This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/332f511e-6d78-390c-bf29-2a8832c6446e.roa File: 332f511e-6d78-390c-bf29-2a8832c6446e.roa (raw, json) Hash identifier: dfU1X5OY14a6ioat5tbPeQNhoox7A2ax9HUYmADYl8o= Subject key identifier: 12:9E:CE:23:EC:DA:B3:CF:F8:EA:7D:7C:BD:9A:70:63:2B:35:BA:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666C3353349AA63231F7540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/332f511e-6d78-390c-bf29-2a8832c6446e.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 68.7.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Feb 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:c3:35:33:49:aa:63:23:1f:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=12a9301b-c4ae-4989-9384-fd659e833781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:49:27:82:36:e9:97:9e:32:53:ba:43:b9: 54:dd:42:2a:e7:e4:f4:da:bc:99:31:c6:50:a8:b9: 54:cd:79:2b:1a:f0:e4:82:aa:a5:d0:6b:4f:00:16: 9a:c2:08:68:f9:53:4a:38:c8:dd:87:67:e3:8c:69: d1:bd:69:5a:20:35:c9:f2:3e:41:fb:b0:90:7a:26: 79:8e:6c:98:e6:7d:34:92:17:4f:8b:a9:5a:b0:1d: 35:15:09:03:db:ce:02:47:5f:bd:54:40:78:23:4f: 15:b8:8a:52:1e:07:e6:40:ac:fb:d4:4d:ab:8b:c2: 82:38:e9:a4:97:1e:c9:bf:0a:8c:00:99:a3:fd:53: 08:2d:e8:48:ac:5d:da:05:36:3b:c5:74:fd:76:d3: 2b:e5:85:98:3f:c3:f1:c9:d9:02:00:fd:42:2d:31: 62:0c:a2:f3:ad:e9:1c:88:d0:3d:f5:c9:20:73:64: 5d:14:4a:ba:b4:22:a5:06:51:70:10:96:50:a5:f6: ec:25:30:d2:db:1b:8f:7d:e4:9f:7e:45:b8:14:af: e9:72:a3:0e:3e:d6:56:bb:02:2e:d6:f0:d8:ea:8e: 39:7c:08:89:98:0f:1d:87:47:e3:5e:73:a1:1f:3f: 04:14:31:e4:d7:ac:a3:fc:1c:77:61:1e:fe:14:61: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:CE:23:EC:DA:B3:CF:F8:EA:7D:7C:BD:9A:70:63:2B:35:BA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/332f511e-6d78-390c-bf29-2a8832c6446e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c9:ac:03:a2:78:20:f4:0d:30:04:7c:38:cb:37:59:cd:0b: d4:02:1e:3a:86:9a:1f:33:d5:1e:00:d2:70:76:02:aa:a4:4b: 68:7b:e0:9b:45:48:68:e8:c0:35:37:96:c6:87:5d:6e:db:34: 0d:62:23:74:0e:1e:cb:0f:d7:d0:50:fb:e2:ae:84:60:9d:a6: 5e:e7:0a:a7:ed:8f:f6:c4:21:4d:d0:bd:da:33:68:a3:30:80: 9f:4f:70:df:a6:6a:ee:b4:4c:4f:1a:ef:d8:f6:fb:43:5d:15: 59:21:9f:81:f8:36:69:5b:67:fe:38:40:4b:95:c4:dc:bc:a7: a3:0f:56:48:ec:b4:62:8c:8f:51:f3:c9:4e:94:6f:50:ac:1d: 3b:2b:c2:8b:ab:69:ef:b1:f1:fd:9a:d6:7a:56:1d:99:48:d3: 5a:bf:2a:b0:b7:7f:50:e1:2d:94:45:fe:17:20:bf:b1:33:4f: 9c:57:4e:da:dc:27:36:0c:9d:65:3b:66:a9:6d:b5:73:8f:40: ad:e6:53:5c:29:c7:47:00:da:cd:cb:5c:22:11:68:da:53:e1: c2:c3:71:1a:28:25:4e:b8:25:c5:d3:41:60:0f:ab:f5:02:d1: ce:03:b2:38:f9:15:d1:53:f1:3c:cb:b7:53:23:5b:d5:c4:3f: d8:6c:7d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZsM1M0mqYyMfdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MTJhOTMwMWItYzRhZS00OTg5LTkzODQtZmQ2NTllODMzNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFRJJ4I26ZeeMlO6Q7lU3UIq5+T02ryZMcZQ qLlUzXkrGvDkgqql0GtPABaawgho+VNKOMjdh2fjjGnRvWlaIDXJ8j5B+7CQeiZ5 jmyY5n00khdPi6lasB01FQkD284CR1+9VEB4I08VuIpSHgfmQKz71E2ri8KCOOmk lx7JvwqMAJmj/VMILehIrF3aBTY7xXT9dtMr5YWYP8PxydkCAP1CLTFiDKLzrekc iNA99ckgc2RdFEq6tCKlBlFwEJZQpfbsJTDS2xuPfeSffkW4FK/pcqMOPtZWuwIu 1vDY6o45fAiJmA8dh0fjXnOhHz8EFDHk16yj/Bx3YR7+FGFVmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKeziPs2rPP+Op9fL2acGMrNbqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzMyZjUxMWUtNmQ3OC0z OTBjLWJmMjktMmE4ODMyYzY0NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAdiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3JrAOieCD0DTAEfDjLN1nNC9QCHjqGmh8z1R4A0nB2AqqkS2h74JtF SGjowDU3lsaHXW7bNA1iI3QOHssP19BQ++KuhGCdpl7nCqftj/bEIU3QvdozaKMw gJ9PcN+mau60TE8a79j2+0NdFVkhn4H4NmlbZ/44QEuVxNy8p6MPVkjstGKMj1Hz yU6Ub1CsHTsrwourae+x8f2a1npWHZlI01q/KrC3f1DhLZRF/hcgv7EzT5xXTtrc JzYMnWU7ZqlttXOPQK3mU1wpx0cA2s3LXCIRaNpT4cLDcRooJU64JcXTQWAPq/UC 0c4Dsjj5FdFT8TzLt1MjW9XEP9hsfdU= -----END CERTIFICATE-----Generated at Fri Jan 30 21:15:25 2026 by rpki-client