This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa File: 2df8dd13-2d92-366d-b84b-210b566b1e5b.roa (raw, json) Hash identifier: 3zoWSsF/Y58JHNmiiHr4jTfpEdzPWaL2X9Xj5G4QGQ4= Subject key identifier: D0:C6:9E:90:98:3E:98:FD:55:A5:28:20:41:00:29:CC:C6:15:C7:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C48712F486150515F45058A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 22773 IP address blocks: 72.200.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:2f:48:61:50:51:5f:45:05:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=0f45d274-e27c-4428-bac7-4bbf41bad882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:37:85:f6:90:ae:c1:15:e5:30:63:fc:03:9e: d2:6b:1f:2c:f2:e1:0f:f7:c8:62:8d:30:95:c5:15: 76:26:e3:c7:6a:f6:d9:a5:f0:77:2d:87:0a:aa:5e: 62:b7:64:42:53:37:ac:9f:36:72:92:28:55:05:05: 4d:ef:21:1e:60:d4:a9:f6:c9:6a:1f:94:ca:48:90: 80:7f:40:e2:33:90:e7:1b:6c:16:b5:df:04:20:5e: ee:d6:69:fb:2b:af:bf:8a:f3:fb:b7:10:9e:19:2e: a8:08:70:55:5b:a2:8a:56:f5:83:69:0c:59:6b:2b: a5:b8:1c:29:25:1a:72:92:0c:26:0d:29:4b:a2:5c: a8:7c:dd:8e:39:d0:d6:5c:fe:2e:43:f3:2d:4c:01: 03:89:b5:37:3f:0c:a5:63:c5:f6:06:56:47:39:e3: 5a:15:32:42:8d:02:e5:f4:a0:95:8b:85:2b:30:8a: ff:65:95:c1:d7:d2:50:90:2b:cb:c5:56:e6:31:36: 05:93:63:e4:79:4f:b2:73:67:a0:26:a0:d8:7a:a9: 85:ef:46:a2:da:da:0f:e7:59:de:25:8b:8f:46:0b: f1:9e:df:f1:cb:8e:9e:a1:ec:b4:97:df:d4:4f:e2: d9:39:49:4a:4f:4f:91:32:9e:c0:b0:9b:e5:66:11: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C6:9E:90:98:3E:98:FD:55:A5:28:20:41:00:29:CC:C6:15:C7:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d7:c6:11:45:aa:d0:d9:a0:f2:15:ba:73:d8:58:a1:ab:af: 95:43:47:44:17:a3:17:56:5e:01:a7:6a:4e:be:ab:37:41:a8: 74:27:43:c4:75:e5:23:b8:7c:66:2f:8e:9f:90:14:e2:72:ca: cb:b8:81:43:01:5f:cb:58:c5:bd:8b:7b:d3:84:67:e0:9d:f0: ac:70:b4:e4:fb:13:45:ea:b3:24:5e:4d:88:58:0c:88:22:06: 33:3e:48:3b:2b:b0:87:72:23:c6:96:99:5d:73:e8:20:5a:1a: 5e:4e:25:62:fe:43:18:6e:87:cc:03:84:2a:33:e1:fc:6a:d7: 8c:3c:28:fd:2c:17:22:ed:7c:bf:9c:e8:1e:69:38:91:72:d1: cd:89:7a:aa:3b:33:de:f4:95:16:fa:24:c5:4c:45:fe:53:c2: c3:2e:f4:5f:f0:6e:d6:d3:f3:e1:17:6c:6d:4b:c0:6a:06:d9: 50:5e:02:7a:9e:71:fd:8a:2b:0d:f0:2b:e7:e1:ba:71:00:eb: 67:05:82:6c:42:04:ee:e4:8b:83:eb:07:ca:b1:b1:12:9f:28: b0:37:14:05:b3:6d:cd:0f:ec:b1:9f:74:15:27:a3:65:11:d2: f7:8f:be:5d:0d:e5:74:c9:b1:b3:fc:2a:1a:98:37:3d:6a:9c: b6:31:bc:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcS9IYVBRX0UFioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MGY0NWQyNzQtZTI3Yy00NDI4LWJhYzctNGJiZjQxYmFkODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzeF9pCuwRXlMGP8A57Sax8s8uEP98hijTCV xRV2JuPHavbZpfB3LYcKql5it2RCUzesnzZykihVBQVN7yEeYNSp9slqH5TKSJCA f0DiM5DnG2wWtd8EIF7u1mn7K6+/ivP7txCeGS6oCHBVW6KKVvWDaQxZayuluBwp JRpykgwmDSlLolyofN2OOdDWXP4uQ/MtTAEDibU3PwylY8X2BlZHOeNaFTJCjQLl 9KCVi4UrMIr/ZZXB19JQkCvLxVbmMTYFk2PkeU+yc2egJqDYeqmF70ai2toP51ne JYuPRgvxnt/xy46eoey0l9/UT+LZOUlKT0+RMp7AsJvlZhHs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDGnpCYPpj9VaUoIEEAKczGFccnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRmOGRkMTMtMmQ5Mi0z NjZkLWI4NGItMjEwYjU2NmIxZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvXxhFFqtDZoPIVunPYWKGrr5VDR0QXoxdWXgGnak6+qzdBqHQnQ8R1 5SO4fGYvjp+QFOJyysu4gUMBX8tYxb2Le9OEZ+Cd8KxwtOT7E0XqsyReTYhYDIgi BjM+SDsrsIdyI8aWmV1z6CBaGl5OJWL+Qxhuh8wDhCoz4fxq14w8KP0sFyLtfL+c 6B5pOJFy0c2Jeqo7M970lRb6JMVMRf5TwsMu9F/wbtbT8+EXbG1LwGoG2VBeAnqe cf2KKw3wK+fhunEA62cFgmxCBO7ki4PrB8qxsRKfKLA3FAWzbc0P7LGfdBUno2UR 0vePvl0N5XTJsbP8KhqYNz1qnLYxvEU= -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:39 2026 by rpki-client