This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa
File: 0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa (raw, json)
Hash identifier: gH56ATy3tTcj2J8rbxRzZ6UAOpaZ0hg0GkeS1Ch5HQA=
Subject key identifier: 9A:6D:B2:06:D1:A7:87:71:54:0E:01:AC:83:0D:A8:B5:63:32:9C:75
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584C566698FDE144AE3324FA8F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa
Signing time: Sun 28 Dec 2025 14:00:38 +0000
ROA not before: Sun 28 Dec 2025 14:00:38 +0000
ROA not after: Sat 28 Mar 2026 13:00:38 +0000
asID: 22773
IP address blocks: 72.221.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:56:66:98:fd:e1:44:ae:33:24:fa:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 28 14:00:38 2025 GMT
Not After : Mar 28 13:00:38 2026 GMT
Subject: CN=7aafb7b9-8b6f-486b-807b-6c1a84b6fb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:4d:8b:a7:ea:2f:70:7b:45:d7:4a:c3:26:
0a:a5:90:bb:ee:35:c9:2b:31:ea:9a:a2:ed:ed:85:
74:af:1d:7b:7c:01:7f:c2:87:ff:2e:73:19:1b:6e:
02:59:c3:57:7e:e5:6b:58:41:f1:6e:95:c8:ee:0a:
d8:89:2c:8e:db:7b:28:75:f1:bf:50:5c:e2:36:c2:
24:62:33:cd:94:41:64:64:3e:d5:53:4a:d9:67:8f:
84:e4:8b:e7:02:04:8c:a0:64:ad:3c:c7:c0:2a:11:
39:28:73:ca:0d:22:ad:1f:73:c4:1b:97:65:ff:7e:
c6:48:f8:99:aa:d4:15:51:42:29:f8:16:24:62:6e:
28:f1:7a:12:34:ea:27:54:7f:4e:37:a4:a6:ff:1d:
2f:2b:2d:df:90:bf:18:53:57:8f:6a:da:e9:d6:ed:
27:07:b0:89:b1:28:60:c2:29:7c:2e:0f:de:82:c7:
ec:f6:0b:04:94:95:89:f5:25:cd:6b:13:b1:7e:59:
6a:d3:de:08:5f:6c:f7:be:0c:68:79:bd:73:d3:8f:
5b:56:90:21:b4:67:5c:1c:ba:06:a6:f8:99:a1:ea:
ec:a1:b4:3a:99:9c:37:74:d3:e3:3c:13:d9:17:d2:
78:14:ec:34:1b:5a:f9:d9:a8:8f:0e:99:27:b5:de:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:B2:06:D1:A7:87:71:54:0E:01:AC:83:0D:A8:B5:63:32:9C:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.221.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:2e:f2:c1:2a:cb:ec:ac:6a:c6:03:2e:85:44:4d:e6:79:38:
6d:0b:c0:55:92:eb:1d:03:fe:56:f4:95:33:58:f6:a8:c2:f1:
50:0c:8a:aa:ab:37:ff:b4:b2:77:52:94:6b:18:e7:b0:12:77:
3a:8b:39:e2:8a:af:18:e6:29:3c:92:9b:3f:76:07:f3:c6:a2:
26:de:c2:d7:ee:06:23:4b:b8:bd:0f:d9:31:88:5a:97:d5:17:
2b:ad:12:e2:83:2a:d1:49:34:c9:67:79:87:60:86:1e:b7:7c:
9c:5a:fd:b6:d7:24:18:47:96:6b:77:37:05:ee:5f:a9:36:ca:
dc:0d:b6:4a:2c:95:a4:10:20:7e:ee:d5:40:4a:dd:8b:c9:f0:
99:32:ca:5f:1f:9f:3b:78:8c:4d:d7:71:b2:28:de:e7:12:b3:
68:7d:dd:6c:62:1b:40:d7:38:39:f0:35:f8:2d:18:c4:03:c7:
09:1c:47:1e:f9:69:24:e9:6f:02:7d:05:9e:74:0a:a4:1c:4b:
4c:e7:56:bf:a4:3a:bf:66:35:7d:ce:e6:f4:76:77:ba:c7:da:
12:c8:46:b4:87:0f:38:16:b8:c2:bb:74:d9:53:10:d6:c9:37:
aa:45:25:db:bd:6a:ce:8c:19:04:3c:3e:0d:be:1a:d7:b2:2b:
5f:9c:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:10 2026 by rpki-client