This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa File: 2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa (raw, json) Hash identifier: zCaKfk9pe+wwt/PYb45oEvCYJTzkovRNVYOn8m0mO4M= Subject key identifier: 16:8A:E1:77:1C:C2:26:67:2D:EF:B9:B8:EC:27:AD:4A:01:31:6C:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F274F41E2579297939EF60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 72.220.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:74:f4:1e:25:79:29:79:39:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=543c7a7f-338c-4dc3-8af7-096f5e5d0d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:9d:ee:48:de:25:6e:89:1a:a0:9c:15:7a: e9:3e:b5:ba:c8:71:45:18:8d:3f:7d:37:01:49:2f: fe:b4:6a:5c:a0:f4:33:e8:12:00:41:a4:39:f9:fa: fb:0a:f4:5f:d0:65:f2:41:9c:88:73:06:da:30:52: 8b:c0:ef:5a:ab:66:c7:c8:ed:6a:65:f4:7e:31:a7: 63:7a:5a:a5:c0:e8:dc:8b:73:22:27:5a:42:ae:c8: f3:22:19:77:ef:8e:a5:1a:44:b9:ca:4f:05:97:1b: 2e:1c:e0:10:34:09:8d:78:91:1c:d4:28:59:4c:a7: 34:76:a4:61:a2:b2:65:e1:a4:4e:f1:53:9c:1f:42: 8e:51:a2:b9:73:6c:b3:38:ba:28:f3:68:e0:d1:f9: 6b:19:67:95:52:fb:5a:ca:eb:d6:7f:01:66:45:40: 17:85:5f:9b:ee:95:e1:58:55:bf:55:7d:30:a3:f7: ed:56:f7:8c:21:d2:cc:53:af:ba:ac:83:bc:4d:24: 0c:f7:1c:1a:83:49:ef:2d:74:9d:74:97:bf:bf:94: b5:97:47:9d:3d:b0:ff:fd:22:db:8b:b8:27:c7:6b: 6a:fa:d7:b2:ee:54:1e:8e:4e:c9:b1:2d:12:d1:32: 46:fa:a3:1b:d1:f6:52:6a:c0:1b:76:1f:6d:7d:78: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:E1:77:1C:C2:26:67:2D:EF:B9:B8:EC:27:AD:4A:01:31:6C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2251d8d8-3906-326d-8d22-6a2f06fcee4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ac:76:41:bc:d6:4c:a9:9b:73:c6:d5:95:10:24:70:aa:02: 16:a8:90:d5:5d:15:46:c4:dc:40:ea:26:ef:09:42:78:0b:3a: e8:04:54:f7:df:67:05:ee:4a:67:32:81:56:90:9d:ec:83:11: 9c:80:02:9c:24:31:65:1e:87:7b:a7:c7:d4:9f:50:7d:e8:4a: fe:55:33:9f:fb:c0:48:e5:fb:be:72:5a:9e:bb:d1:c7:fa:45: ae:40:1b:be:9b:ad:28:b3:a4:12:71:3f:19:82:0a:a1:e9:e5: b1:c1:f1:2d:4c:0e:24:9f:47:e0:a6:66:12:ab:c8:f2:8e:c6: 04:f9:dc:b1:be:84:4c:bf:a4:8b:e9:27:d8:d1:4b:cf:6d:99: 3c:81:d7:2a:51:ee:fc:9c:2c:88:82:8b:e0:93:a9:f3:51:dd: 3f:80:3a:c0:05:0f:e9:e8:45:e3:1b:66:1c:43:99:13:ba:23: d6:49:b2:03:1b:46:dc:75:11:8f:7c:e8:2a:ad:71:4d:9d:78: 90:50:a0:bf:ab:9e:22:0d:bd:d8:af:73:0d:fa:05:87:b1:20: 2c:fe:23:75:56:92:2e:f5:55:2d:c9:94:1c:6d:e9:c4:44:0b: 7b:1f:96:b7:a4:b3:37:2a:bc:8f:9e:78:c7:22:c2:74:f3:73: eb:eb:3c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nT0HiV5KXk572AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTQzYzdhN2YtMzM4Yy00ZGMzLThhZjctMDk2ZjVlNWQwZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy2d7kjeJW6JGqCcFXrpPrW6yHFFGI0/fTcB SS/+tGpcoPQz6BIAQaQ5+fr7CvRf0GXyQZyIcwbaMFKLwO9aq2bHyO1qZfR+Madj elqlwOjci3MiJ1pCrsjzIhl3746lGkS5yk8FlxsuHOAQNAmNeJEc1ChZTKc0dqRh orJl4aRO8VOcH0KOUaK5c2yzOLoo82jg0flrGWeVUvtayuvWfwFmRUAXhV+b7pXh WFW/VX0wo/ftVveMIdLMU6+6rIO8TSQM9xwag0nvLXSddJe/v5S1l0edPbD//SLb i7gnx2tq+tey7lQejk7JsS0S0TJG+qMb0fZSasAbdh9tfXgaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaK4XccwiZnLe+5uOwnrUoBMWyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI1MWQ4ZDgtMzkwNi0z MjZkLThkMjItNmEyZjA2ZmNlZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2sdkG81kypm3PG1ZUQJHCqAhaokNVdFUbE3EDqJu8JQngLOugEVPff ZwXuSmcygVaQneyDEZyAApwkMWUeh3unx9SfUH3oSv5VM5/7wEjl+75yWp670cf6 Ra5AG76brSizpBJxPxmCCqHp5bHB8S1MDiSfR+CmZhKryPKOxgT53LG+hEy/pIvp J9jRS89tmTyB1ypR7vycLIiCi+CTqfNR3T+AOsAFD+noReMbZhxDmRO6I9ZJsgMb Rtx1EY986CqtcU2deJBQoL+rniINvdivcw36BYexICz+I3VWki71VS3JlBxt6cRE C3sflrekszcqvI+eeMciwnTzc+vrPN0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:46 2025 by rpki-client