This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce4db96-cea5-3182-8df1-a74af25c830a.roa File: 3ce4db96-cea5-3182-8df1-a74af25c830a.roa (raw, json) Hash identifier: FN9q2N8cikUIuPjXji+5TaadW8PZNjZcmy/zW2nqQ4c= Subject key identifier: 1E:93:87:D2:44:65:5C:EB:11:8B:75:AF:35:21:55:10:3B:C0:13:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666BF3B2758969DA7048F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce4db96-cea5-3182-8df1-a74af25c830a.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.199.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:bf:3b:27:58:96:9d:a7:04:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=91c0c66b-2f1d-470d-b294-b82441a44234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:0f:f5:6a:0f:c2:9e:f4:94:14:7b:f1:55: 26:b7:22:fd:e2:9a:65:c3:9c:d3:f5:51:81:71:aa: ae:f3:e9:d1:35:30:48:24:5b:9e:4e:62:02:a6:5d: 46:3a:42:26:c3:e1:2a:60:5f:01:9e:5f:ed:ce:3b: 12:85:21:d9:01:f7:0c:2e:18:25:a4:6c:51:da:7b: 86:42:ab:d5:0b:53:0b:45:f6:1d:ce:63:ea:34:f2: ec:7a:7f:bb:35:d0:8d:8f:b2:9c:ef:ec:65:f9:d0: 6c:1c:96:88:c5:84:c3:ef:9f:f8:3a:1e:2d:c0:45: da:76:0c:19:af:bb:23:b3:dd:6d:aa:2b:27:8d:5b: d5:a5:23:35:58:e4:84:a8:81:d5:45:8c:e9:0e:84: 20:3a:8f:36:d5:41:bb:67:b1:bd:8b:6c:1a:28:9b: fe:b1:98:93:3a:77:5c:9a:95:e4:40:57:b6:b8:e9: 9f:70:c3:a7:87:35:a4:5e:6a:11:48:57:98:73:24: c0:21:32:68:5b:14:6d:08:fa:72:76:35:4c:b6:01: 2e:6f:66:c4:18:a7:17:76:f6:0e:c3:0b:23:75:00: 18:e9:8e:c5:f2:17:c7:ce:b5:53:a4:bb:c7:31:ef: 6b:1b:60:ab:ac:60:32:7f:87:2a:0b:e5:d7:5d:c8: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:93:87:D2:44:65:5C:EB:11:8B:75:AF:35:21:55:10:3B:C0:13:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce4db96-cea5-3182-8df1-a74af25c830a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:64:14:c4:1d:41:40:8d:a7:77:b2:f3:8f:a2:c1:93:bc:2c: 00:91:e9:43:17:45:88:00:d9:9c:aa:0e:72:f5:3f:43:15:14: a7:86:01:6a:01:2f:58:05:17:65:b7:27:0c:8f:b4:54:13:2f: d5:22:31:da:8f:23:45:c2:5f:ae:46:db:8b:22:76:e7:b8:66: 21:f7:d1:aa:c2:b8:ca:0e:d8:9f:5e:1d:d3:e7:b3:68:80:32: b5:6c:f7:c3:84:25:db:f5:5a:d2:01:d8:a7:10:b3:cc:71:38: 41:be:e0:d0:79:1b:26:75:50:cc:65:9d:34:8b:26:6e:95:d2: 87:ac:ec:26:9c:61:cc:4b:5d:9f:d8:fe:73:7b:47:4f:8d:86: f9:92:39:00:b0:d6:ec:9a:68:56:47:b1:f0:39:47:f9:b8:18: 8a:3f:15:38:fc:6f:49:41:97:dd:fd:f7:ef:a3:3e:a4:bf:9e: 78:02:3b:16:51:5a:63:f2:96:57:48:ca:d5:03:68:e3:ba:77: 48:5b:5d:26:24:c5:4e:f6:5e:20:52:27:bc:ca:3d:43:a5:13: 7c:3a:b6:30:64:6b:de:6c:b9:77:8e:21:ba:3f:de:9e:0b:2d: 0f:7e:42:f2:e6:1d:84:0c:3f:88:08:38:1d:12:35:cd:b0:62: 71:8e:53:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZr87J1iWnacEjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OTFjMGM2NmItMmYxZC00NzBkLWIyOTQtYjgyNDQxYTQ0MjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13EP9WoPwp70lBR78VUmtyL94pplw5zT9VGB caqu8+nRNTBIJFueTmICpl1GOkImw+EqYF8Bnl/tzjsShSHZAfcMLhglpGxR2nuG QqvVC1MLRfYdzmPqNPLsen+7NdCNj7Kc7+xl+dBsHJaIxYTD75/4Oh4twEXadgwZ r7sjs91tqisnjVvVpSM1WOSEqIHVRYzpDoQgOo821UG7Z7G9i2waKJv+sZiTOndc mpXkQFe2uOmfcMOnhzWkXmoRSFeYcyTAITJoWxRtCPpydjVMtgEub2bEGKcXdvYO wwsjdQAY6Y7F8hfHzrVTpLvHMe9rG2CrrGAyf4cqC+XXXcjgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Th9JEZVzrEYt1rzUhVRA7wBOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NlNGRiOTYtY2VhNS0z MTgyLThkZjEtYTc0YWYyNWM4MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNkFMQdQUCNp3ey84+iwZO8LACR6UMXRYgA2ZyqDnL1P0MVFKeGAWoB L1gFF2W3JwyPtFQTL9UiMdqPI0XCX65G24sidue4ZiH30arCuMoO2J9eHdPns2iA MrVs98OEJdv1WtIB2KcQs8xxOEG+4NB5GyZ1UMxlnTSLJm6V0oes7CacYcxLXZ/Y /nN7R0+NhvmSOQCw1uyaaFZHsfA5R/m4GIo/FTj8b0lBl9399++jPqS/nngCOxZR WmPylldIytUDaOO6d0hbXSYkxU72XiBSJ7zKPUOlE3w6tjBka95suXeOIbo/3p4L LQ9+QvLmHYQMP4gIOB0SNc2wYnGOU7A= -----END CERTIFICATE-----Generated at Sun Jan 25 12:23:39 2026 by rpki-client