This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5cb7a98b-3f17-3cfc-b835-79a997d2c088.roa File: 5cb7a98b-3f17-3cfc-b835-79a997d2c088.roa (raw, json) Hash identifier: Falx6o1xhyBMRMw8sJJDbVOffLs/BVdMJlpEpX9JU40= Subject key identifier: 83:88:E8:1E:9D:37:42:32:57:FF:BB:69:4C:15:0B:C2:C8:72:49:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB5A4B019EDFA29B246900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5cb7a98b-3f17-3cfc-b835-79a997d2c088.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.208.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:5a:4b:01:9e:df:a2:9b:24:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=1d57c388-4cc7-460f-bd89-b578d673bbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:65:b4:ae:39:c3:f8:0d:56:47:00:cd:3a: aa:1a:f0:e9:71:df:83:da:67:c4:fb:99:d2:6a:a8: ec:0f:98:c9:b1:ca:63:96:68:90:10:61:ac:13:d3: 4d:da:b0:b8:c7:fc:11:75:65:0d:f8:a1:d7:87:28: e3:57:2e:99:1a:40:33:f6:85:f9:c0:d7:ae:15:f9: 36:68:a4:5b:27:1b:3b:8f:a4:7f:44:a1:c1:b6:40: ac:7e:61:dc:48:54:6e:1a:63:7e:29:c4:5d:48:14: 48:cc:9c:f3:12:de:33:5a:c3:fb:48:14:a9:17:c5: 92:2e:24:e0:4a:fa:fa:86:ec:30:d8:40:8a:a1:82: da:47:c8:48:f5:94:9d:f4:e1:3c:a9:c7:e1:9e:bd: d5:ea:08:e7:77:fd:97:9d:9c:4c:bf:fe:85:b7:6c: fe:94:3c:3d:0a:56:5d:73:c3:22:ea:35:64:85:23: 1d:48:83:de:af:64:6d:df:a3:3f:14:24:23:6a:d5: da:f2:c2:f9:56:df:24:21:47:99:b2:c7:95:cf:f0: 89:13:eb:24:4b:08:e3:be:c2:26:3e:55:50:dd:19: 17:1b:fd:47:71:e7:80:2b:6e:21:2f:80:bd:5e:f0: 55:13:64:fd:72:06:02:b3:42:ed:ef:31:99:4e:0b: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:E8:1E:9D:37:42:32:57:FF:BB:69:4C:15:0B:C2:C8:72:49:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5cb7a98b-3f17-3cfc-b835-79a997d2c088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4d:a8:8a:40:32:1a:80:92:f7:e6:bb:de:20:7a:e0:20:3e: e7:85:46:6e:39:66:61:59:a4:9b:a8:69:ee:eb:26:5a:b6:05: 58:b4:5d:62:ed:1d:21:25:d9:aa:8a:f7:56:bd:57:c7:ba:e0: 22:a0:2e:43:74:57:1e:5a:d1:89:a6:d1:93:57:b0:d5:87:04: bb:2a:3e:bc:5d:18:c9:e2:39:82:bc:b6:06:ee:1e:55:ae:51: 8f:36:82:44:ea:11:db:fa:6a:c3:39:fe:2e:fc:b3:11:5d:43: 65:1d:59:73:e4:66:f6:83:87:8f:21:15:43:77:c2:55:bb:2f: aa:6f:98:ce:31:83:70:3e:1b:d3:12:58:11:9c:84:72:d3:b3: e8:9c:e8:b0:c6:93:e6:3a:28:46:8b:54:19:cd:ad:48:d4:47: e8:00:4c:26:5e:8d:73:da:9b:f4:56:68:07:07:f5:ec:1b:cb: 5a:55:24:e7:c7:4e:76:8b:a3:7e:6e:8a:a2:a0:81:34:f0:77: d8:17:17:3d:4f:7f:e1:0c:b8:7f:5d:d3:38:f9:ef:a1:09:49: 11:c1:5a:30:f6:5b:63:f1:f6:c8:3d:ab:02:59:57:4a:d0:31: e8:8e:29:b2:bb:37:73:35:42:37:a2:52:4c:48:59:34:92:f2: c4:d6:0f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/21pLAZ7fopskaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MWQ1N2MzODgtNGNjNy00NjBmLWJkODktYjU3OGQ2NzNiYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+FltK45w/gNVkcAzTqqGvDpcd+D2mfE+5nS aqjsD5jJscpjlmiQEGGsE9NN2rC4x/wRdWUN+KHXhyjjVy6ZGkAz9oX5wNeuFfk2 aKRbJxs7j6R/RKHBtkCsfmHcSFRuGmN+KcRdSBRIzJzzEt4zWsP7SBSpF8WSLiTg Svr6huww2ECKoYLaR8hI9ZSd9OE8qcfhnr3V6gjnd/2XnZxMv/6Ft2z+lDw9ClZd c8Mi6jVkhSMdSIPer2Rt36M/FCQjatXa8sL5Vt8kIUeZsseVz/CJE+skSwjjvsIm PlVQ3RkXG/1HceeAK24hL4C9XvBVE2T9cgYCs0Lt7zGZTgtjhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOI6B6dN0IyV/+7aUwVC8LIcknhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWNiN2E5OGItM2YxNy0z Y2ZjLWI4MzUtNzlhOTk3ZDJjMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtNqIpAMhqAkvfmu94geuAgPueFRm45ZmFZpJuoae7rJlq2BVi0XWLt HSEl2aqK91a9V8e64CKgLkN0Vx5a0Ymm0ZNXsNWHBLsqPrxdGMniOYK8tgbuHlWu UY82gkTqEdv6asM5/i78sxFdQ2UdWXPkZvaDh48hFUN3wlW7L6pvmM4xg3A+G9MS WBGchHLTs+ic6LDGk+Y6KEaLVBnNrUjUR+gATCZejXPam/RWaAcH9ewby1pVJOfH TnaLo35uiqKggTTwd9gXFz1Pf+EMuH9d0zj576EJSRHBWjD2W2Px9sg9qwJZV0rQ MeiOKbK7N3M1QjeiUkxIWTSS8sTWD9A= -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:29 2025 by rpki-client