This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: nkDi1VJDgRObbrK98LsnaDpJFW1sgdeUhHt3FfnMric= Subject key identifier: D9:F5:F0:AA:A3:17:44:41:C4:C0:CB:D5:B7:92:C9:7D:D4:2C:F3:B4 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F4328584BD3305D60B14842D30A08C300 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 25715 IP address blocks: 173.225.32.0/20 maxlen: 24 199.36.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:5d:60:b1:48:42:d3:0a:08:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=30d165ed-9522-47f8-8cc4-137d8b5ba40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:ac:62:26:1c:c9:74:a5:2e:c9:f8:41:0e: f4:bd:63:18:7f:73:62:e2:bb:3a:f9:93:86:65:3f: c8:c1:27:e2:37:b0:29:30:ac:8e:60:05:b3:fa:46: f5:cc:42:1a:25:c2:ee:67:74:41:b8:7c:8d:12:52: cc:5d:89:13:5e:f8:27:71:96:26:94:d6:23:68:74: d4:d8:5a:62:4f:3e:8b:a6:ba:b9:d6:58:34:1b:da: 86:09:02:52:3a:5e:92:65:bd:29:67:cf:47:d6:33: 93:11:17:bd:5c:4b:b1:f7:b0:1a:dd:04:79:30:64: 83:2c:ce:b1:29:53:86:eb:54:81:43:5d:46:92:10: 6f:f6:9d:13:c7:a1:83:d3:19:d7:cf:7d:62:54:14: 2e:e0:27:37:1d:b8:b7:97:ca:e6:d7:bd:7f:0b:5f: aa:70:53:51:a7:70:5d:69:85:ca:12:f6:9a:0c:c3: eb:da:b3:9e:21:e8:3b:11:31:8f:45:98:43:83:bf: 41:51:39:dc:38:5b:81:8b:c4:26:61:c2:2b:bf:03: 96:0c:9f:af:d3:6f:ee:93:41:6e:08:4c:6b:1e:e7: 8c:e8:8e:6e:41:33:8f:68:1c:2d:06:f4:e1:62:14: 5b:fa:e2:5c:50:07:44:dc:0d:fe:e5:d2:ca:5d:14: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F5:F0:AA:A3:17:44:41:C4:C0:CB:D5:B7:92:C9:7D:D4:2C:F3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4a:1d:63:34:20:1c:91:49:48:02:a8:4c:3d:68:cd:fe:c1: d8:3e:12:5a:93:b2:70:a8:95:ee:87:c3:d1:39:23:14:f7:71: b8:35:42:eb:1d:44:49:ec:04:b5:c0:32:c1:64:8e:24:c2:9a: 25:18:85:95:82:87:b4:07:d0:c2:3f:d5:b8:49:f6:45:cf:f9: db:0f:bd:99:9c:52:47:59:4b:c2:b9:ab:e8:e7:35:e8:66:0b: 70:b0:f1:1c:6f:9d:01:ed:70:d5:0d:18:ae:48:eb:d3:14:76: 1b:fa:af:f5:d7:b8:bf:47:23:b1:5e:e6:b8:b4:8a:de:c4:dc: 7b:14:a9:ed:3f:11:b4:09:c2:41:62:bb:0d:58:65:12:1d:7a: 24:d6:60:bc:8e:56:59:47:59:ab:3f:e5:0e:89:5f:d6:fb:62: 35:5f:e1:61:58:ae:45:75:fc:28:36:23:e4:da:c7:0e:e5:5a: 0c:cb:f4:86:db:f8:ea:a3:f2:d6:7f:9b:57:64:87:07:35:ad: 16:d9:da:cd:20:23:02:d3:3a:15:dc:f1:71:28:20:1c:3f:e4: 00:61:f5:42:94:55:6a:66:bb:fa:f8:1d:71:b4:c4:9a:4a:23: c6:cd:d3:50:28:32:5c:66:2e:58:1d:34:fb:d9:20:60:05:4f: 5e:17:f5:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvTMF1gsUhC0woIwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MzBkMTY1ZWQtOTUyMi00N2Y4LThjYzQtMTM3ZDhiNWJhNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFKsYiYcyXSlLsn4QQ70vWMYf3Ni4rs6+ZOG ZT/IwSfiN7ApMKyOYAWz+kb1zEIaJcLuZ3RBuHyNElLMXYkTXvgncZYmlNYjaHTU 2FpiTz6Lprq51lg0G9qGCQJSOl6SZb0pZ89H1jOTERe9XEux97Aa3QR5MGSDLM6x KVOG61SBQ11GkhBv9p0Tx6GD0xnXz31iVBQu4Cc3Hbi3l8rm171/C1+qcFNRp3Bd aYXKEvaaDMPr2rOeIeg7ETGPRZhDg79BUTncOFuBi8QmYcIrvwOWDJ+v02/uk0Fu CExrHueM6I5uQTOPaBwtBvThYhRb+uJcUAdE3A3+5dLKXRRBpwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNn18KqjF0RBxMDL1beSyX3ULPO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFdKHWM0IByRSUgCqEw9aM3+wdg+ElqTsnCole6Hw9E5IxT3 cbg1QusdREnsBLXAMsFkjiTCmiUYhZWCh7QH0MI/1bhJ9kXP+dsPvZmcUkdZS8K5 q+jnNehmC3Cw8RxvnQHtcNUNGK5I69MUdhv6r/XXuL9HI7Fe5ri0it7E3HsUqe0/ EbQJwkFiuw1YZRIdeiTWYLyOVllHWas/5Q6JX9b7YjVf4WFYrkV1/Cg2I+Taxw7l WgzL9Ibb+Oqj8tZ/m1dkhwc1rRbZ2s0gIwLTOhXc8XEoIBw/5ABh9UKUVWpmu/r4 HXG0xJpKI8bN01AoMlxmLlgdNPvZIGAFT14X9Yw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:28 2025 by rpki-client