This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c86bc64-b144-34a6-9e7a-4f55d6541a0e.roa File: 5c86bc64-b144-34a6-9e7a-4f55d6541a0e.roa (raw, json) Hash identifier: rNHXBR8VbkahNyKACY2GOSNcLbnriE59NQ4TneH6P3U= Subject key identifier: 52:23:D0:96:B9:71:17:DF:3B:3F:64:DD:71:94:92:9E:34:E4:A3:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB7482C1EA2069BC3B1580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c86bc64-b144-34a6-9e7a-4f55d6541a0e.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.208.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:74:82:c1:ea:20:69:bc:3b:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=b87b5211-4935-4e85-b21c-eea2ea505412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:55:5e:08:6c:e7:6b:21:f9:07:6f:5a:ec: 2f:0b:f4:66:42:8a:53:87:28:76:d5:f9:f2:d7:1d: c6:82:80:04:63:c1:fe:db:a3:0b:4f:46:b2:71:c5: a1:f3:78:26:6f:0e:5f:07:27:aa:73:8a:1b:3e:4e: 8f:e1:27:27:67:f1:12:f2:28:2d:7b:46:70:88:73: 04:d0:3d:32:f3:53:5c:89:41:d5:45:ef:0b:b5:46: b6:3b:7b:49:26:64:29:43:83:41:77:a9:4e:51:04: 09:d4:7a:37:17:0a:17:8d:e1:0f:5b:17:f6:f9:f3: cb:f3:d7:88:65:de:61:9a:91:e8:ac:c3:d8:96:ba: a8:50:b3:35:f1:7f:74:7f:ab:eb:f0:42:21:dd:8a: 0b:38:a0:4e:e7:0f:05:90:f3:ed:4a:c9:39:98:fe: 55:3f:4c:c3:3a:0a:fa:cf:c7:7c:e7:11:31:f9:72: 94:7e:e4:82:1d:e1:91:b2:86:39:f3:cd:60:8c:17: 33:d6:4a:71:e5:89:9e:6d:ed:84:94:a2:fa:cf:a2: 0f:97:76:32:ed:2b:8b:a0:bf:d2:b0:d0:9d:34:63: 2e:df:53:5c:72:6b:b5:95:44:a4:ae:50:47:b4:0d: dd:7b:4f:4b:27:88:fa:ed:9d:8d:c7:aa:63:1d:4b: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:23:D0:96:B9:71:17:DF:3B:3F:64:DD:71:94:92:9E:34:E4:A3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c86bc64-b144-34a6-9e7a-4f55d6541a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:43:94:1e:bc:15:5c:10:76:4a:97:de:7b:0f:f5:42:ad:f3: 48:9e:ef:8f:a9:e1:04:12:cc:9a:9e:bc:27:35:ae:fd:25:c0: 27:1b:61:4a:82:70:ae:1c:53:ca:f8:d5:7e:df:ed:31:30:4b: 79:d5:b7:52:e2:00:e7:1a:76:69:e1:35:fc:72:2f:1a:eb:45: 67:b5:00:f2:53:00:bb:39:0e:1c:8d:af:03:bb:f0:4c:4d:32: c1:1c:6d:24:b7:18:5f:f9:61:86:00:74:4b:c6:14:6d:63:c3: d0:45:9b:50:1a:67:d2:43:8b:54:ee:b7:57:8d:46:21:8f:8c: d8:77:d8:4e:36:38:64:a4:1c:39:8e:6a:cc:5b:1f:9a:27:fd: a6:e5:a4:c0:05:b0:dc:5d:0c:30:2f:67:56:95:ec:7c:6b:19: 8d:d3:d1:10:a1:2a:5e:bf:38:f5:e4:41:92:34:da:7f:1e:01: d2:0b:65:35:dd:45:8e:5e:6c:c6:2b:a5:63:95:20:7e:be:84: cb:90:65:42:69:8a:b1:78:fd:ff:a8:8b:9a:e9:1c:92:ac:38: 39:7f:f6:35:8d:fc:f9:dd:8f:95:c3:3a:4c:f7:d5:7f:80:c1: 41:09:08:55:80:67:2f:79:69:2b:8f:7c:da:d3:0a:24:3a:82: e5:37:7c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/23SCweogabw7FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk Yjg3YjUyMTEtNDkzNS00ZTg1LWIyMWMtZWVhMmVhNTA1NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmONVXghs52sh+QdvWuwvC/RmQopThyh21fny 1x3GgoAEY8H+26MLT0ayccWh83gmbw5fByeqc4obPk6P4ScnZ/ES8igte0ZwiHME 0D0y81NciUHVRe8LtUa2O3tJJmQpQ4NBd6lOUQQJ1Ho3FwoXjeEPWxf2+fPL89eI Zd5hmpHorMPYlrqoULM18X90f6vr8EIh3YoLOKBO5w8FkPPtSsk5mP5VP0zDOgr6 z8d85xEx+XKUfuSCHeGRsoY5881gjBcz1kpx5Ymebe2ElKL6z6IPl3Yy7SuLoL/S sNCdNGMu31Nccmu1lUSkrlBHtA3de09LJ4j67Z2Nx6pjHUveDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIj0Ja5cRffOz9k3XGUkp405KOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM4NmJjNjQtYjE0NC0z NGE2LTllN2EtNGY1NWQ2NTQxYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBDlB68FVwQdkqX3nsP9UKt80ie74+p4QQSzJqevCc1rv0lwCcbYUqC cK4cU8r41X7f7TEwS3nVt1LiAOcadmnhNfxyLxrrRWe1APJTALs5DhyNrwO78ExN MsEcbSS3GF/5YYYAdEvGFG1jw9BFm1AaZ9JDi1Tut1eNRiGPjNh32E42OGSkHDmO asxbH5on/ablpMAFsNxdDDAvZ1aV7HxrGY3T0RChKl6/OPXkQZI02n8eAdILZTXd RY5ebMYrpWOVIH6+hMuQZUJpirF4/f+oi5rpHJKsODl/9jWN/Pndj5XDOkz31X+A wUEJCFWAZy95aSuPfNrTCiQ6guU3fMI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:25 2025 by rpki-client