This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa File: 1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa (raw, json) Hash identifier: HSlI0iFq1SvEi6bL7B2dYVpAQSNpPGTxoGOJCq3M1No= Subject key identifier: AD:01:A9:76:58:5C:D2:C9:4E:99:8E:72:FC:CA:64:71:8E:24:A8:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E92F4E061C9EA27DF919A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33489 IP address blocks: 70.90.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:92:f4:e0:61:c9:ea:27:df:91:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=3ff211f2-ae54-4ad5-a40f-858f50bda46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:15:ef:fc:f7:a8:02:d8:a7:dc:b8:ba:3a: da:8a:1f:eb:21:83:ef:29:b7:7a:a4:c4:02:8e:78: 8b:86:25:9a:25:3e:c9:80:e1:0a:09:ab:af:73:9b: c0:63:01:1f:33:44:9b:0a:ee:f1:11:6e:8f:21:d4: 0f:1e:79:e6:59:b6:f7:24:c1:c7:8d:2a:92:0a:32: e7:65:4b:fd:17:7c:8b:99:cd:65:59:98:f2:ac:1b: 5b:90:33:d5:15:52:e3:a1:26:de:ed:6c:fd:68:16: fb:0e:8f:41:62:45:d1:11:c8:cd:b5:f1:d8:23:97: 05:3e:89:79:76:bd:19:b2:01:cc:40:37:f6:4f:24: e5:b6:b2:82:9d:68:48:8d:1d:6c:4d:5a:cc:30:24: 95:fe:1a:29:b2:d5:7d:3c:4c:e3:5a:e2:79:5d:ed: 1e:b2:32:64:ce:7a:6a:25:a3:f4:4f:7d:05:32:af: 4d:08:08:65:cc:99:fe:b1:aa:16:d6:47:6e:3e:a2: b8:16:2f:f0:6f:0a:a1:e1:91:ac:12:dc:4d:1a:1e: d0:2b:c5:f8:18:ff:8e:20:6a:41:79:53:ae:bd:94: 88:ca:b6:92:7d:d2:f8:2f:1d:1a:88:6f:56:22:70: 8f:97:98:c7:00:30:01:94:24:84:27:72:f2:7f:5d: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:A9:76:58:5C:D2:C9:4E:99:8E:72:FC:CA:64:71:8E:24:A8:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.90.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:88:de:aa:fc:90:35:95:fb:b4:dc:06:09:f2:d4:da:60:de: e3:6e:8d:3c:af:20:e0:03:3c:85:ce:40:7f:d6:d6:64:89:44: 2c:e8:a6:37:81:bb:d2:c0:d2:24:c4:fe:d4:f8:34:11:e0:38: 1a:57:43:06:8c:63:99:22:36:60:54:19:84:6f:4b:63:8a:e0: 68:2f:0a:ac:45:f3:e0:f7:8b:22:f9:ef:24:59:30:b0:01:d7: 4d:8f:2f:2f:7e:5b:6e:39:94:75:73:cc:d9:82:f7:4f:23:c3: ef:28:aa:66:07:60:49:b4:3b:e9:b8:3b:67:71:d6:e3:34:0c: 0e:3d:6b:dd:0d:00:99:b5:b7:4b:24:e8:e4:38:cd:c7:70:f5: fa:fa:42:17:25:51:47:dc:e2:45:cd:c7:3d:1b:81:a9:4d:18: f2:0f:02:b1:ac:be:dc:0b:6d:bf:8e:0d:e0:74:69:2d:4a:3b: 20:c2:40:e8:96:00:7c:19:31:9f:5f:2e:64:ce:d0:b3:dc:fd: 7b:8d:f7:77:b6:c9:a2:7c:03:fa:bb:b7:4e:f7:b7:8d:db:7e: cc:0b:32:ae:5d:88:54:1f:ad:c3:c8:d0:20:09:98:22:3c:08: 47:2c:d8:78:e2:5f:2f:73:e3:36:4d:cf:a3:0e:ab:a2:fb:ae: 9a:22:a2:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekvTgYcnqJ9+RmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk M2ZmMjExZjItYWU1NC00YWQ1LWE0MGYtODU4ZjUwYmRhNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1cV7/z3qALYp9y4ujraih/rIYPvKbd6pMQC jniLhiWaJT7JgOEKCauvc5vAYwEfM0SbCu7xEW6PIdQPHnnmWbb3JMHHjSqSCjLn ZUv9F3yLmc1lWZjyrBtbkDPVFVLjoSbe7Wz9aBb7Do9BYkXREcjNtfHYI5cFPol5 dr0ZsgHMQDf2TyTltrKCnWhIjR1sTVrMMCSV/hopstV9PEzjWuJ5Xe0esjJkznpq JaP0T30FMq9NCAhlzJn+saoW1kduPqK4Fi/wbwqh4ZGsEtxNGh7QK8X4GP+OIGpB eVOuvZSIyraSfdL4Lx0aiG9WInCPl5jHADABlCSEJ3Lyf13SQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0BqXZYXNLJTpmOcvzKZHGOJKgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzOGMzYjMtYWE3Mi0z MTg3LTk4NjUtMDE1ZTBkMWVkYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiI3qr8kDWV+7TcBgny1Npg3uNujTyvIOADPIXOQH/W1mSJRCzopjeB u9LA0iTE/tT4NBHgOBpXQwaMY5kiNmBUGYRvS2OK4GgvCqxF8+D3iyL57yRZMLAB 102PLy9+W245lHVzzNmC908jw+8oqmYHYEm0O+m4O2dx1uM0DA49a90NAJm1t0sk 6OQ4zcdw9fr6QhclUUfc4kXNxz0bgalNGPIPArGsvtwLbb+ODeB0aS1KOyDCQOiW AHwZMZ9fLmTO0LPc/XuN93e2yaJ8A/q7t073t43bfswLMq5diFQfrcPI0CAJmCI8 CEcs2HjiXy9z4zZNz6MOq6L7rpoiot4= -----END CERTIFICATE-----Generated at Tue Jan 20 17:14:35 2026 by rpki-client