This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bf8ee85-41a0-3aee-8577-897f222bc447.roa File: 5bf8ee85-41a0-3aee-8577-897f222bc447.roa (raw, json) Hash identifier: Zcpoq/BNQULnFhKrAV3ftWvBmlmrcBpvI6qAdj4Oq9U= Subject key identifier: 30:30:4D:0E:E4:29:B3:4B:69:43:7D:B7:56:87:EB:38:04:B2:ED:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140E17E18E18BFC583AC140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bf8ee85-41a0-3aee-8577-897f222bc447.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 72.207.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:e1:7e:18:e1:8b:fc:58:3a:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=cf840af1-b677-40b3-996b-6eaec1a3998a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ed:03:39:28:b0:d8:14:96:f2:47:e8:fb:2b: 13:24:02:e8:fe:da:1a:6a:38:d1:8a:d1:39:78:d7: ce:d7:34:86:89:8a:cd:81:1e:16:06:0b:5a:42:a7: 46:7c:fe:92:d3:2a:d0:b0:52:d3:c2:fb:a8:d6:bb: 9c:f9:b9:de:31:07:c6:a6:df:75:89:bd:6f:8b:2f: cd:bd:39:e4:5c:c6:7c:69:af:2b:be:06:a3:15:1a: 30:6e:39:7d:41:03:16:d2:c4:5c:e5:4d:1f:0f:a4: 02:e3:2e:ad:4e:43:eb:c3:33:20:70:18:34:d8:79: 4b:f8:34:60:b4:2b:8d:55:f3:6d:1e:f6:3d:a5:7a: 4d:52:73:ea:dc:b7:54:5f:f0:3d:c8:02:00:b7:2c: b2:30:a1:be:fc:27:b6:77:d6:2e:9f:5c:78:82:22: bc:66:9f:5f:48:4a:35:78:90:3e:c4:5c:e9:7a:c2: 81:4a:8b:d4:1e:e1:0a:73:81:6b:98:5d:ec:fe:0b: d4:dc:5d:4e:a1:da:8f:88:12:2e:56:5c:48:b4:6b: 79:27:06:c0:f1:60:de:3a:d7:4d:38:3c:5f:62:cb: 72:16:bf:cf:84:bc:72:74:73:d3:75:ce:f7:53:1b: f7:a8:0a:18:86:df:1a:a2:96:a6:c1:38:79:d6:34: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:4D:0E:E4:29:B3:4B:69:43:7D:B7:56:87:EB:38:04:B2:ED:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bf8ee85-41a0-3aee-8577-897f222bc447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.207.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:50:32:32:0a:c5:37:bf:c5:ab:ad:ab:b3:bb:01:25:01:78: 86:0e:5a:26:00:23:cb:59:cb:8d:00:47:b2:ab:01:aa:e0:0c: 3c:36:22:8c:f6:19:f3:2e:8b:84:5e:4d:17:23:e4:58:d0:7d: 67:b2:51:38:e5:73:8a:eb:08:15:df:4f:40:59:f3:19:33:3e: 4b:1f:63:f5:d7:40:88:ba:3c:db:e7:fd:14:99:c0:e2:23:ed: 38:15:77:16:ae:a9:c4:09:48:ef:92:0b:77:81:28:36:8c:00: 7d:03:1c:63:86:fe:e9:37:a1:c6:1a:34:3d:45:2a:a7:8d:2f: e9:65:cd:11:8d:71:d2:ca:0a:da:5a:7a:89:37:c9:44:12:f4: 0d:ff:be:ee:e3:32:f0:6b:a5:60:80:44:da:e0:0b:fb:4d:d4: 2d:ea:5b:5d:f3:7d:25:fa:c7:b5:7c:d9:40:58:48:7f:42:54: 6d:9e:4b:fe:fe:72:7b:c2:5e:a7:fa:a7:96:38:ee:00:01:11: f5:81:3b:db:f6:49:e2:8a:5d:9c:ad:20:4b:78:f5:34:95:5e: 2b:9c:cb:36:60:2c:22:86:68:2c:82:de:5f:43:d4:da:d7:f4: 03:19:f5:5a:b3:5a:07:f9:a3:61:f0:77:45:4a:50:3a:4b:eb: 3d:e7:db:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQOF+GOGL/Fg6wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk Y2Y4NDBhZjEtYjY3Ny00MGIzLTk5NmItNmVhZWMxYTM5OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O0DOSiw2BSW8kfo+ysTJALo/toaajjRitE5 eNfO1zSGiYrNgR4WBgtaQqdGfP6S0yrQsFLTwvuo1ruc+bneMQfGpt91ib1viy/N vTnkXMZ8aa8rvgajFRowbjl9QQMW0sRc5U0fD6QC4y6tTkPrwzMgcBg02HlL+DRg tCuNVfNtHvY9pXpNUnPq3LdUX/A9yAIAtyyyMKG+/Ce2d9Yun1x4giK8Zp9fSEo1 eJA+xFzpesKBSovUHuEKc4FrmF3s/gvU3F1OodqPiBIuVlxItGt5JwbA8WDeOtdN ODxfYstyFr/PhLxydHPTdc73Uxv3qAoYht8aopamwTh51jRz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAwTQ7kKbNLaUN9t1aH6zgEsu3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWJmOGVlODUtNDFhMC0z YWVlLTg1NzctODk3ZjIyMmJjNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSM+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5QMjIKxTe/xautq7O7ASUBeIYOWiYAI8tZy40AR7KrAargDDw2Ioz2 GfMui4ReTRcj5FjQfWeyUTjlc4rrCBXfT0BZ8xkzPksfY/XXQIi6PNvn/RSZwOIj 7TgVdxauqcQJSO+SC3eBKDaMAH0DHGOG/uk3ocYaND1FKqeNL+llzRGNcdLKCtpa eok3yUQS9A3/vu7jMvBrpWCARNrgC/tN1C3qW13zfSX6x7V82UBYSH9CVG2eS/7+ cnvCXqf6p5Y47gABEfWBO9v2SeKKXZytIEt49TSVXiucyzZgLCKGaCyC3l9D1NrX 9AMZ9VqzWgf5o2Hwd0VKUDpL6z3n248= -----END CERTIFICATE-----Generated at Sat Dec 6 18:29:12 2025 by rpki-client