This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e8abd25-dfce-3e0e-b6a4-f26afb00525b.roa File: 4e8abd25-dfce-3e0e-b6a4-f26afb00525b.roa (raw, json) Hash identifier: 3zXNXXFA1Fb4sm/xzhjtm8ESOU/w540tPnvW1O38gSo= Subject key identifier: 57:13:19:ED:70:35:66:6B:7A:A7:1F:2D:2F:4B:E5:B6:D4:27:6F:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBEFB8EB3929B797158580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e8abd25-dfce-3e0e-b6a4-f26afb00525b.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.208.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:ef:b8:eb:39:29:b7:97:15:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=8e58a2b3-5e68-4fdd-92e9-1f685a0b2492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:cd:e5:23:dc:6d:07:2f:3d:28:33:a6:58: c3:fd:dc:eb:57:e3:e3:15:af:8d:09:cf:10:a1:2b: 6e:f0:cb:50:58:86:16:af:cc:22:58:16:6b:2c:e9: a7:fc:77:62:95:e5:e7:eb:71:1e:e3:71:95:76:ce: 34:b6:b2:d3:3c:c1:9a:1a:bf:89:60:77:d5:39:91: 65:e0:7d:82:6a:ab:65:37:da:b4:fe:05:f2:4f:99: df:ef:32:9c:60:ae:fd:e0:89:3a:8b:0c:fa:ab:4c: 6e:4c:48:dd:23:48:7b:5e:25:3e:89:df:ae:94:08: a2:86:7b:b6:ad:48:e7:b8:18:cd:3b:27:6c:72:56: df:68:33:23:4d:07:2d:be:74:27:e2:10:c2:ba:12: 0e:73:dc:46:ed:19:c7:45:a4:68:ce:2e:f5:26:d4: 2f:e7:57:4d:e3:13:f7:64:03:34:18:ff:0a:46:ff: 43:7c:30:56:af:1d:2b:7d:39:dd:11:fa:01:70:13: 8d:9d:89:75:d7:e0:93:8d:82:7d:4e:25:8a:f5:2c: d9:da:75:e9:45:a6:6a:e3:4a:d8:08:29:80:ef:4a: 71:fa:1d:46:d9:80:d5:b1:26:e6:83:6c:59:14:11: f6:13:18:33:27:f5:b3:b6:ee:b3:83:02:af:00:d3: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:19:ED:70:35:66:6B:7A:A7:1F:2D:2F:4B:E5:B6:D4:27:6F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e8abd25-dfce-3e0e-b6a4-f26afb00525b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:39:63:bd:6a:e7:37:68:13:c8:84:c4:b9:ed:e9:82:3a:5a: 4d:93:2a:dc:85:5f:ff:5a:a2:62:6e:f1:60:ef:20:b1:b1:56: db:a1:8e:40:15:5f:21:b3:3f:ea:56:d4:b7:f1:9a:3f:4f:dd: 6e:b5:71:52:d5:bf:20:87:da:29:ad:78:0f:86:ff:e3:7a:3f: 54:00:0a:bf:45:b0:c3:2c:32:3b:11:3b:8d:dc:4d:62:ce:44: fc:73:2f:46:1b:49:72:e4:1f:cd:03:cf:47:8a:29:49:fb:53: ca:f5:a8:ed:89:f8:a2:ec:69:ca:b9:1e:c5:18:cd:ce:54:dc: 86:d2:d3:02:f8:9b:ee:a2:8d:29:9c:1b:69:ef:d7:e1:fa:b8: 80:00:e5:68:5c:e4:d4:a0:6b:c3:b9:62:a4:30:7f:65:bd:ad: 0a:2b:82:8d:a4:b0:d4:23:e4:4a:12:51:78:06:1c:f9:54:67: 93:15:79:35:d8:0c:96:db:47:38:92:1e:5d:f9:73:42:66:17: 01:1a:2a:2a:df:ad:19:43:79:ea:b9:74:5f:99:d1:d9:63:31: 8a:4e:b7:8f:8f:ee:97:77:8b:56:f6:13:c8:b8:be:90:9d:01: 5c:d3:b3:4d:16:8c:e6:80:85:ec:ae:7e:15:67:1b:29:fd:b5: b9:99:85:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2++46zkpt5cVhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk OGU1OGEyYjMtNWU2OC00ZmRkLTkyZTktMWY2ODVhMGIyNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTvN5SPcbQcvPSgzpljD/dzrV+PjFa+NCc8Q oStu8MtQWIYWr8wiWBZrLOmn/HdileXn63Ee43GVds40trLTPMGaGr+JYHfVOZFl 4H2CaqtlN9q0/gXyT5nf7zKcYK794Ik6iwz6q0xuTEjdI0h7XiU+id+ulAiihnu2 rUjnuBjNOydsclbfaDMjTQctvnQn4hDCuhIOc9xG7RnHRaRozi71JtQv51dN4xP3 ZAM0GP8KRv9DfDBWrx0rfTndEfoBcBONnYl11+CTjYJ9TiWK9SzZ2nXpRaZq40rY CCmA70px+h1G2YDVsSbmg2xZFBH2ExgzJ/Wztu6zgwKvANPfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcTGe1wNWZreqcfLS9L5bbUJ291MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGU4YWJkMjUtZGZjZS0z ZTBlLWI2YTQtZjI2YWZiMDA1MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg5Y71q5zdoE8iExLnt6YI6Wk2TKtyFX/9aomJu8WDvILGxVtuhjkAV XyGzP+pW1Lfxmj9P3W61cVLVvyCH2imteA+G/+N6P1QACr9FsMMsMjsRO43cTWLO RPxzL0YbSXLkH80Dz0eKKUn7U8r1qO2J+KLsacq5HsUYzc5U3IbS0wL4m+6ijSmc G2nv1+H6uIAA5Whc5NSga8O5YqQwf2W9rQorgo2ksNQj5EoSUXgGHPlUZ5MVeTXY DJbbRziSHl35c0JmFwEaKirfrRlDeeq5dF+Z0dljMYpOt4+P7pd3i1b2E8i4vpCd AVzTs00WjOaAheyufhVnGyn9tbmZhZg= -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:54 2025 by rpki-client