This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1856ff9e-e05f-3fd4-a806-5a2195643b52.roa File: 1856ff9e-e05f-3fd4-a806-5a2195643b52.roa (raw, json) Hash identifier: ZQe2W+g8q4B7Gvvu+CRCpzW88GEuirAeY7VYjREZzik= Subject key identifier: AA:2D:7B:2F:7B:56:02:9C:CC:3E:ED:8D:5D:52:05:3C:01:1C:47:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB73B772BC9F169C6AB800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1856ff9e-e05f-3fd4-a806-5a2195643b52.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.222.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:73:b7:72:bc:9f:16:9c:6a:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=dc680384-2b0d-4aa9-972a-0530baeb9465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:17:30:bb:62:50:47:8f:ba:78:d2:ef:12: 3e:96:ef:e6:5b:b1:ae:d5:d8:c5:2c:83:27:f6:79: 44:95:40:b9:a6:84:38:d9:76:eb:f9:00:d4:3a:88: cd:f8:30:33:25:6f:37:8f:4e:fc:4c:c4:48:fc:f4: c7:74:90:10:30:58:30:0b:ee:e5:9d:52:15:37:9a: 6d:33:96:15:df:95:f8:6d:01:8a:05:d2:da:ab:64: 16:22:4e:0b:d8:04:a0:b3:9d:6e:7e:de:8b:f5:05: c7:a8:f9:ee:36:ef:61:58:ea:85:cb:ba:1b:33:3f: 36:75:64:0b:84:8b:56:19:79:7e:62:43:7e:af:6e: 5a:b1:56:ea:a1:24:c5:ea:f4:5b:89:f3:43:af:2b: 2a:06:f6:d3:9f:82:31:fd:88:6a:cd:79:95:83:e1: 50:1f:45:15:d3:14:94:44:ae:26:05:83:81:5e:2f: 13:4a:45:62:86:e3:12:4a:a6:7c:fc:7b:58:9a:8e: 35:51:fb:4f:6a:d9:68:d3:76:c7:ac:46:27:fc:5a: 4c:7c:2b:e9:50:1b:a6:41:df:2e:c0:df:94:be:26: 18:87:cd:6d:2f:2a:34:af:46:ad:9f:7e:f4:e0:b5: 40:40:61:50:2a:bd:59:80:90:ac:2f:f1:61:41:27: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:7B:2F:7B:56:02:9C:CC:3E:ED:8D:5D:52:05:3C:01:1C:47:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1856ff9e-e05f-3fd4-a806-5a2195643b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:80:88:72:74:ba:20:37:b6:f7:5d:fc:0b:3e:55:7b:79:d8: 18:d5:b6:bd:e9:a1:2d:d4:e7:42:f4:94:f6:f9:07:3f:ee:0c: 70:7e:c0:44:f2:16:49:04:c3:cb:9d:bf:8c:db:95:0e:e0:7e: 13:4a:0a:64:ae:a1:73:e5:18:c5:78:8d:b9:9f:4f:8c:bf:1c: ea:af:2e:68:9d:06:2e:1a:e3:3f:59:0d:1a:f4:42:d4:6f:04: 0b:3b:a3:3f:3f:37:dd:e4:29:bf:b9:2e:f0:17:4a:b1:64:a3: fa:ab:3d:f8:f5:a4:14:6e:d6:7e:07:16:16:6f:ee:ec:be:c4: 51:43:3a:49:9c:7a:e3:fd:bb:2e:51:39:aa:06:92:ad:e0:1a: 63:f9:ff:24:46:8c:ef:be:c8:48:ab:f7:02:20:dc:cd:45:96: 28:cc:6a:74:ac:76:fd:c8:ba:31:2e:8c:b4:8a:91:32:56:3b: 80:11:a0:3d:0e:f6:43:b8:8d:11:2f:2a:3f:87:17:75:f0:17: a7:c3:a6:ea:40:71:7b:1f:da:6d:d2:aa:4a:ce:6b:28:32:01: a2:cd:97:a0:34:20:88:76:e8:cd:26:83:8a:5d:cf:e9:10:41: 36:5d:ad:ed:ef:22:79:fc:ec:5b:ca:b3:e9:41:28:72:d5:c8: 89:99:b8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/23O3cryfFpxquAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZGM2ODAzODQtMmIwZC00YWE5LTk3MmEtMDUzMGJhZWI5NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZwXMLtiUEePunjS7xI+lu/mW7Gu1djFLIMn 9nlElUC5poQ42Xbr+QDUOojN+DAzJW83j078TMRI/PTHdJAQMFgwC+7lnVIVN5pt M5YV35X4bQGKBdLaq2QWIk4L2ASgs51uft6L9QXHqPnuNu9hWOqFy7obMz82dWQL hItWGXl+YkN+r25asVbqoSTF6vRbifNDrysqBvbTn4Ix/YhqzXmVg+FQH0UV0xSU RK4mBYOBXi8TSkVihuMSSqZ8/HtYmo41UftPatlo03bHrEYn/FpMfCvpUBumQd8u wN+UviYYh81tLyo0r0atn3704LVAQGFQKr1ZgJCsL/FhQSf7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKotey97VgKczD7tjV1SBTwBHEdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTg1NmZmOWUtZTA1Zi0z ZmQ0LWE4MDYtNWEyMTk1NjQzYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOAiHJ0uiA3tvdd/As+VXt52BjVtr3poS3U50L0lPb5Bz/uDHB+wETy FkkEw8udv4zblQ7gfhNKCmSuoXPlGMV4jbmfT4y/HOqvLmidBi4a4z9ZDRr0QtRv BAs7oz8/N93kKb+5LvAXSrFko/qrPfj1pBRu1n4HFhZv7uy+xFFDOkmceuP9uy5R OaoGkq3gGmP5/yRGjO++yEir9wIg3M1FlijManSsdv3IujEujLSKkTJWO4ARoD0O 9kO4jREvKj+HF3XwF6fDpupAcXsf2m3SqkrOaygyAaLNl6A0IIh26M0mg4pdz+kQ QTZdre3vInn87FvKs+lBKHLVyImZuMQ= -----END CERTIFICATE-----Generated at Sat Dec 6 17:23:49 2025 by rpki-client