This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa File: 6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa (raw, json) Hash identifier: jVIbwf1Ze2es+NSXLzU7Q72UDKbDcR18f+5eLyHGhFk= Subject key identifier: 04:7B:DA:10:69:C3:22:FA:10:C6:15:14:38:EA:1C:EC:89:C4:50:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB904527C5B951CBBD6580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.208.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:90:45:27:c5:b9:51:cb:bd:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=1efedc4d-1c56-4595-8acc-3f9885483135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:68:1c:1f:60:07:ec:6f:b3:21:2e:0f:3d: df:c3:39:0d:f1:e5:a5:44:53:8a:5f:9c:a2:98:fb: a6:06:aa:a1:c0:d2:6c:db:d2:b9:ba:f9:b5:2d:28: f2:49:f5:77:d4:d1:5e:0f:c2:7f:41:e6:96:6e:50: 05:e0:92:d4:00:35:db:6b:0a:06:8b:8a:eb:3d:00: 4e:99:91:55:16:82:54:5c:74:d6:b4:f4:9f:c5:9d: cc:83:e0:c7:08:93:3d:e3:c5:11:8b:f0:be:4b:ac: 03:4c:86:f6:4b:77:31:19:cf:2f:c8:4f:2c:84:54: 16:8f:a0:06:91:ed:c0:37:fe:7b:fc:9c:86:5e:1d: 98:aa:98:1f:cb:5c:df:4c:7f:42:b5:20:0c:39:ca: 19:4a:4a:da:1f:a6:92:ff:14:1c:a8:79:2e:e5:76: ba:10:b5:85:ef:d8:a7:bc:81:a3:4a:3c:26:76:ce: 62:bb:2e:fd:bc:09:83:5b:28:87:6d:23:1c:32:90: d3:e1:9b:bf:3c:1e:4e:3e:30:01:eb:ee:e3:a2:45: c0:ea:83:38:3e:cd:b9:73:58:02:c7:69:94:58:bd: ca:63:34:ca:61:0e:2d:83:d3:2f:70:25:01:76:13: 3e:f4:6f:96:8a:e3:4f:f6:13:8b:a2:55:00:f8:8e: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:DA:10:69:C3:22:FA:10:C6:15:14:38:EA:1C:EC:89:C4:50:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b60a73e-75d8-33a0-b09c-19ba5cc2227e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:63:17:31:5a:a2:53:9f:92:e1:5b:b6:4e:75:f3:0e:95:59: 05:5d:91:2c:3a:ef:08:3e:85:c9:1c:2c:a7:8a:40:3b:97:ce: 73:44:18:22:9f:1e:87:1b:8b:0c:68:04:db:2e:d1:88:bb:fb: 3b:43:02:92:71:12:46:93:4c:ba:69:d6:1a:19:f8:25:d3:b1: f6:09:63:07:1c:d2:93:40:cf:27:c1:19:7b:71:e7:9f:c0:4f: 29:e8:8c:cb:f0:2b:8a:8d:a7:a4:df:99:c0:32:59:1b:a9:62: 69:97:74:b6:67:0d:6d:71:7c:89:49:4e:1c:e9:de:51:f5:ee: 07:6c:24:ee:38:29:a5:11:ea:0a:57:dc:a2:b9:da:b4:51:fc: 24:4a:02:de:2a:12:78:02:b7:74:7b:90:90:8a:69:6f:d6:66: ba:0d:a8:f0:d4:52:b8:1b:d8:a5:26:c4:2b:df:d7:7c:0f:95: 25:48:25:7c:91:ea:c6:e2:a9:26:57:45:49:9c:7e:31:e8:86: 13:44:59:0e:86:0d:cd:33:7c:57:94:8d:db:a4:39:ee:a0:b5: b6:6b:ae:4b:bd:23:cd:9d:1f:7f:d5:b3:87:f4:11:36:28:a6: 21:94:8c:32:12:ae:cd:58:61:77:3a:3e:74:79:eb:95:77:05: f5:f0:a6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/25BFJ8W5Ucu9ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MWVmZWRjNGQtMWM1Ni00NTk1LThhY2MtM2Y5ODg1NDgzMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6toHB9gB+xvsyEuDz3fwzkN8eWlRFOKX5yi mPumBqqhwNJs29K5uvm1LSjySfV31NFeD8J/QeaWblAF4JLUADXbawoGi4rrPQBO mZFVFoJUXHTWtPSfxZ3Mg+DHCJM948URi/C+S6wDTIb2S3cxGc8vyE8shFQWj6AG ke3AN/57/JyGXh2Yqpgfy1zfTH9CtSAMOcoZSkraH6aS/xQcqHku5Xa6ELWF79in vIGjSjwmds5iuy79vAmDWyiHbSMcMpDT4Zu/PB5OPjAB6+7jokXA6oM4Ps25c1gC x2mUWL3KYzTKYQ4tg9MvcCUBdhM+9G+WiuNP9hOLolUA+I6LTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR72hBpwyL6EMYVFDjqHOyJxFBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmI2MGE3M2UtNzVkOC0z M2EwLWIwOWMtMTliYTVjYzIyMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdjFzFaolOfkuFbtk518w6VWQVdkSw67wg+hckcLKeKQDuXznNEGCKf HocbiwxoBNsu0Yi7+ztDApJxEkaTTLpp1hoZ+CXTsfYJYwcc0pNAzyfBGXtx55/A TynojMvwK4qNp6TfmcAyWRupYmmXdLZnDW1xfIlJThzp3lH17gdsJO44KaUR6gpX 3KK52rRR/CRKAt4qEngCt3R7kJCKaW/WZroNqPDUUrgb2KUmxCvf13wPlSVIJXyR 6sbiqSZXRUmcfjHohhNEWQ6GDc0zfFeUjdukOe6gtbZrrku9I82dH3/Vs4f0ETYo piGUjDISrs1YYXc6PnR565V3BfXwpv0= -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:32 2025 by rpki-client