This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa File: 213f39f7-e151-3c11-8d49-8581e8732522.roa (raw, json) Hash identifier: b5QBgkDCNcK02zAF2Wc6Wko4JLXyBKuR0tjf6pNDx3Y= Subject key identifier: 9F:21:81:93:80:A7:D1:91:43:6B:82:57:60:D6:DF:6F:B6:A6:2B:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56671FDBBDBA90F66CDDC880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:1f:db:bd:ba:90:f6:6c:dd:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=0aa1b371-3595-41db-bb7a-17dec4a0fbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:0e:5c:5e:92:10:3a:2f:e9:3f:93:67:9f: b7:24:23:99:21:43:df:2b:86:04:3c:bf:11:3e:af: 9c:14:27:9b:4c:4e:cb:28:8a:a2:31:86:c0:8e:ad: f6:61:82:fc:74:8f:bd:f7:d9:a4:7a:70:46:0b:56: 0e:6d:fd:90:f7:55:04:02:43:10:6f:2c:e4:13:51: aa:60:9f:64:8d:98:76:2c:b7:28:17:4c:f8:87:aa: 48:7c:42:da:38:6f:83:15:89:3c:90:b0:a9:e3:a2: 34:60:2f:54:0a:db:2c:f9:01:52:3d:30:bb:5f:3a: df:b6:2c:2b:dd:61:9c:46:b3:d1:7e:a2:22:a7:28: ff:ef:db:13:96:3c:0c:ae:df:69:ea:66:d5:34:4c: 0d:9a:33:b8:b5:2f:99:c6:cb:72:f1:b8:71:28:1c: 0e:a7:74:32:22:ba:97:ab:6d:24:b5:af:6a:70:a1: a9:f2:3d:b0:b4:7c:a5:db:83:50:37:5d:1f:db:57: 1d:8e:f3:f4:2d:3a:f5:f1:b0:ea:41:cf:3d:bc:d8: 0e:1e:53:83:09:cd:7d:e8:4f:17:d4:db:8d:69:86: 69:d1:54:96:c6:ef:df:be:9e:8e:42:b1:27:3e:2e: a6:44:0a:5c:f3:da:6b:4d:49:0a:16:51:87:e7:cf: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:81:93:80:A7:D1:91:43:6B:82:57:60:D6:DF:6F:B6:A6:2B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/213f39f7-e151-3c11-8d49-8581e8732522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b5:f4:38:53:b1:ba:4a:6b:e0:0e:f1:27:4f:d7:a9:80:af: ec:cc:1e:b0:27:79:2b:bd:81:42:26:54:d8:c4:02:3d:79:4d: 43:f4:8e:81:4c:93:04:77:cc:ae:af:9e:13:6c:bf:d3:3a:e0: 6b:39:bb:a3:0a:aa:cf:9f:4f:0a:ed:c0:93:98:ed:3d:71:13: 56:70:51:4e:cb:dd:34:d6:e3:dc:07:3d:59:b9:f3:f3:97:7f: 99:5e:b6:57:87:88:48:b7:13:e3:f2:1f:2f:68:c2:20:a0:10: b8:2b:ca:55:02:8c:a1:ae:62:7e:4a:53:d5:39:d0:1c:cf:e7: 57:5c:bf:c2:12:98:8c:ed:c3:58:58:b8:63:6b:81:ef:f7:36: a7:b5:4a:8e:13:f0:a4:02:0a:0a:ec:d0:06:42:13:73:df:61: bf:68:3c:0d:3e:f9:71:cb:33:06:53:28:87:25:4a:61:6a:87: df:52:96:22:ba:d8:bf:e8:b7:2d:78:dc:a2:69:94:e5:94:f3: a8:80:cb:64:c1:af:2f:e3:1f:ab:7f:da:b6:62:04:0c:90:a6: 2c:c5:a9:cb:c3:99:cc:a4:7c:79:02:cd:d0:73:84:29:80:90: 1a:fc:c6:7b:6c:1e:d7:bc:99:30:0e:ab:53:37:ac:d9:86:fb: ee:69:9e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZx/bvbqQ9mzdyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MGFhMWIzNzEtMzU5NS00MWRiLWJiN2EtMTdkZWM0YTBmYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS4OXF6SEDov6T+TZ5+3JCOZIUPfK4YEPL8R Pq+cFCebTE7LKIqiMYbAjq32YYL8dI+999mkenBGC1YObf2Q91UEAkMQbyzkE1Gq YJ9kjZh2LLcoF0z4h6pIfELaOG+DFYk8kLCp46I0YC9UCtss+QFSPTC7Xzrftiwr 3WGcRrPRfqIipyj/79sTljwMrt9p6mbVNEwNmjO4tS+Zxsty8bhxKBwOp3QyIrqX q20kta9qcKGp8j2wtHyl24NQN10f21cdjvP0LTr18bDqQc89vNgOHlODCc196E8X 1NuNaYZp0VSWxu/fvp6OQrEnPi6mRApc89prTUkKFlGH58/5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8hgZOAp9GRQ2uCV2DW32+2pivgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEzZjM5ZjctZTE1MS0z YzExLThkNDktODU4MWU4NzMyNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO19DhTsbpKa+AO8SdP16mAr+zMHrAneSu9gUImVNjEAj15TUP0joFM kwR3zK6vnhNsv9M64Gs5u6MKqs+fTwrtwJOY7T1xE1ZwUU7L3TTW49wHPVm58/OX f5letleHiEi3E+PyHy9owiCgELgrylUCjKGuYn5KU9U50BzP51dcv8ISmIztw1hY uGNrge/3Nqe1So4T8KQCCgrs0AZCE3PfYb9oPA0++XHLMwZTKIclSmFqh99SliK6 2L/oty143KJplOWU86iAy2TBry/jH6t/2rZiBAyQpizFqcvDmcykfHkCzdBzhCmA kBr8xntsHte8mTAOq1M3rNmG++5png4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:33 2026 by rpki-client