This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa File: f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa (raw, json) Hash identifier: nTOvOGm8LR0e+gWPiq4EJ+orb1qtoTiVs30Y5xk37kM= Subject key identifier: 14:55:37:10:D4:D3:8A:CF:E3:41:54:E3:DE:EA:F5:47:40:6A:8E:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140D79F5BB8D4B7B918E880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 70.170.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:d7:9f:5b:b8:d4:b7:b9:18:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=dd3d284e-2991-41d6-bfa4-5c0e59acb2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:bc:1a:fe:27:b6:b1:03:70:f1:9c:09:c3: d3:bb:36:71:42:a6:19:0d:7b:1a:1d:a6:c4:f3:9d: bc:c6:56:3f:85:60:7a:9b:50:0c:c5:db:74:e2:46: c4:52:e6:58:3f:c9:fb:c5:19:12:3e:d0:59:75:24: 93:ee:ae:f3:fb:b8:ab:f1:37:7e:6b:98:58:42:94: c6:6c:70:12:05:26:1a:b0:9c:ea:9f:72:84:93:ca: 51:eb:76:31:8d:3b:e2:55:cd:3e:86:e6:3a:32:2b: 34:6f:91:10:a6:d6:8c:c8:ad:80:ff:c8:6e:57:20: ef:80:d0:41:5d:3e:9d:27:31:b6:57:a6:e8:d3:d7: b5:5c:56:64:f4:8f:f7:2b:75:0f:d3:40:6d:fa:f2: f0:25:28:e8:b2:88:12:22:56:0a:44:03:f9:c2:ad: 91:1a:d0:7c:0f:11:21:a6:3b:19:ae:15:29:27:7a: 22:2b:cb:1a:1d:a2:05:ee:b3:7e:cc:2e:cc:fe:3b: fa:92:31:98:3d:b1:0d:49:a9:14:1a:05:44:80:a3: 7d:a3:09:16:e1:02:8f:da:8e:2c:15:16:71:12:dc: 62:80:16:58:17:58:d2:99:fa:8d:a5:97:e8:44:1c: d3:26:6e:0b:b2:46:88:69:33:b4:37:ed:c3:73:36: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:55:37:10:D4:D3:8A:CF:E3:41:54:E3:DE:EA:F5:47:40:6A:8E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f86aba4a-8a54-3fe5-b78e-9750cc82ef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:10:ce:72:81:bf:7e:ee:b1:3e:2b:ab:b2:08:b4:00:70:ee: 59:bd:de:80:fe:0c:1e:c4:38:ef:0d:79:1d:c2:bc:bb:c7:bc: 3c:9d:48:08:5f:b4:2c:a9:1b:98:2d:2f:b2:6b:88:e9:d1:7c: 28:96:0d:a3:e3:1f:1d:78:17:91:ec:22:8f:a8:01:a0:52:b4: a0:0d:53:0c:70:65:22:f0:0b:38:35:bd:1b:2c:d5:02:92:11: 82:9a:d0:82:47:33:f6:45:f3:8f:17:60:b3:78:39:17:1d:e7: 6d:47:73:ee:8e:11:8e:74:71:8e:97:a3:f4:f9:03:d3:be:19: 82:80:82:40:f6:d4:90:b5:2b:40:2d:2a:c5:b9:46:c9:7c:61: 93:6c:ae:6e:73:14:e3:c6:6e:9e:79:21:8c:8b:a2:f3:52:da: 9a:3c:e6:7b:65:8a:ac:b5:b4:90:5e:bc:06:09:05:f6:1a:ff: 37:85:74:03:fd:32:60:c0:24:43:04:cf:74:07:59:13:d8:8e: cf:1a:c1:10:ea:b9:86:36:6c:69:d8:87:d7:7c:07:8a:e4:c2: f0:91:94:5d:a5:57:65:ad:00:5d:10:71:3d:3d:22:ee:c3:0c: cc:91:58:72:a4:6c:f5:7b:11:27:6c:56:c5:a8:e8:49:43:56: a7:f6:2d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQNefW7jUt7kY6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGQzZDI4NGUtMjk5MS00MWQ2LWJmYTQtNWMwZTU5YWNiMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn828Gv4ntrEDcPGcCcPTuzZxQqYZDXsaHabE 8528xlY/hWB6m1AMxdt04kbEUuZYP8n7xRkSPtBZdSST7q7z+7ir8Td+a5hYQpTG bHASBSYasJzqn3KEk8pR63YxjTviVc0+huY6Mis0b5EQptaMyK2A/8huVyDvgNBB XT6dJzG2V6bo09e1XFZk9I/3K3UP00Bt+vLwJSjosogSIlYKRAP5wq2RGtB8DxEh pjsZrhUpJ3oiK8saHaIF7rN+zC7M/jv6kjGYPbENSakUGgVEgKN9owkW4QKP2o4s FRZxEtxigBZYF1jSmfqNpZfoRBzTJm4LskaIaTO0N+3DczYHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRVNxDU04rP40FU497q9UdAao5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjg2YWJhNGEtOGE1NC0z ZmU1LWI3OGUtOTc1MGNjODJlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQQznKBv37usT4rq7IItABw7lm93oD+DB7EOO8NeR3CvLvHvDydSAhf tCypG5gtL7JriOnRfCiWDaPjHx14F5HsIo+oAaBStKANUwxwZSLwCzg1vRss1QKS EYKa0IJHM/ZF848XYLN4ORcd521Hc+6OEY50cY6Xo/T5A9O+GYKAgkD21JC1K0At KsW5Rsl8YZNsrm5zFOPGbp55IYyLovNS2po85ntliqy1tJBevAYJBfYa/zeFdAP9 MmDAJEMEz3QHWRPYjs8awRDquYY2bGnYh9d8B4rkwvCRlF2lV2WtAF0QcT09Iu7D DMyRWHKkbPV7ESdsVsWo6ElDVqf2LVY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:18:59 2025 by rpki-client