This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa File: 68b55580-32ed-3f8d-a758-b42d0f07b627.roa (raw, json) Hash identifier: htGUMTuapXdoBnwz8H8mbjFtz9ZL/kb1llPMbaLKEQI= Subject key identifier: A6:BE:2C:B8:11:5C:6E:83:CA:BA:0B:A6:23:8E:50:FE:7F:A7:60:D9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584C1630CFA5A91069C36E680280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 16417 IP address blocks: 23.90.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:cf:a5:a9:10:69:c3:6e:68:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=b5882ceb-ef9f-4e34-8740-535062ce28ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:04:5b:65:0c:09:ff:6f:91:78:6f:48:fa: 4e:06:c0:ef:fe:88:3c:cc:ce:01:a2:c3:b7:f3:a3: 28:a1:1f:1c:c5:e5:ac:3f:72:01:d6:24:64:26:86: 6c:a8:83:64:19:58:e5:fd:41:cc:e8:f6:08:eb:1c: a3:39:af:8d:2c:2f:61:6a:01:3f:50:3c:d4:5e:66: e0:68:07:59:c3:b0:f3:ad:65:ad:d1:f8:f5:63:85: ac:09:ae:26:83:d8:80:b8:aa:2c:46:96:48:0f:8b: a8:24:92:ce:e5:71:e1:75:54:a9:3d:f3:f7:81:a1: a1:7c:f2:37:b8:07:03:4b:a0:23:a2:ab:7d:3a:59: 88:a7:ba:9b:de:6d:15:dc:2e:4d:75:9a:f5:35:de: f6:94:b6:56:d0:df:dd:62:08:8f:31:a2:62:fd:89: 55:ea:45:e4:1b:c2:db:c1:f2:f2:04:76:2e:2a:81: f5:f2:a9:33:c1:01:19:04:3d:19:7f:76:63:72:09: ab:3b:c6:e9:fc:a8:fb:03:b0:d4:67:24:81:90:93: 8b:bb:dd:9f:bd:6f:0e:10:fc:6e:9a:30:4b:0c:d7: be:e5:8a:86:d5:19:06:59:f1:d8:20:40:c0:4c:a3: 42:a9:68:7d:6d:77:76:3c:db:59:df:d4:e4:2f:d6: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BE:2C:B8:11:5C:6E:83:CA:BA:0B:A6:23:8E:50:FE:7F:A7:60:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:3f:4c:8e:cb:01:91:f4:95:6f:54:f1:4c:ca:43:b4:dd: ee:18:95:28:61:de:85:93:71:62:2b:69:e7:2f:3d:11:93:65: 5b:8c:be:3c:63:22:ab:0d:fa:10:74:34:c2:d6:9e:fe:54:1a: 79:7b:4c:44:cf:29:53:6e:e1:78:ee:78:53:5e:08:bc:ac:d8: 77:97:18:51:0c:dd:8c:e3:17:f4:e3:fc:ec:ca:29:b9:3d:8f: 0a:f3:04:8a:6d:0d:7c:15:af:92:0d:a7:25:1b:51:8d:f9:d5: 4d:17:7e:a0:ee:8b:9e:e3:8b:af:bd:94:e1:c6:e4:1b:21:a6: 68:65:cc:0d:12:90:da:93:f7:04:e6:2b:5f:8e:ba:eb:3d:d5: 2e:40:41:49:24:22:40:ff:30:ab:11:59:fc:81:1d:a1:71:dc: 7e:f7:39:a8:ac:f4:63:f6:b9:7f:3c:56:b0:65:84:67:af:37: d1:27:ed:1c:41:f8:39:25:0e:a9:b4:78:45:76:c6:45:b7:59: bd:6e:83:c9:1f:a5:37:4d:89:a2:2b:0f:04:3c:e2:8e:7f:8c: 7c:52:c5:d3:f5:c4:0b:50:d9:51:57:ba:f8:13:36:d8:06:46: 4f:cb:e4:ad:42:83:af:31:0a:cf:59:63:84:55:9b:c3:d4:c8: 9a:3a:9b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMM+lqRBpw25oAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk YjU4ODJjZWItZWY5Zi00ZTM0LTg3NDAtNTM1MDYyY2UyOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLkEW2UMCf9vkXhvSPpOBsDv/og8zM4BosO3 86MooR8cxeWsP3IB1iRkJoZsqINkGVjl/UHM6PYI6xyjOa+NLC9hagE/UDzUXmbg aAdZw7DzrWWt0fj1Y4WsCa4mg9iAuKosRpZID4uoJJLO5XHhdVSpPfP3gaGhfPI3 uAcDS6Ajoqt9OlmIp7qb3m0V3C5NdZr1Nd72lLZW0N/dYgiPMaJi/YlV6kXkG8Lb wfLyBHYuKoH18qkzwQEZBD0Zf3ZjcgmrO8bp/Kj7A7DUZySBkJOLu92fvW8OEPxu mjBLDNe+5YqG1RkGWfHYIEDATKNCqWh9bXd2PNtZ39TkL9b0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa+LLgRXG6DyroLpiOOUP5/p2DZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNjhiNTU1ODAtMzJlZC0z ZjhkLWE3NTgtYjQyZDBmMDdiNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHGP0yOywGR9JVvVPFMykO03e4YlShh3oWTcWIraecvPRGTZVuMvjxj IqsN+hB0NMLWnv5UGnl7TETPKVNu4XjueFNeCLys2HeXGFEM3YzjF/Tj/OzKKbk9 jwrzBIptDXwVr5INpyUbUY351U0XfqDui57ji6+9lOHG5BshpmhlzA0SkNqT9wTm K1+Ouus91S5AQUkkIkD/MKsRWfyBHaFx3H73Oais9GP2uX88VrBlhGevN9En7RxB +DklDqm0eEV2xkW3Wb1ug8kfpTdNiaIrDwQ84o5/jHxSxdP1xAtQ2VFXuvgTNtgG Rk/L5K1Cg68xCs9ZY4RVm8PUyJo6m8s= -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:43 2025 by rpki-client