez2k+b6fAYhNsai+/JFXDadQU3 HXTzIsElsldrr8MdVZ4yqmGsSHM7VVV5ehKcEJi8q7J1zN3JSq4m73RtU8C27347 NsjFXLBs1g6fa7Zx8jkRDJOdWbkLAIGevL0shria2ug+CPicRVJTZVYpuP8P2Nc3 HwW+etuTn1exHT8tD17UNObZ0FI0lkc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:39 2026 by rpki-client