This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e7bac95-27ea-3f06-b197-48f0ab35bd1a.roa File: 2e7bac95-27ea-3f06-b197-48f0ab35bd1a.roa (raw, json) Hash identifier: sbs8k3dWLZzjTYh6ieW6LXAdgkReg8lJ21vTwjpYiPM= Subject key identifier: BE:E0:C4:43:37:53:FB:90:CB:EF:37:95:88:0F:D9:9F:77:45:6B:51 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBE44A9D0A07CCD0C0C8C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e7bac95-27ea-3f06-b197-48f0ab35bd1a.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.211.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:e4:4a:9d:0a:07:cc:d0:c0:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=eb6828ac-855c-4882-8728-c9c84fb28f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:a4:89:44:52:ea:ee:3b:76:5e:88:3b:7a: 64:a8:71:9a:de:5f:f8:49:4f:04:63:be:52:92:8f: e2:b0:ce:c5:24:17:dd:91:3e:f3:e9:be:c9:db:1d: d6:28:26:27:8f:8f:59:fb:a1:f5:00:d5:ed:a1:68: 90:1c:2c:62:7f:c7:23:ac:6f:c2:6d:6f:4e:f5:46: 73:6b:4d:f5:c0:32:49:37:35:a5:08:b1:ba:4d:1d: 9f:4c:e5:81:04:74:db:64:6b:7b:ea:6b:3e:1d:84: e6:78:27:3b:ce:15:96:ce:81:af:79:4e:f3:d5:47: b8:b6:0c:0e:df:f0:19:73:5e:f6:26:40:8b:2c:64: c7:0a:d0:9a:55:51:7d:2b:22:e5:8f:3b:44:d4:d4: 49:4e:6a:cb:2b:b9:81:16:e6:6d:a0:ee:b4:32:3c: c1:74:3c:a0:a5:bb:89:0c:f3:36:8d:0d:29:5c:28: ec:15:78:ff:91:83:b6:21:a8:a9:c1:5f:16:87:a7: 84:d3:10:d1:c4:9b:ec:f1:91:be:19:dc:68:15:ed: 3c:dc:12:ee:54:b6:a9:9a:13:3d:a2:07:75:f6:f3: c7:c3:7e:6a:d7:7c:8b:19:75:46:1e:c7:9c:8f:10: 16:a4:f8:e6:c6:fe:27:fd:3f:cd:4c:88:d5:19:4d: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:C4:43:37:53:FB:90:CB:EF:37:95:88:0F:D9:9F:77:45:6B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e7bac95-27ea-3f06-b197-48f0ab35bd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0a:0c:7d:43:16:6b:4e:79:98:bb:da:1b:d6:75:90:d8:85: 30:05:f3:b5:b5:0c:d1:ab:51:05:1e:30:85:41:2f:df:4a:e4: a9:7b:34:82:69:25:9b:28:54:bc:89:23:f6:a8:40:1a:5e:f6: 6a:8e:63:bb:cb:dc:9c:94:c2:80:35:32:c9:84:a8:df:c4:69: 1b:4b:f2:47:43:a4:fc:76:d2:8b:78:e0:4a:61:b8:8b:b3:a1: 26:00:a7:53:c1:d5:27:26:fc:68:be:69:43:61:69:1f:c4:2e: 16:ad:fd:ee:b4:b8:c7:10:89:3b:84:2c:1a:b7:1a:ed:44:1c: 03:80:5e:ae:d9:6e:64:77:92:de:65:68:c8:62:eb:18:ba:38: f2:90:72:3e:8c:02:41:b0:c1:ce:fd:66:70:c9:d8:8b:53:cd: 7f:34:10:10:4a:20:22:f8:22:14:4a:e1:c5:09:9e:7b:c1:a3: f6:45:40:9c:02:65:cf:d2:74:cd:b7:4d:95:60:ae:c6:aa:94: e7:3f:80:a1:3a:e4:3a:10:f0:5b:c9:48:f2:e6:9c:c7:17:95: dd:66:44:50:2b:f9:b8:0d:b1:43:37:09:2e:c8:ea:75:95:5a: a8:40:69:cf:72:6b:59:a4:4a:21:b3:b8:94:bd:7f:b2:88:e5: af:67:d1:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2+RKnQoHzNDAyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZWI2ODI4YWMtODU1Yy00ODgyLTg3MjgtYzljODRmYjI4ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVOkiURS6u47dl6IO3pkqHGa3l/4SU8EY75S ko/isM7FJBfdkT7z6b7J2x3WKCYnj49Z+6H1ANXtoWiQHCxif8cjrG/CbW9O9UZz a031wDJJNzWlCLG6TR2fTOWBBHTbZGt76ms+HYTmeCc7zhWWzoGveU7z1Ue4tgwO 3/AZc172JkCLLGTHCtCaVVF9KyLljztE1NRJTmrLK7mBFuZtoO60MjzBdDygpbuJ DPM2jQ0pXCjsFXj/kYO2IaipwV8Wh6eE0xDRxJvs8ZG+GdxoFe083BLuVLapmhM9 ogd19vPHw35q13yLGXVGHsecjxAWpPjmxv4n/T/NTIjVGU1uKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7gxEM3U/uQy+83lYgP2Z93RWtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmU3YmFjOTUtMjdlYS0z ZjA2LWIxOTctNDhmMGFiMzViZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcKDH1DFmtOeZi72hvWdZDYhTAF87W1DNGrUQUeMIVBL99K5Kl7NIJp JZsoVLyJI/aoQBpe9mqOY7vL3JyUwoA1MsmEqN/EaRtL8kdDpPx20ot44EphuIuz oSYAp1PB1Scm/Gi+aUNhaR/ELhat/e60uMcQiTuELBq3Gu1EHAOAXq7ZbmR3kt5l aMhi6xi6OPKQcj6MAkGwwc79ZnDJ2ItTzX80EBBKICL4IhRK4cUJnnvBo/ZFQJwC Zc/SdM23TZVgrsaqlOc/gKE65DoQ8FvJSPLmnMcXld1mRFAr+bgNsUM3CS7I6nWV WqhAac9ya1mkSiGzuJS9f7KI5a9n0bM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:11 2025 by rpki-client