This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa File: 82d420ba-9542-30ae-83e4-929e93b4fbde.roa (raw, json) Hash identifier: rYxEQCjDlMI3fGVz9OAP3xsxCbvu9wpp+5trLd+6cGA= Subject key identifier: 99:88:49:77:D4:F4:66:13:96:59:FD:FF:EF:AB:FA:85:AD:14:42:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5667062C9B3DD8B9FCEC5480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:06:2c:9b:3d:d8:b9:fc:ec:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=bcdc27d0-122d-43f3-bb7d-03af4e9722c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:2d:9b:65:d5:de:02:b2:4b:d9:61:ac:7c: 2b:0a:9d:df:0b:0e:e8:5b:3b:20:59:51:a4:78:ed: 82:91:5e:25:e4:26:e3:f4:c2:82:14:be:3e:95:ca: 82:e0:8d:d3:b4:fd:ff:97:37:a8:f2:79:e9:75:af: e9:9e:a1:47:89:8d:60:cc:63:f0:93:e0:32:67:24: 1d:7a:e8:71:5f:fd:ee:66:b8:d2:62:dc:a8:03:99: c7:62:44:74:c2:80:e2:7b:63:a9:83:b6:35:9f:b8: 8e:14:70:f8:11:c4:b0:11:4b:87:7a:ab:53:f9:5e: 3b:74:3e:67:59:40:14:7f:3d:d7:33:b1:41:6c:2b: 8f:0e:ca:0f:27:30:c4:27:62:9f:64:9d:7d:c7:05: b1:fa:6a:dc:23:48:3e:8f:70:ce:84:05:b9:9d:ac: 24:df:a7:79:72:78:3a:03:2d:32:be:cb:04:83:01: a6:41:20:83:dd:bb:74:04:2d:e0:6c:22:8b:cf:5c: 15:79:bf:af:6a:7c:9b:05:1f:8f:c4:ef:55:5b:5c: 1f:29:ef:22:72:fa:a3:8a:e6:34:52:06:85:55:bc: e9:ec:4b:3e:5d:9e:7a:a8:97:35:18:e9:ae:3b:53: af:d1:21:4f:ed:d9:67:1a:06:55:e1:c6:0a:1a:bf: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:88:49:77:D4:F4:66:13:96:59:FD:FF:EF:AB:FA:85:AD:14:42:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:48:c3:ed:37:7f:36:a5:d9:c2:87:eb:07:33:80:94:1f:ca: 23:94:44:a4:a9:06:58:01:fb:8c:e4:8e:85:fc:32:56:8b:5f: cb:2f:8c:71:dd:a8:e3:92:2a:99:94:1a:22:ea:30:5c:77:47: b8:f7:8b:c4:90:2f:d2:20:1a:3b:f9:a4:c0:79:27:21:11:2e: 1c:d9:3e:a5:b4:c9:ef:4f:c8:81:e9:92:34:a2:10:62:a8:a9: 24:f9:8e:b5:11:7d:41:e9:ec:e8:03:b8:8e:7e:3b:1f:22:a2: 2e:d0:fb:41:c3:ac:f5:60:08:3e:10:db:64:ff:1c:51:f8:c8: eb:84:ab:8f:9b:97:c2:5b:0f:b8:b5:1c:89:bf:3b:2b:83:61: 25:77:d2:18:d1:8e:d5:6f:c2:58:51:d8:bc:10:c8:01:ea:4f: 49:9a:50:48:13:14:c0:ab:8c:4f:72:0b:c4:db:d6:31:c3:a3: 16:bf:62:90:84:f0:a9:77:b2:b0:2e:72:fa:08:d2:b8:30:7c: e1:cc:93:b0:ef:f6:c9:b0:30:80:1f:05:50:19:12:d8:84:45: 16:1e:ed:29:be:08:67:a9:48:e9:e8:8b:de:b8:ba:51:39:32: 81:ed:a5:28:74:90:c5:7f:f3:3b:04:de:c9:a5:82:a1:50:db: 45:03:d5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZwYsmz3YufzsVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YmNkYzI3ZDAtMTIyZC00M2YzLWJiN2QtMDNhZjRlOTcyMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Mtm2XV3gKyS9lhrHwrCp3fCw7oWzsgWVGk eO2CkV4l5Cbj9MKCFL4+lcqC4I3TtP3/lzeo8nnpda/pnqFHiY1gzGPwk+AyZyQd euhxX/3uZrjSYtyoA5nHYkR0woDie2Opg7Y1n7iOFHD4EcSwEUuHeqtT+V47dD5n WUAUfz3XM7FBbCuPDsoPJzDEJ2KfZJ19xwWx+mrcI0g+j3DOhAW5nawk36d5cng6 Ay0yvssEgwGmQSCD3bt0BC3gbCKLz1wVeb+vanybBR+PxO9VW1wfKe8icvqjiuY0 UgaFVbzp7Es+XZ56qJc1GOmuO1Ov0SFP7dlnGgZV4cYKGr+bYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmISXfU9GYTlln9/++r+oWtFEJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODJkNDIwYmEtOTU0Mi0z MGFlLTgzZTQtOTI5ZTkzYjRmYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlIw+03fzal2cKH6wczgJQfyiOURKSpBlgB+4zkjoX8MlaLX8svjHHd qOOSKpmUGiLqMFx3R7j3i8SQL9IgGjv5pMB5JyERLhzZPqW0ye9PyIHpkjSiEGKo qST5jrURfUHp7OgDuI5+Ox8ioi7Q+0HDrPVgCD4Q22T/HFH4yOuEq4+bl8JbD7i1 HIm/OyuDYSV30hjRjtVvwlhR2LwQyAHqT0maUEgTFMCrjE9yC8Tb1jHDoxa/YpCE 8Kl3srAucvoI0rgwfOHMk7Dv9smwMIAfBVAZEtiERRYe7Sm+CGepSOnoi964ulE5 MoHtpSh0kMV/8zsE3smlgqFQ20UD1XE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:10:20 2026 by rpki-client