This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa File: 4b45e218-fc0f-3dc0-8555-282a89f38be2.roa (raw, json) Hash identifier: 8hwukn/o96HrNLBGScTQqDX+vELevI8OfzbQENJ2M60= Subject key identifier: D4:45:9A:3A:DA:79:6B:78:59:CD:1F:B0:84:22:ED:07:3C:E8:36:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56672817FB0A280AA7BCB4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.209.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:28:17:fb:0a:28:0a:a7:bc:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=fa75bd47-f717-4d45-87d7-952626dd9185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:7a:1e:20:65:9d:51:a3:b6:79:9c:0e:2a: 5a:91:38:eb:48:f3:5d:2b:98:af:78:28:1e:41:dc: 49:ff:3c:1f:48:a3:74:c7:d4:b3:f2:76:f7:3d:d3: 91:ee:77:4f:d1:4e:8a:9c:ab:ef:55:63:75:fc:7a: 23:01:1a:7d:04:49:bb:00:86:74:e8:2f:59:a7:fa: cd:8f:94:ba:a6:3d:63:7e:2f:f7:84:16:0c:be:a1: 36:58:55:05:1b:2c:47:23:ba:0e:e4:b7:4c:80:12: 60:e1:b6:12:90:ed:0e:96:c2:17:3e:d0:89:b5:f7: 44:4a:9e:ec:45:40:ce:7e:7d:92:61:d7:e5:c4:8f: c9:aa:7c:24:81:8d:e9:21:90:3e:f1:96:8f:4d:38: a9:d9:35:19:5b:84:3e:09:d5:94:26:90:15:32:ad: 70:2f:ce:20:4c:73:e8:6a:6e:0b:1f:d8:f0:3d:e5: 4a:e3:f0:2a:6e:ad:45:a3:5e:f3:b2:ec:b0:6b:5d: 75:80:0a:77:d5:a5:cd:fc:23:fc:9b:53:b9:97:58: 24:8a:dd:2f:86:98:23:33:94:5e:55:69:8e:04:e4: 07:25:fd:c8:ec:66:7f:bc:1a:88:c9:a5:3c:ad:09: 25:37:6b:de:02:f4:03:28:e6:ec:cb:cc:3b:e0:e2: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:45:9A:3A:DA:79:6B:78:59:CD:1F:B0:84:22:ED:07:3C:E8:36:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:91:71:e3:a7:90:a8:fd:a8:e4:28:f3:5a:73:90:06:5a:31: 40:76:9f:35:6b:b7:ef:5e:c0:80:c8:8a:38:ec:be:bb:43:48: a1:8f:4f:62:48:e5:db:5c:fa:2c:00:4e:f2:07:5b:90:c3:11: a5:4e:78:3c:da:89:a3:3f:85:0f:e4:de:b0:11:4d:2c:91:24: 19:32:e9:5f:32:93:18:02:7c:12:95:94:8f:c0:34:d9:57:10: b6:20:68:02:ed:bb:d1:b1:45:e8:08:ce:32:3f:c3:45:c4:2d: b6:53:98:c0:d8:60:cf:9a:7e:f4:8a:e3:74:04:58:b5:69:0e: 12:8d:c5:3d:34:0f:68:4b:8d:14:41:bd:2c:86:9a:bf:6f:3f: d0:66:2b:14:c6:b3:77:c3:6a:8d:d4:1e:93:b8:1b:54:54:20: 52:61:fe:e4:e3:c0:70:47:53:b9:a8:3c:ff:29:95:53:41:6b: 62:54:b8:60:89:a6:c0:8a:00:a2:21:86:28:8d:60:18:16:c4: e9:f6:aa:31:8e:c1:90:1a:ea:62:c7:7d:13:8a:00:16:fb:10: 2f:65:84:5c:60:bc:49:80:c4:98:4e:0f:81:3f:49:34:d0:e1: fd:eb:84:b0:c5:47:fc:25:5e:2d:0b:59:bb:95:96:c8:01:71: db:3c:53:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZygX+wooCqe8tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZmE3NWJkNDctZjcxNy00ZDQ1LTg3ZDctOTUyNjI2ZGQ5MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbR6HiBlnVGjtnmcDipakTjrSPNdK5iveCge QdxJ/zwfSKN0x9Sz8nb3PdOR7ndP0U6KnKvvVWN1/HojARp9BEm7AIZ06C9Zp/rN j5S6pj1jfi/3hBYMvqE2WFUFGyxHI7oO5LdMgBJg4bYSkO0OlsIXPtCJtfdESp7s RUDOfn2SYdflxI/JqnwkgY3pIZA+8ZaPTTip2TUZW4Q+CdWUJpAVMq1wL84gTHPo am4LH9jwPeVK4/Aqbq1Fo17zsuywa111gAp31aXN/CP8m1O5l1gkit0vhpgjM5Re VWmOBOQHJf3I7GZ/vBqIyaU8rQklN2veAvQDKObsy8w74OLI7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRFmjraeWt4Wc0fsIQi7Qc86DYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGI0NWUyMTgtZmMwZi0z ZGMwLTg1NTUtMjgyYTg5ZjM4YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiRceOnkKj9qOQo81pzkAZaMUB2nzVrt+9ewIDIijjsvrtDSKGPT2JI 5dtc+iwATvIHW5DDEaVOeDzaiaM/hQ/k3rARTSyRJBky6V8ykxgCfBKVlI/ANNlX ELYgaALtu9GxRegIzjI/w0XELbZTmMDYYM+afvSK43QEWLVpDhKNxT00D2hLjRRB vSyGmr9vP9BmKxTGs3fDao3UHpO4G1RUIFJh/uTjwHBHU7moPP8plVNBa2JUuGCJ psCKAKIhhiiNYBgWxOn2qjGOwZAa6mLHfROKABb7EC9lhFxgvEmAxJhOD4E/STTQ 4f3rhLDFR/wlXi0LWbuVlsgBcds8U64= -----END CERTIFICATE-----Generated at Sun Jan 25 09:53:07 2026 by rpki-client