This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa File: 6f982281-ce69-3f28-9de6-2a19d2df3daa.roa (raw, json) Hash identifier: JTxkbDDx5UC+feICwyfs1xnvkaBYN7TkZd3iZrizVQw= Subject key identifier: 4F:09:6C:CE:FF:5B:7A:52:AA:B9:37:55:FC:5A:15:48:1F:D2:00:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56671DDB70E83A61E4C531D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:1d:db:70:e8:3a:61:e4:c5:31:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=6370c212-afaa-4e14-bdc2-7b9eff879b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:32:44:38:7c:1e:9f:c0:69:f2:c5:a2:81: 3b:cd:fd:cc:ec:83:79:08:5a:12:e4:df:e6:d0:58: 88:89:a4:99:28:3c:a4:fd:2f:1a:37:0a:b0:e9:50: 26:a4:79:ba:16:35:13:79:6a:31:b9:73:76:20:a8: cc:76:5b:23:41:7a:59:ec:4e:4a:f4:78:1b:ad:ad: d8:54:a0:9d:4a:15:76:bc:e8:ca:42:35:9d:96:e9: 66:21:7a:1e:06:eb:df:da:92:99:62:3f:f5:6e:ba: 4e:29:ac:ff:c4:20:3a:84:0d:5c:b3:c1:f8:27:10: e5:2d:be:77:75:4e:78:b9:73:5b:a4:bf:bf:3d:b9: 16:03:55:30:57:7f:e2:a0:18:c5:ab:2d:10:ab:58: 3e:14:6d:3c:90:98:07:57:03:e8:b8:f5:bb:83:ef: b2:92:a1:00:65:18:66:60:67:79:8e:33:90:3e:ee: 57:14:79:7f:c4:4a:63:16:aa:0d:25:b5:c3:eb:5b: c9:9e:88:0c:b9:1d:7d:bc:31:65:25:ab:1f:4c:d8: 1d:c4:6d:8c:2a:90:c6:c3:a2:35:35:56:af:fb:49: 67:dc:42:8a:b4:08:cf:01:2d:cc:35:b9:42:44:17: 89:2a:14:20:33:a2:7b:e1:4f:64:4a:3c:a9:e6:b0: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:09:6C:CE:FF:5B:7A:52:AA:B9:37:55:FC:5A:15:48:1F:D2:00:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f982281-ce69-3f28-9de6-2a19d2df3daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9c:d3:67:af:01:61:af:b8:a2:2c:1c:16:c6:b4:d6:b0:25: 13:19:28:9c:5a:ae:9d:dc:20:8e:5d:95:da:f9:db:80:8e:0b: 57:a3:d7:22:cd:db:6b:f1:e1:80:23:f1:da:64:f4:3e:a9:82: d2:c3:2d:49:65:50:21:34:e8:8f:4a:b1:b4:7b:6b:4e:9d:96: 76:05:4a:e1:fa:9b:03:cd:55:7f:13:a3:3e:15:63:5d:28:b5: 9a:b2:44:28:3e:e3:ae:07:15:9d:61:be:80:c9:65:48:96:57: 5b:4d:07:d2:74:2d:1c:1f:2c:46:a6:56:b8:1e:d3:7e:fa:0f: 80:2c:88:8d:ac:de:42:60:a6:9b:1b:ba:29:a7:05:ab:cb:9e: 08:3d:04:3b:7f:d1:e8:ab:44:9e:39:4c:b5:76:0b:55:07:ff: 67:23:32:c8:7b:f1:df:62:1d:fc:b6:d5:90:3f:83:ce:06:95: 49:bb:1b:90:b7:02:eb:b7:94:29:f5:bb:e0:79:bc:2d:b9:78: cb:ef:4a:be:b5:2e:df:60:20:d8:0c:e0:45:00:5d:ac:d5:09: 5e:96:76:05:33:34:d5:7f:36:f4:ad:b6:b0:47:4e:12:40:70: b9:3d:9a:45:f7:f1:06:57:2e:e7:6d:83:63:c1:75:50:52:b6: 23:5b:84:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZx3bcOg6YeTFMdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NjM3MGMyMTItYWZhYS00ZTE0LWJkYzItN2I5ZWZmODc5YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9MyRDh8Hp/AafLFooE7zf3M7IN5CFoS5N/m 0FiIiaSZKDyk/S8aNwqw6VAmpHm6FjUTeWoxuXN2IKjMdlsjQXpZ7E5K9Hgbra3Y VKCdShV2vOjKQjWdlulmIXoeBuvf2pKZYj/1brpOKaz/xCA6hA1cs8H4JxDlLb53 dU54uXNbpL+/PbkWA1UwV3/ioBjFqy0Qq1g+FG08kJgHVwPouPW7g++ykqEAZRhm YGd5jjOQPu5XFHl/xEpjFqoNJbXD61vJnogMuR19vDFlJasfTNgdxG2MKpDGw6I1 NVav+0ln3EKKtAjPAS3MNblCRBeJKhQgM6J74U9kSjyp5rCVGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8JbM7/W3pSqrk3VfxaFUgf0gA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmY5ODIyODEtY2U2OS0z ZjI4LTlkZTYtMmExOWQyZGYzZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyc02evAWGvuKIsHBbGtNawJRMZKJxarp3cII5dldr524COC1ej1yLN 22vx4YAj8dpk9D6pgtLDLUllUCE06I9KsbR7a06dlnYFSuH6mwPNVX8Toz4VY10o tZqyRCg+464HFZ1hvoDJZUiWV1tNB9J0LRwfLEamVrge0376D4AsiI2s3kJgppsb uimnBavLngg9BDt/0eirRJ45TLV2C1UH/2cjMsh78d9iHfy21ZA/g84GlUm7G5C3 Auu3lCn1u+B5vC25eMvvSr61Lt9gINgM4EUAXazVCV6WdgUzNNV/NvSttrBHThJA cLk9mkX38QZXLudtg2PBdVBStiNbhMc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:31:06 2026 by rpki-client