This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa File: 1b5e61f4-7371-355c-b2f3-e49e173c4042.roa (raw, json) Hash identifier: Ys+397Q7B5zDVfh6nmkt4mAIf5fjaRI3VSCSSCot58Q= Subject key identifier: 29:E5:1B:7C:5C:14:8A:A3:81:00:DD:0C:A8:69:4C:8A:74:5B:42:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBAA31866CE761FF731D2C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.208.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:aa:31:86:6c:e7:61:ff:73:1d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=a5fadd91-4960-406c-9db9-19e325acbb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:ac:15:3f:98:a7:04:71:e4:0c:73:a9:1d: ab:68:4d:6e:0e:4e:d4:2f:12:e0:ad:89:ed:b1:bf: 50:61:39:55:5c:f6:70:2d:2e:a4:dc:fe:56:b8:40: ea:93:a3:7f:aa:e2:2f:d5:ef:31:c5:f6:38:5f:bf: 49:38:94:f7:52:ab:ff:1d:0e:30:7a:32:29:60:31: 93:4a:c2:0e:09:d3:2b:60:8c:fc:e5:f1:40:1d:2b: f3:24:96:4e:20:34:df:2b:61:8d:5d:76:23:5f:3b: b8:7e:c4:0c:18:5b:da:5d:f4:3e:d1:ff:41:8f:3f: 8b:12:25:04:b6:81:c5:32:ce:4f:69:71:3d:3d:96: aa:07:71:0f:95:9d:8b:fe:c0:3e:39:cd:57:58:79: c3:b3:9c:18:00:7a:a9:62:4a:bb:1f:0f:27:96:b3: 4b:56:84:b4:0b:bc:6b:d7:f6:12:70:93:68:ad:3e: 73:94:c0:de:ea:de:3d:f6:f6:3a:51:3d:a4:19:13: f8:4a:ce:4c:1b:fb:52:a7:fe:61:5c:a3:77:57:11: 35:0c:17:59:6e:82:c3:a8:ff:66:3d:bc:80:77:03: d6:1d:10:8c:46:a4:fe:c4:fe:42:3c:11:fc:69:b3: 53:aa:c7:6b:e6:49:f9:58:29:7a:9e:e0:27:06:ac: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:1B:7C:5C:14:8A:A3:81:00:DD:0C:A8:69:4C:8A:74:5B:42:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2e:6a:77:ef:7a:12:f6:cd:d6:e8:00:77:5c:9b:fd:98:5b: 49:ac:de:eb:c0:24:da:b7:1c:e9:00:7e:cc:01:73:19:40:18: 89:42:30:06:f8:6a:b8:bc:1e:b3:11:b4:ab:ce:c1:ee:ac:6d: d1:f3:ef:d5:22:15:68:fe:b7:50:b3:d4:14:06:8d:ec:61:bd: 76:b6:5b:f4:b2:5b:65:2d:8a:e4:49:43:74:ad:2e:72:00:ba: 61:11:24:dc:62:52:25:72:10:b5:97:a2:87:40:31:e6:bc:71: 4d:37:63:e7:53:bc:ff:57:4d:d3:c9:bc:13:88:0e:ff:be:63: 95:28:d5:0d:a8:6a:af:17:59:23:81:9c:9f:e9:7a:c4:bd:6a: 0b:ef:38:24:de:60:11:94:3d:b0:ed:0a:6c:00:f0:7b:34:8c: 0d:63:bf:8f:79:62:4a:f0:ab:90:9d:5f:57:5d:a6:ef:a1:b4: 2d:c3:11:47:d9:fa:d7:f4:1f:44:d4:af:1c:f3:ec:74:83:86: 88:a6:4d:a9:10:56:00:e5:51:ea:05:49:4f:dd:17:37:4d:98: db:80:21:46:88:b3:d5:59:3a:9b:88:72:dd:e2:59:7b:67:6e: fc:ec:7e:4d:19:04:65:aa:99:f9:4e:7f:31:03:86:14:93:a5: a2:61:53:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/26oxhmznYf9zHSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YTVmYWRkOTEtNDk2MC00MDZjLTlkYjktMTllMzI1YWNiYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM+sFT+YpwRx5AxzqR2raE1uDk7ULxLgrYnt sb9QYTlVXPZwLS6k3P5WuEDqk6N/quIv1e8xxfY4X79JOJT3Uqv/HQ4wejIpYDGT SsIOCdMrYIz85fFAHSvzJJZOIDTfK2GNXXYjXzu4fsQMGFvaXfQ+0f9Bjz+LEiUE toHFMs5PaXE9PZaqB3EPlZ2L/sA+Oc1XWHnDs5wYAHqpYkq7Hw8nlrNLVoS0C7xr 1/YScJNorT5zlMDe6t499vY6UT2kGRP4Ss5MG/tSp/5hXKN3VxE1DBdZboLDqP9m PbyAdwPWHRCMRqT+xP5CPBH8abNTqsdr5kn5WCl6nuAnBqxWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnlG3xcFIqjgQDdDKhpTIp0W0IBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWI1ZTYxZjQtNzM3MS0z NTVjLWIyZjMtZTQ5ZTE3M2M0MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADouanfvehL2zdboAHdcm/2YW0ms3uvAJNq3HOkAfswBcxlAGIlCMAb4 ari8HrMRtKvOwe6sbdHz79UiFWj+t1Cz1BQGjexhvXa2W/SyW2UtiuRJQ3StLnIA umERJNxiUiVyELWXoodAMea8cU03Y+dTvP9XTdPJvBOIDv++Y5Uo1Q2oaq8XWSOB nJ/pesS9agvvOCTeYBGUPbDtCmwA8Hs0jA1jv495Ykrwq5CdX1ddpu+htC3DEUfZ +tf0H0TUrxzz7HSDhoimTakQVgDlUeoFSU/dFzdNmNuAIUaIs9VZOpuIct3iWXtn bvzsfk0ZBGWqmflOfzEDhhSTpaJhU3E= -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:13 2025 by rpki-client