This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f24916d-5422-3854-b3f0-6d5e9fdbe48d.roa File: 4f24916d-5422-3854-b3f0-6d5e9fdbe48d.roa (raw, json) Hash identifier: T+zwFOUhUdaEXpaVfmJadPSJhXHwVCvpmPDs/jCjiVw= Subject key identifier: A3:7A:22:3F:A0:DB:9B:5E:C2:9E:2F:E3:5F:4D:0B:7C:A3:B0:47:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBF0F014B944E48E40B900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f24916d-5422-3854-b3f0-6d5e9fdbe48d.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.201.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:f0:f0:14:b9:44:e4:8e:40:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2c08df60-c760-4f9c-a583-601693a9694e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:ab:33:34:bf:89:0a:b5:23:23:62:25:fc: cd:48:ac:b1:3a:af:2f:d7:b2:65:ed:ff:c6:cc:a1: 97:84:04:2a:94:b1:db:46:d5:19:60:bb:40:4b:f3: 4d:20:28:4f:f5:d9:6a:25:ff:22:9d:dc:76:c0:a8: 85:4c:7e:47:59:b4:93:c8:f3:fb:e0:65:ea:b2:97: 47:6a:80:33:f0:4b:6f:01:fb:88:08:1e:fd:ca:98: 9e:1c:a3:e9:fd:91:bd:55:df:a6:8f:55:63:7b:f7: 3b:31:c9:04:4e:28:a1:25:5a:24:6d:d4:07:21:cf: 71:35:2b:2f:81:ef:2e:ab:6c:42:78:d9:93:1f:e8: 96:3d:6b:87:13:03:dc:08:47:2a:5a:61:fc:5c:8d: c1:0e:ad:54:39:f6:5b:c9:66:75:75:12:d7:6e:8b: 82:a0:d6:3b:52:32:d1:7c:aa:30:48:84:b3:f2:db: 46:03:e0:dd:0c:52:ab:c4:cc:06:2c:d8:a6:c9:36: 21:fe:e9:22:55:07:3f:7c:d1:a4:bb:91:93:92:91: 95:5c:5f:61:6d:e5:5d:30:7d:4d:e4:2b:6e:99:df: 83:b2:ba:62:2d:35:ef:44:ac:a0:94:ee:84:34:78: 29:39:62:3a:47:db:78:93:1f:26:89:d2:51:42:d0: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:22:3F:A0:DB:9B:5E:C2:9E:2F:E3:5F:4D:0B:7C:A3:B0:47:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f24916d-5422-3854-b3f0-6d5e9fdbe48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6c:a8:49:34:aa:bd:24:ba:5d:d5:09:87:f2:8e:d8:0d:db: 3b:c8:05:08:10:a6:1f:8d:03:a9:05:c2:9f:0d:64:93:dc:1e: 8b:fd:b0:e2:e6:13:db:00:1b:b3:25:2c:52:81:1c:84:92:bd: 5a:f6:ec:83:d2:04:7d:91:d5:f6:11:ab:a7:78:35:b0:10:3b: b3:55:1a:f6:94:f8:29:94:3e:37:80:93:8a:ec:c6:75:27:d7: c4:78:1f:13:04:81:c1:e8:57:c3:a1:37:a8:4e:7a:40:c2:01: 3d:c7:06:0b:c5:45:a0:ef:65:08:e9:18:9a:c9:1e:2f:9a:fb: 7d:6c:40:91:0a:ee:68:ae:c5:bf:c4:e2:f2:0f:fb:90:9e:e8: 29:b3:36:b3:6c:88:99:0e:2c:53:0a:f6:50:e4:ff:37:41:bf: b8:5c:7b:ae:de:11:02:7c:db:27:ff:ce:5a:09:ec:15:46:47: eb:0e:49:97:85:3e:8f:9c:6a:38:86:06:a7:fd:c0:da:40:d7: 5b:d3:71:2c:b0:2b:05:58:e9:1f:05:7b:44:c6:96:3c:5b:f9: 5d:09:3b:0e:a4:e8:23:5e:22:51:d9:71:73:c9:5b:33:c1:82: cb:0d:8d:1a:8f:88:7a:a2:bf:bf:67:ef:e9:89:c0:bb:8b:19: 10:df:f0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2/DwFLlE5I5AuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmMwOGRmNjAtYzc2MC00ZjljLWE1ODMtNjAxNjkzYTk2OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/OrMzS/iQq1IyNiJfzNSKyxOq8v17Jl7f/G zKGXhAQqlLHbRtUZYLtAS/NNIChP9dlqJf8indx2wKiFTH5HWbSTyPP74GXqspdH aoAz8EtvAfuICB79ypieHKPp/ZG9Vd+mj1Vje/c7MckETiihJVokbdQHIc9xNSsv ge8uq2xCeNmTH+iWPWuHEwPcCEcqWmH8XI3BDq1UOfZbyWZ1dRLXbouCoNY7UjLR fKowSISz8ttGA+DdDFKrxMwGLNimyTYh/ukiVQc/fNGku5GTkpGVXF9hbeVdMH1N 5Ctumd+DsrpiLTXvRKyglO6ENHgpOWI6R9t4kx8midJRQtD7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN6Ij+g25tewp4v419NC3yjsEfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGYyNDkxNmQtNTQyMi0z ODU0LWIzZjAtNmQ1ZTlmZGJlNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5sqEk0qr0kul3VCYfyjtgN2zvIBQgQph+NA6kFwp8NZJPcHov9sOLm E9sAG7MlLFKBHISSvVr27IPSBH2R1fYRq6d4NbAQO7NVGvaU+CmUPjeAk4rsxnUn 18R4HxMEgcHoV8OhN6hOekDCAT3HBgvFRaDvZQjpGJrJHi+a+31sQJEK7miuxb/E 4vIP+5Ce6CmzNrNsiJkOLFMK9lDk/zdBv7hce67eEQJ82yf/zloJ7BVGR+sOSZeF Po+cajiGBqf9wNpA11vTcSywKwVY6R8Fe0TGljxb+V0JOw6k6CNeIlHZcXPJWzPB gssNjRqPiHqiv79n7+mJwLuLGRDf8PA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:29:02 2025 by rpki-client