This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efcbce96-ab53-32a5-8404-204dacbafc8c.roa File: efcbce96-ab53-32a5-8404-204dacbafc8c.roa (raw, json) Hash identifier: c34tdrhahK/duallzc9TGRvyGLlut1pIn1vlSvPSI/U= Subject key identifier: 2B:1A:FD:47:11:D7:90:5F:7A:21:FD:F8:D5:86:AF:68:29:C3:4A:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666FF9B8B007496102CE780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efcbce96-ab53-32a5-8404-204dacbafc8c.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.99.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ff:9b:8b:00:74:96:10:2c:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=296abc70-98d4-4a27-a608-7b3abe3e31b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:1d:c3:44:dd:4c:21:c4:74:7b:47:91:dc: 3d:f3:b6:9c:ca:86:16:5c:41:c5:17:00:d1:71:5a: 87:b5:ed:2d:42:36:0a:0e:9c:cc:b1:27:7b:33:6d: bd:b6:86:4f:92:0e:a6:32:03:f1:0e:3e:d4:fe:bd: b5:69:59:34:46:2b:1d:4e:b2:7d:7e:6d:43:bb:09: af:9b:de:9c:9f:57:f2:d3:61:ed:56:86:cd:88:16: a5:27:91:66:cc:e9:92:3b:b6:8a:b1:47:64:67:f2: 9c:c8:1c:83:b6:c6:bb:2a:a5:db:f9:6e:fb:2a:5d: 08:49:8f:b3:3e:46:e6:d3:8a:1a:97:56:4d:21:36: f6:51:47:10:31:71:46:61:3e:c6:66:82:73:2b:0a: 93:51:e1:94:57:39:a7:71:5a:77:a0:5d:70:cc:7f: c7:a1:7e:bd:6b:27:52:eb:07:74:f4:6e:4a:f0:01: 67:de:c5:b6:73:83:ce:05:7c:8a:c0:ac:9c:fb:09: 83:e0:de:bb:7c:99:e0:0b:a6:09:95:99:a1:ba:af: 37:e9:2f:f9:8c:2d:ba:a0:ce:7e:bf:e7:95:cb:43: 24:aa:ac:98:03:f3:67:21:fa:15:75:f8:70:1f:ae: 71:ae:cb:6a:1d:cf:bc:92:80:b4:09:2a:eb:5e:e7: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:FD:47:11:D7:90:5F:7A:21:FD:F8:D5:86:AF:68:29:C3:4A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efcbce96-ab53-32a5-8404-204dacbafc8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:41:05:39:c4:51:90:fd:e4:50:42:cd:1b:20:c9:37:cf:d4: bd:2a:7a:14:c3:f3:3a:2c:fc:11:fe:28:59:09:87:75:3c:25: 93:56:53:87:5d:49:ed:01:64:2a:a1:63:a5:06:1f:d2:6f:83: 50:c0:cc:76:53:77:9a:33:8d:27:72:13:68:07:9d:c1:c7:01: 27:5d:98:4a:a4:b3:b4:b9:52:20:e0:0f:2f:3c:df:8c:42:84: 5b:8f:be:c3:19:bf:87:b5:77:b0:78:6d:5b:48:93:04:f3:2c: 4c:08:b2:3d:2e:84:73:0b:8c:8c:8c:74:74:30:37:87:9b:be: 55:ce:c9:8f:70:dc:49:03:0c:20:c0:cb:89:77:0c:8c:c5:73: 1e:e6:b4:df:62:ea:fb:86:e2:5f:11:07:4a:4a:c7:87:e1:f5: 86:be:bd:b8:e4:90:1c:80:6b:05:6c:6d:2f:b0:8a:02:fe:d1: 0f:2b:1e:ee:0e:91:95:87:54:ad:cc:55:3f:f6:76:e9:ee:87: 22:ba:d9:32:da:fb:00:86:74:b4:f9:47:5e:3a:12:3d:ec:de: dd:47:35:7b:ad:f1:21:d0:bc:de:4d:4b:65:0a:ce:f6:02:7d: 11:20:07:9e:27:91:78:41:06:1f:b0:2d:84:ae:13:76:13:86: b9:c0:9c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZv+biwB0lhAs54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk Mjk2YWJjNzAtOThkNC00YTI3LWE2MDgtN2IzYWJlM2UzMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Adw0TdTCHEdHtHkdw987acyoYWXEHFFwDR cVqHte0tQjYKDpzMsSd7M229toZPkg6mMgPxDj7U/r21aVk0RisdTrJ9fm1Duwmv m96cn1fy02HtVobNiBalJ5FmzOmSO7aKsUdkZ/KcyByDtsa7KqXb+W77Kl0ISY+z Pkbm04oal1ZNITb2UUcQMXFGYT7GZoJzKwqTUeGUVzmncVp3oF1wzH/HoX69aydS 6wd09G5K8AFn3sW2c4POBXyKwKyc+wmD4N67fJngC6YJlZmhuq836S/5jC26oM5+ v+eVy0MkqqyYA/NnIfoVdfhwH65xrstqHc+8koC0CSrrXucDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsa/UcR15BfeiH9+NWGr2gpw0p3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWZjYmNlOTYtYWI1My0z MmE1LTg0MDQtMjA0ZGFjYmFmYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxBBTnEUZD95FBCzRsgyTfP1L0qehTD8zos/BH+KFkJh3U8JZNWU4dd Se0BZCqhY6UGH9Jvg1DAzHZTd5ozjSdyE2gHncHHASddmEqks7S5UiDgDy8834xC hFuPvsMZv4e1d7B4bVtIkwTzLEwIsj0uhHMLjIyMdHQwN4ebvlXOyY9w3EkDDCDA y4l3DIzFcx7mtN9i6vuG4l8RB0pKx4fh9Ya+vbjkkByAawVsbS+wigL+0Q8rHu4O kZWHVK3MVT/2dunuhyK62TLa+wCGdLT5R146Ej3s3t1HNXut8SHQvN5NS2UKzvYC fREgB54nkXhBBh+wLYSuE3YThrnAnKI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:30:35 2026 by rpki-client