This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c8a8cf-6e4f-3f2d-8ddd-bae6d236da7e.roa
File: 32c8a8cf-6e4f-3f2d-8ddd-bae6d236da7e.roa (raw, json)
Hash identifier: 1zJB9XYPhn9NspKvcF9SuTmKdwMuolPcqJp3jyTlUTg=
Subject key identifier: 5D:4B:B5:E7:7A:E9:B1:BD:39:E2:8C:68:A8:1F:FE:74:57:E0:29:24
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BFFDB931CA781858937EE6A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c8a8cf-6e4f-3f2d-8ddd-bae6d236da7e.roa
Signing time: Thu 27 Nov 2025 14:00:40 +0000
ROA not before: Thu 27 Nov 2025 14:00:40 +0000
ROA not after: Wed 25 Feb 2026 14:00:40 +0000
asID: 22773
IP address blocks: 72.201.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ff:db:93:1c:a7:81:85:89:37:ee:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 27 14:00:40 2025 GMT
Not After : Feb 25 14:00:40 2026 GMT
Subject: CN=3bf0b22c-d457-4521-be07-724678cb706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:4b:7a:45:10:10:d9:8d:07:45:77:6b:00:
42:0d:7e:84:d3:46:36:05:9b:ab:63:83:17:93:0c:
d2:20:ab:ea:13:de:d6:e2:20:42:cc:b2:d2:d7:96:
b3:49:ad:24:11:8e:c9:d8:6c:ab:01:b7:6b:2a:ca:
d6:fa:2b:a7:18:bc:1a:af:5d:6d:2f:4b:0c:5f:7e:
4b:23:9c:52:87:12:ec:f8:84:42:18:1b:fe:3d:4d:
a6:12:6f:4c:41:03:8f:5b:9f:f1:94:5a:e5:8d:b3:
8a:39:1c:db:15:56:69:59:ac:ac:3d:0d:50:d3:02:
80:a6:63:92:d8:7a:97:87:07:ae:b0:95:13:d0:19:
68:15:aa:7e:8d:38:de:36:4c:6a:95:1c:7b:e7:d5:
f0:4a:66:00:30:28:20:ed:c3:ea:87:66:62:88:5f:
c0:aa:d0:13:45:6e:93:cf:c8:4f:3a:00:6d:24:df:
17:57:d7:3a:52:86:44:65:48:64:e9:bd:ee:d3:b2:
9c:66:94:0d:91:51:30:c4:35:c5:e3:c5:94:59:eb:
06:bc:a4:a0:1e:63:c6:b2:2f:66:fa:2e:73:41:bb:
b6:59:47:9a:7c:a6:f2:87:76:96:9f:51:76:c2:a7:
b0:f3:a3:bb:c3:6f:fd:e3:82:76:87:a5:7a:69:b5:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:B5:E7:7A:E9:B1:BD:39:E2:8C:68:A8:1F:FE:74:57:E0:29:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c8a8cf-6e4f-3f2d-8ddd-bae6d236da7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.201.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7e:f7:7c:fb:b1:4c:83:f9:b8:c6:20:7a:96:c5:f3:f7:05:
6d:a5:5a:c3:86:7b:d0:e9:3e:b7:e9:d1:91:fc:96:dc:3c:be:
6a:aa:14:e8:96:56:28:2a:d2:37:01:8d:9e:db:3a:14:b7:b7:
8d:a7:cb:ea:d4:c5:7d:d8:8f:34:3f:87:99:87:34:ae:78:d2:
5f:7d:41:e4:27:01:b8:e8:6b:51:0c:f2:b6:9f:e7:d4:64:56:
dd:6b:fc:e6:fe:f0:1e:06:60:b6:4e:aa:63:c4:12:32:06:d8:
5b:d8:e9:4b:4e:ae:82:5b:1d:d4:69:4c:84:94:0f:3c:4f:35:
93:29:cc:0e:55:67:08:33:1a:e3:6c:71:a4:84:7a:0f:8b:f6:
ed:8f:3a:33:f8:41:04:55:af:5e:6a:e8:c1:32:ca:b9:54:68:
60:25:e8:81:be:4b:4b:9c:00:a5:95:94:13:c1:c6:a5:0f:6f:
f0:69:cf:51:1e:aa:f9:89:90:b4:1c:ee:6b:0e:a5:e2:12:73:
ef:8e:7d:8d:af:ac:fa:5e:48:26:3a:74:f2:d7:ff:ba:6a:84:
2c:b6:6e:91:6a:5f:22:b3:72:2d:b8:68:e4:4b:5d:c2:8b:32:
89:09:0e:2e:76:11:b1:bc:8c:ca:2b:92:22:57:5e:9c:22:61:
f6:22:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:09:44 2025 by rpki-client