This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa File: 2068fb4a-98b3-3410-9859-e3769e0dd577.roa (raw, json) Hash identifier: 2qjqZCg5rKSd4AFt5v/rfCmrCq9mAZKfFHrhfma9YRk= Subject key identifier: E6:AD:F5:2E:1F:F0:3D:4D:98:86:83:29:35:C3:A1:68:FE:EA:65:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBFA69FDBFFB77ABC9F180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.223.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:fa:69:fd:bf:fb:77:ab:c9:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2bf66298-364c-4f25-8362-06033de0c40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:98:73:f3:f0:90:28:b7:18:8b:7f:27:0d: f0:24:21:5e:ec:63:c9:84:4d:1f:b1:f3:9b:8d:9d: e9:c3:2e:32:1b:fd:41:91:1f:ed:db:fd:c4:89:83: 06:b0:d8:25:45:29:1d:ce:a4:df:8e:0e:02:fa:0d: b3:e0:aa:6e:e0:36:83:40:53:c9:df:6e:e7:ad:fb: 0b:9a:38:28:2e:83:25:45:7a:73:46:28:1e:ff:a9: b9:a7:31:fd:c4:38:05:24:d4:06:24:90:f5:7e:c3: ce:49:e6:2d:92:b4:ab:13:61:d9:de:e7:52:b1:53: d5:f0:49:ce:d6:bd:a4:c5:3b:31:85:4a:f8:3e:05: af:e9:31:09:35:8b:d2:1b:f2:9d:6f:82:4e:fd:ce: 1c:3f:c7:be:64:e3:fe:f6:28:91:f6:e0:9c:c8:7b: 76:c3:f9:0c:92:a2:51:56:e8:d8:1e:fd:07:86:6d: cb:7f:ec:3c:67:49:cb:7d:a0:e4:b2:82:fe:01:d6: 70:48:7f:be:73:9a:b6:8a:84:fc:1e:c8:df:fe:01: c5:8f:bf:49:a0:54:b4:7c:05:c8:76:5e:61:99:ee: 85:62:78:a9:08:ab:9a:3a:1d:43:32:42:51:09:20: 22:ac:fd:a1:9f:52:5e:64:93:3e:93:76:5b:77:92: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AD:F5:2E:1F:F0:3D:4D:98:86:83:29:35:C3:A1:68:FE:EA:65:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:29:2f:77:aa:b6:8c:ce:0d:fc:03:3e:98:46:fe:6d:73: 7f:f2:49:dc:2e:59:77:a5:6a:2e:8b:2d:ce:60:ae:e9:5c:82: 68:ea:71:b3:3a:a4:d3:d6:da:a5:3e:fc:61:5c:0b:24:07:71: ae:06:93:71:39:21:78:95:00:03:a2:a7:76:c3:59:d1:17:8d: 0f:c2:28:51:42:1a:d3:66:cb:ec:7b:a2:dc:9a:67:05:11:5f: 1b:22:8b:aa:53:be:4b:57:8e:ba:71:5e:23:c1:85:22:93:74: cb:8a:56:8b:d0:c9:76:f2:13:bb:01:41:0c:93:93:e8:00:a4: 5b:39:1c:fc:4a:0f:98:ce:c5:75:7e:e1:8f:1a:dd:d4:af:c4: 49:d3:3b:aa:53:0c:d6:ef:9b:3c:56:f1:3a:ed:42:9e:7c:bb: fd:86:7d:54:44:13:ec:3a:d5:e8:f9:f9:b4:6e:09:05:2b:0e: 08:4d:0a:8c:24:b6:30:a5:b5:5e:93:f1:b1:f5:7f:26:ef:4b: 15:4e:82:56:fe:fe:d4:e6:9a:e4:4e:a1:d0:5f:3e:b5:fd:2c: 5d:2e:64:3e:85:e7:6e:cc:4d:fa:71:6c:34:7c:92:01:9b:93: 3b:1b:87:87:5e:0f:c7:75:eb:3e:c5:f7:b7:b1:88:70:23:d9: ef:0b:ae:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2/pp/b/7d6vJ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmJmNjYyOTgtMzY0Yy00ZjI1LTgzNjItMDYwMzNkZTBjNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j6Yc/PwkCi3GIt/Jw3wJCFe7GPJhE0fsfOb jZ3pwy4yG/1BkR/t2/3EiYMGsNglRSkdzqTfjg4C+g2z4Kpu4DaDQFPJ327nrfsL mjgoLoMlRXpzRige/6m5pzH9xDgFJNQGJJD1fsPOSeYtkrSrE2HZ3udSsVPV8EnO 1r2kxTsxhUr4PgWv6TEJNYvSG/Kdb4JO/c4cP8e+ZOP+9iiR9uCcyHt2w/kMkqJR VujYHv0Hhm3Lf+w8Z0nLfaDksoL+AdZwSH++c5q2ioT8Hsjf/gHFj79JoFS0fAXI dl5hme6FYnipCKuaOh1DMkJRCSAirP2hn1JeZJM+k3Zbd5KL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOat9S4f8D1NmIaDKTXDoWj+6mVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2OGZiNGEtOThiMy0z NDEwLTk4NTktZTM3NjllMGRkNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN9cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr1KS93qraMzg38Az6YRv5tc3/ySdwuWXelai6LLc5grulcgmjqcbM6 pNPW2qU+/GFcCyQHca4Gk3E5IXiVAAOip3bDWdEXjQ/CKFFCGtNmy+x7otyaZwUR Xxsii6pTvktXjrpxXiPBhSKTdMuKVovQyXbyE7sBQQyTk+gApFs5HPxKD5jOxXV+ 4Y8a3dSvxEnTO6pTDNbvmzxW8TrtQp58u/2GfVREE+w61ej5+bRuCQUrDghNCowk tjCltV6T8bH1fybvSxVOglb+/tTmmuROodBfPrX9LF0uZD6F527MTfpxbDR8kgGb kzsbh4deD8d16z7F97exiHAj2e8LriM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:19:13 2025 by rpki-client