This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa File: 2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa (raw, json) Hash identifier: XMC6zibAfPEE1eK5GWdBbrenT3DeYnj+BrQkRH9M9z8= Subject key identifier: 3C:DE:7E:80:CD:AE:DC:C1:BA:77:25:13:69:96:2D:8E:37:43:F4:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666987E7B9778829013D580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.221.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:98:7e:7b:97:78:82:90:13:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=c8e142bb-861b-4620-a2c5-d0dc21bfe233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:bd:73:b0:c1:35:ab:20:d1:30:85:6c:a9: 51:9a:20:a4:6d:77:07:65:43:f5:74:db:92:46:0d: 02:17:9d:ef:df:fa:fe:03:59:1c:0f:d8:88:cf:3d: e5:cc:38:1d:e0:8e:40:f0:c1:3c:b0:d2:21:bf:bc: 78:4d:6b:2f:78:74:ba:5e:37:09:60:cf:f4:2a:a8: 85:6c:4f:b6:3c:2d:17:2c:19:c0:10:d5:d7:73:9c: fc:03:85:36:63:34:2b:ca:04:75:b3:55:1f:09:24: 1b:a6:0e:69:08:98:82:f4:1c:39:99:28:96:00:a1: df:73:61:13:89:b6:ef:18:b3:9f:24:97:22:72:01: 88:af:b5:28:57:c0:cf:3e:e1:a8:0a:3d:cf:57:04: 4b:8e:43:3f:42:16:79:c6:e3:e2:3b:cd:52:3b:e1: 23:13:ae:c1:f8:2b:61:a0:b2:89:ca:18:8f:40:8b: b2:5e:24:b9:63:ef:4b:16:e5:ac:32:33:8e:63:10: 94:0e:01:eb:c4:2a:ee:77:07:e9:25:58:0c:16:94: b1:48:5c:00:f7:70:1c:d2:80:25:49:d1:bd:a9:40: e8:09:dc:56:39:6d:e2:84:5e:3c:d0:e1:34:c0:3e: 92:53:36:5b:ca:8a:81:72:04:41:8c:d3:7d:6f:0d: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DE:7E:80:CD:AE:DC:C1:BA:77:25:13:69:96:2D:8E:37:43:F4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f4:9d:7d:f6:16:af:00:a6:5c:ea:91:11:de:d5:05:86:38: 68:8b:85:c4:6a:92:61:3c:b5:be:40:51:cd:49:7a:d0:e5:7a: 82:37:1f:fc:d0:a6:9b:c8:9c:f6:8b:05:4f:e9:39:d3:0b:06: 84:7f:d2:cd:46:24:e3:71:e5:81:5a:55:fc:a9:2c:e6:16:34: 51:e7:a0:96:0b:56:ed:a6:65:6d:37:f7:09:a8:02:12:c1:4e: 72:a0:3a:cf:39:51:3d:be:f5:2b:e9:7b:bd:74:1b:b4:95:4e: ad:0f:e0:d3:9f:ec:f1:31:f5:50:98:8d:1e:c8:2e:22:57:41: 80:98:63:70:c8:5b:6b:e8:45:2f:a9:48:e2:32:91:59:c1:ba: eb:54:ec:c8:b9:57:ec:25:df:da:e7:46:75:18:d8:4c:d1:28: c8:86:38:95:59:04:84:6e:b5:44:8f:5e:16:ad:63:3c:50:8d: 60:da:23:78:a3:0f:86:0e:8a:1f:ce:ae:32:59:39:e8:2b:24: aa:b5:1d:ff:46:e0:c5:e3:4a:3d:84:31:29:66:b5:7b:40:73: 7e:bd:10:09:a2:c7:36:ef:e1:4a:69:ad:48:9b:fa:4a:04:1a: ee:1b:16:5d:e1:4b:cf:15:b6:9f:7c:44:18:b8:8c:b2:94:79: 28:97:00:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZph+e5d4gpAT1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YzhlMTQyYmItODYxYi00NjIwLWEyYzUtZDBkYzIxYmZlMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP+9c7DBNasg0TCFbKlRmiCkbXcHZUP1dNuS Rg0CF53v3/r+A1kcD9iIzz3lzDgd4I5A8ME8sNIhv7x4TWsveHS6XjcJYM/0KqiF bE+2PC0XLBnAENXXc5z8A4U2YzQrygR1s1UfCSQbpg5pCJiC9Bw5mSiWAKHfc2ET ibbvGLOfJJcicgGIr7UoV8DPPuGoCj3PVwRLjkM/QhZ5xuPiO81SO+EjE67B+Cth oLKJyhiPQIuyXiS5Y+9LFuWsMjOOYxCUDgHrxCrudwfpJVgMFpSxSFwA93Ac0oAl SdG9qUDoCdxWOW3ihF480OE0wD6SUzZbyoqBcgRBjNN9bw1mRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzefoDNrtzBunclE2mWLY43Q/TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJlNGUxYjItZWEwZC0z MGYzLWJmMmMtODU1MGU5N2Y3NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD0nX32Fq8AplzqkRHe1QWGOGiLhcRqkmE8tb5AUc1JetDleoI3H/zQ ppvInPaLBU/pOdMLBoR/0s1GJONx5YFaVfypLOYWNFHnoJYLVu2mZW039wmoAhLB TnKgOs85UT2+9Svpe710G7SVTq0P4NOf7PEx9VCYjR7ILiJXQYCYY3DIW2voRS+p SOIykVnBuutU7Mi5V+wl39rnRnUY2EzRKMiGOJVZBIRutUSPXhatYzxQjWDaI3ij D4YOih/OrjJZOegrJKq1Hf9G4MXjSj2EMSlmtXtAc369EAmixzbv4UpprUib+koE Gu4bFl3hS88Vtp98RBi4jLKUeSiXAIE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:14 2026 by rpki-client