This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cda947a-231b-3896-9e8a-7f71dfe39c50.roa File: 7cda947a-231b-3896-9e8a-7f71dfe39c50.roa (raw, json) Hash identifier: O+31I95GQU7QS4JESOdDxQQa8ekmXpy4mL92OZs1a28= Subject key identifier: 9A:C0:44:C6:6F:25:32:44:53:07:94:1B:AE:7F:F5:E8:05:F6:30:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C566716B9A60D109EFECD4940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cda947a-231b-3896-9e8a-7f71dfe39c50.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.213.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:16:b9:a6:0d:10:9e:fe:cd:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=b58ee47d-a04f-4a4d-bfc8-0dba64081e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:13:43:fc:09:2e:e4:f6:db:5d:a5:ca:97: ae:28:f2:91:91:69:bb:a9:71:bc:6a:e9:cc:e5:b1: 10:f1:26:8e:4e:d5:79:12:01:18:d5:b8:88:97:e5: 16:9c:99:c1:93:b8:aa:67:bc:92:b7:66:0c:64:ee: b1:5f:d8:ee:fb:18:22:86:e2:2b:44:9c:16:b6:38: 53:df:b9:bf:0a:fe:e3:19:8e:67:2f:13:e6:4c:a3: 72:44:91:4e:7a:b6:31:77:08:aa:11:ea:e2:97:ce: e6:ff:f5:be:43:ff:01:c0:47:19:8e:b4:9e:1f:9a: 57:94:79:0b:e1:6f:83:18:f5:ae:7c:d6:5f:79:41: d1:68:21:fb:83:ee:62:e8:69:b5:ba:2e:b7:c8:0f: 8f:40:a8:e7:49:58:28:0e:b6:3e:6a:4d:47:c1:6d: 56:5e:26:fd:58:ea:f3:23:86:4b:68:9c:ca:8d:21: 6e:db:03:4d:92:94:86:34:83:4b:ec:6c:36:5e:9b: c8:89:75:17:1d:73:2f:86:02:4d:a3:75:af:77:44: ee:ca:d8:49:43:6b:8c:e1:be:fd:65:3f:51:10:c3: b6:ee:c5:1e:ee:11:3a:51:2c:bc:ec:d0:2c:8e:16: 36:2f:56:02:1f:7d:e7:78:ee:d9:ec:c3:5b:e0:6a: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:44:C6:6F:25:32:44:53:07:94:1B:AE:7F:F5:E8:05:F6:30:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cda947a-231b-3896-9e8a-7f71dfe39c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e1:2e:6e:10:37:2e:2d:fc:9c:d1:9f:d8:2c:fa:1e:0c:c4: f5:12:23:c3:02:8d:5e:8d:f4:4b:22:58:4d:b8:a6:66:75:e4: 55:01:b5:1d:03:2b:db:7e:5e:39:99:3a:63:cc:41:52:3c:1d: 1d:ce:ee:b7:5d:9f:88:68:03:14:a0:b6:a4:6b:b1:5b:af:b6: 54:b7:43:d8:30:95:7a:70:1d:f9:dc:81:a8:26:8b:3a:9c:b2: 00:0a:c7:b0:18:1f:f6:53:50:ff:d0:55:93:7c:2c:52:5b:77: ca:c0:5b:fe:6f:3a:4c:c4:1f:7c:d2:47:b0:1b:08:a7:5d:5f: 6c:5d:a8:5d:ec:d8:61:97:cf:26:2f:6e:41:75:2d:a4:65:96: 05:7f:4d:0d:52:c2:eb:0c:c6:fd:d7:fd:af:52:3e:93:ca:b4: a5:79:2f:d0:78:c3:8c:f4:d0:a6:af:8d:7a:3f:75:bc:fa:18: a8:96:73:68:36:cc:a5:e5:f7:69:bd:eb:31:ed:37:6c:04:63: f7:99:07:1b:26:80:ca:b9:1e:ca:17:1d:6e:ba:74:c5:d5:b8: 36:de:3a:16:e5:36:45:22:ef:97:32:f4:03:86:6a:34:ad:2f: ff:1b:14:84:2b:e5:3f:3a:93:a8:5d:ce:52:37:d8:2b:52:d1: 36:29:3d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZxa5pg0Qnv7NSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YjU4ZWU0N2QtYTA0Zi00YTRkLWJmYzgtMGRiYTY0MDgxZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIcTQ/wJLuT2212lypeuKPKRkWm7qXG8aunM 5bEQ8SaOTtV5EgEY1biIl+UWnJnBk7iqZ7ySt2YMZO6xX9ju+xgihuIrRJwWtjhT 37m/Cv7jGY5nLxPmTKNyRJFOerYxdwiqEeril87m//W+Q/8BwEcZjrSeH5pXlHkL 4W+DGPWufNZfeUHRaCH7g+5i6Gm1ui63yA+PQKjnSVgoDrY+ak1HwW1WXib9WOrz I4ZLaJzKjSFu2wNNkpSGNINL7Gw2XpvIiXUXHXMvhgJNo3Wvd0TuythJQ2uM4b79 ZT9REMO27sUe7hE6USy87NAsjhY2L1YCH33neO7Z7MNb4GqIDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrARMZvJTJEUweUG65/9egF9jB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2NkYTk0N2EtMjMxYi0z ODk2LTllOGEtN2Y3MWRmZTM5YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrhLm4QNy4t/JzRn9gs+h4MxPUSI8MCjV6N9EsiWE24pmZ15FUBtR0D K9t+XjmZOmPMQVI8HR3O7rddn4hoAxSgtqRrsVuvtlS3Q9gwlXpwHfncgagmizqc sgAKx7AYH/ZTUP/QVZN8LFJbd8rAW/5vOkzEH3zSR7AbCKddX2xdqF3s2GGXzyYv bkF1LaRllgV/TQ1SwusMxv3X/a9SPpPKtKV5L9B4w4z00KavjXo/dbz6GKiWc2g2 zKXl92m96zHtN2wEY/eZBxsmgMq5HsoXHW66dMXVuDbeOhblNkUi75cy9AOGajSt L/8bFIQr5T86k6hdzlI32CtS0TYpPfM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:49:53 2026 by rpki-client