This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f76b284c-671f-32de-9a63-3004d9e9ad8c.roa File: f76b284c-671f-32de-9a63-3004d9e9ad8c.roa (raw, json) Hash identifier: ex/AIgb78FH9C2hUpN2iEJhybn5i/cdd+ZUrjl6W1zc= Subject key identifier: 08:12:C7:B4:65:D6:A6:2A:9E:35:A6:49:EE:04:F2:B6:8E:98:66:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140B33D0157BFCFA29EE200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f76b284c-671f-32de-9a63-3004d9e9ad8c.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.189.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:b3:3d:01:57:bf:cf:a2:9e:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=1092e2fc-ae36-4136-826d-394be9e5c3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:ca:70:57:6f:ed:bc:e1:c9:5b:bd:ae:17: f3:90:aa:eb:90:9d:ab:45:22:37:99:d7:2e:da:0c: cc:6a:dc:fc:d8:70:1d:40:66:fd:30:02:7a:59:27: 61:de:4f:b5:79:ed:0f:e2:19:bb:d8:07:72:44:c6: 27:b0:6f:60:eb:df:54:e4:03:0a:b3:05:d2:1d:0c: fc:17:65:05:3c:08:e9:b0:fd:e3:ec:7d:ad:e7:d4: 42:d5:0a:32:2f:52:83:a2:b1:8d:8b:e9:84:d6:5b: a9:99:c0:a5:42:bd:a3:a9:59:25:28:71:5e:eb:81: b3:cc:24:16:61:49:08:0d:90:d2:f8:81:ef:a7:0c: 78:64:85:72:84:4e:69:82:c5:24:8b:d4:59:d9:66: 33:fb:fb:8d:8c:40:79:59:6c:00:2c:c0:d2:27:c5: b7:2c:97:7a:5d:33:13:28:1c:7b:83:cd:8e:06:5c: 0d:9c:05:be:03:0a:54:14:20:ed:5f:1d:28:d8:62: 6e:7a:8c:fd:c9:48:23:61:45:83:10:a7:e8:c6:15: 07:35:23:54:44:1a:dd:85:68:7e:0b:41:33:b8:dc: 95:02:4a:65:fb:6f:3a:cb:01:26:f8:63:12:d9:77: b9:d3:45:75:b7:a1:b2:d6:bc:81:ff:2d:ee:e2:2e: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:C7:B4:65:D6:A6:2A:9E:35:A6:49:EE:04:F2:B6:8E:98:66:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f76b284c-671f-32de-9a63-3004d9e9ad8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:85:90:04:2d:23:bc:5a:7a:ee:10:81:de:41:52:4b:61:ee: 8a:65:21:78:b0:a9:f4:0a:f9:a6:9a:b1:90:29:53:7b:86:f9: ab:45:33:81:33:76:45:5e:75:89:58:5a:a2:1e:dc:48:94:4d: ca:f9:48:ac:cc:91:9d:f5:fd:ae:8f:2c:4f:44:d2:4b:fa:65: 43:6c:62:6c:1b:fc:d1:ba:f3:ca:e7:0c:db:06:c6:e3:16:4f: 2a:6d:2c:b3:1a:c7:65:b8:31:33:b9:fe:47:58:e0:8b:7f:dd: 6b:55:9e:bf:dd:3c:6c:4a:64:20:1d:8b:1d:7d:24:f2:90:b8: 92:b6:95:14:9f:2d:e4:5d:3a:23:55:95:63:13:8a:bb:82:0f: 02:cd:6c:fb:cd:2a:b9:cc:cc:43:20:08:24:cb:cc:1d:52:84: dd:15:c0:c3:0f:c1:3a:34:0a:c2:4e:b5:82:cc:ea:8c:90:78: b0:a0:e0:05:bf:df:22:96:7f:c7:3d:ae:3f:3c:53:46:c4:82: 32:2d:aa:19:7f:98:05:94:2a:28:13:e0:94:86:63:7e:90:11: f8:6b:ee:ae:fc:d9:ff:76:69:36:62:6b:0d:a9:eb:16:08:7e: 26:d0:99:42:71:6d:5c:64:45:16:3e:d0:56:e1:17:15:e5:67: a3:a8:8d:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQLM9AVe/z6Ke4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MTA5MmUyZmMtYWUzNi00MTM2LTgyNmQtMzk0YmU5ZTVjM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7HKcFdv7bzhyVu9rhfzkKrrkJ2rRSI3mdcu 2gzMatz82HAdQGb9MAJ6WSdh3k+1ee0P4hm72AdyRMYnsG9g699U5AMKswXSHQz8 F2UFPAjpsP3j7H2t59RC1QoyL1KDorGNi+mE1lupmcClQr2jqVklKHFe64GzzCQW YUkIDZDS+IHvpwx4ZIVyhE5pgsUki9RZ2WYz+/uNjEB5WWwALMDSJ8W3LJd6XTMT KBx7g82OBlwNnAW+AwpUFCDtXx0o2GJueoz9yUgjYUWDEKfoxhUHNSNURBrdhWh+ C0EzuNyVAkpl+286ywEm+GMS2Xe500V1t6Gy1ryB/y3u4i5tNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgSx7Rl1qYqnjWmSe4E8raOmGZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjc2YjI4NGMtNjcxZi0z MmRlLTlhNjMtMzAwNGQ5ZTlhZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuFkAQtI7xaeu4Qgd5BUkth7oplIXiwqfQK+aaasZApU3uG+atFM4Ez dkVedYlYWqIe3EiUTcr5SKzMkZ31/a6PLE9E0kv6ZUNsYmwb/NG688rnDNsGxuMW TyptLLMax2W4MTO5/kdY4It/3WtVnr/dPGxKZCAdix19JPKQuJK2lRSfLeRdOiNV lWMTiruCDwLNbPvNKrnMzEMgCCTLzB1ShN0VwMMPwTo0CsJOtYLM6oyQeLCg4AW/ 3yKWf8c9rj88U0bEgjItqhl/mAWUKigT4JSGY36QEfhr7q782f92aTZiaw2p6xYI fibQmUJxbVxkRRY+0FbhFxXlZ6Oojek= -----END CERTIFICATE-----Generated at Sat Dec 6 18:16:06 2025 by rpki-client