This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6198006f-dae8-30e5-bf98-1ffcdf70a624.roa File: 6198006f-dae8-30e5-bf98-1ffcdf70a624.roa (raw, json) Hash identifier: NEHXp/e6HryZqcvFjai7LvPvHzQTqgJJ/ez8xYrwi68= Subject key identifier: 57:B7:A1:7A:17:12:49:CF:AA:1A:08:36:E7:FD:1E:8B:78:54:34:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666CDDB6C36A913880BFA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6198006f-dae8-30e5-bf98-1ffcdf70a624.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:cd:db:6c:36:a9:13:88:0b:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=6a7eba57-d1f1-4a76-a550-89aaaa532f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:02:f6:fc:51:87:a2:8c:54:e1:64:f7:4c: 55:04:3b:45:9a:dc:9c:3f:8e:c5:f9:e3:9b:93:8e: 10:85:0a:30:86:f1:f0:6f:3e:8f:75:4f:a7:49:a8: 75:0a:40:67:53:09:bf:21:81:43:6e:0a:a6:2d:35: ca:a5:be:60:0b:a0:69:9c:f4:ee:ce:9b:b9:f0:e5: 6b:a6:5d:36:74:11:dc:b7:17:3c:8d:a1:44:a9:ab: 77:53:63:64:d3:81:ab:80:f9:4a:d9:30:4a:1e:16: cd:23:62:b0:52:7e:4c:f3:c6:e9:1c:c1:ac:b4:34: 7f:2e:e9:1c:98:76:01:3b:03:73:ff:73:a8:c2:c2: d5:5b:de:27:1b:db:aa:6a:65:d2:bc:f1:18:1e:d1: 53:0e:a9:21:70:5d:ca:59:6b:33:33:33:e3:0b:ff: d6:2b:2e:aa:ae:1f:e7:b0:be:46:35:2a:a7:0d:74: 09:a4:b2:88:f0:96:5c:94:04:05:3a:7f:01:d7:e7: 21:e6:be:3f:49:52:37:7f:d8:d9:4b:4d:93:5d:94: 7d:27:46:30:42:b6:8e:06:29:c5:2e:1d:e6:17:12: 45:0b:60:9d:22:97:7b:25:a5:06:9b:a3:c6:6d:a7: 27:bb:6b:11:80:8e:cc:ea:e1:1c:49:33:14:02:d0: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B7:A1:7A:17:12:49:CF:AA:1A:08:36:E7:FD:1E:8B:78:54:34:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6198006f-dae8-30e5-bf98-1ffcdf70a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:28:b5:52:4b:8d:45:d6:0a:70:ad:69:84:c5:2c:3e:85:95: e1:8b:51:f4:14:a3:8e:55:db:0c:17:eb:f7:6b:d2:65:06:87: 87:a5:8e:38:c8:54:42:1d:16:e5:6a:74:73:18:b4:45:26:3b: 51:97:a1:21:cc:de:d1:35:60:db:a2:8b:15:24:a8:23:c7:6e: 3b:00:27:b4:7f:0f:99:64:36:6b:e6:d1:55:30:b4:a7:1c:3e: 8d:1d:d5:dc:9b:d8:aa:1b:f5:fe:c3:b2:1b:6b:ec:53:84:58: 19:3d:94:24:f9:95:d1:90:87:e6:c8:16:a6:14:e5:92:99:91: 20:39:02:8f:fe:a9:87:85:f9:9d:42:a8:d1:eb:30:c8:80:1c: 82:79:0a:52:b6:85:a6:fd:ab:b1:1d:63:8c:e2:78:82:0f:97: 64:ae:d3:99:e4:2b:c7:48:d2:45:cd:30:32:a0:12:35:96:3b: df:f1:da:a5:cf:74:f1:f3:43:09:6d:7f:ec:08:d2:e5:57:44: a3:16:a7:a0:d1:db:b4:1b:11:d1:0f:0f:39:92:4d:19:fb:ba: e8:5b:a4:98:b5:9e:69:48:96:3f:6c:c5:50:9b:45:e8:24:67: d3:41:2b:3f:75:4e:cf:8c:56:60:d6:65:c6:5e:96:b1:9e:1f: 4e:c7:01:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZs3bbDapE4gL+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NmE3ZWJhNTctZDFmMS00YTc2LWE1NTAtODlhYWFhNTMyZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHsC9vxRh6KMVOFk90xVBDtFmtycP47F+eOb k44QhQowhvHwbz6PdU+nSah1CkBnUwm/IYFDbgqmLTXKpb5gC6BpnPTuzpu58OVr pl02dBHctxc8jaFEqat3U2Nk04GrgPlK2TBKHhbNI2KwUn5M88bpHMGstDR/Lukc mHYBOwNz/3OowsLVW94nG9uqamXSvPEYHtFTDqkhcF3KWWszMzPjC//WKy6qrh/n sL5GNSqnDXQJpLKI8JZclAQFOn8B1+ch5r4/SVI3f9jZS02TXZR9J0YwQraOBinF Lh3mFxJFC2CdIpd7JaUGm6PGbacnu2sRgI7M6uEcSTMUAtBKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe3oXoXEknPqhoINuf9Hot4VDSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjE5ODAwNmYtZGFlOC0z MGU1LWJmOTgtMWZmY2RmNzBhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgotVJLjUXWCnCtaYTFLD6FleGLUfQUo45V2wwX6/dr0mUGh4eljjjI VEIdFuVqdHMYtEUmO1GXoSHM3tE1YNuiixUkqCPHbjsAJ7R/D5lkNmvm0VUwtKcc Po0d1dyb2Kob9f7Dshtr7FOEWBk9lCT5ldGQh+bIFqYU5ZKZkSA5Ao/+qYeF+Z1C qNHrMMiAHIJ5ClK2hab9q7EdY4zieIIPl2Su05nkK8dI0kXNMDKgEjWWO9/x2qXP dPHzQwltf+wI0uVXRKMWp6DR27QbEdEPDzmSTRn7uuhbpJi1nmlIlj9sxVCbRegk Z9NBKz91Ts+MVmDWZcZelrGeH07HAZo= -----END CERTIFICATE-----Generated at Sun Jan 25 11:08:50 2026 by rpki-client