This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/840f0009-39fa-3325-8dba-bfaf249f6d04.roa File: 840f0009-39fa-3325-8dba-bfaf249f6d04.roa (raw, json) Hash identifier: a6uN0l373eq8FTEuvhhXcU/0q06OVQtT8e+Gm6Fcq74= Subject key identifier: 85:03:A8:28:D4:C2:D1:49:37:1A:9E:CF:D9:90:49:99:B7:42:62:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140936C74128D27BD041640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/840f0009-39fa-3325-8dba-bfaf249f6d04.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 72.193.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:93:6c:74:12:8d:27:bd:04:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=5dffc317-277e-46cb-9cdb-043bad9275ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:b3:26:8d:7d:e3:ee:48:cb:5d:d4:73:43: 5b:e7:a7:90:f5:ca:07:0f:fd:48:b9:de:bc:f1:80: 1d:71:93:56:3c:db:6c:ee:de:b7:17:1a:0f:49:c9: a5:62:77:71:ae:61:44:2d:c4:d5:c1:a9:61:20:3b: 3c:1b:e9:a5:ae:46:c5:ad:7d:48:75:4a:31:75:f2: 57:b6:7d:da:1d:1c:8d:d0:78:9f:4e:e5:6b:cb:e8: 50:7d:32:29:76:53:85:5b:39:03:62:15:a4:0f:6f: ec:b0:4e:13:f4:c3:51:7e:50:86:f4:74:0d:2d:22: 50:2b:b9:4c:c8:1c:b5:be:b7:8a:ec:98:76:61:01: 20:d1:e6:8c:c9:b7:a3:38:dc:9d:ba:59:df:71:fc: e7:0b:00:ef:97:0e:3b:ef:b9:d7:bf:7e:d4:62:17: 00:0f:11:2c:79:c7:37:02:93:32:22:2e:da:1a:e2: f9:b0:56:da:52:1c:26:3c:76:ee:8e:7e:d5:37:74: 21:c5:72:d3:2d:7f:a7:eb:f7:21:ee:82:69:93:0c: 0c:76:02:61:b4:02:36:db:fc:43:70:8c:49:21:7d: 66:e3:7f:98:eb:39:b7:40:3a:44:ab:96:dd:07:97: e7:95:21:51:9e:de:15:4b:c2:09:fc:3a:6d:97:1c: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:03:A8:28:D4:C2:D1:49:37:1A:9E:CF:D9:90:49:99:B7:42:62:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/840f0009-39fa-3325-8dba-bfaf249f6d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:cd:4a:8d:29:04:fc:e9:c0:8c:58:a6:b5:f8:81:15:9c:8b: 3b:50:05:f8:90:27:62:cf:56:90:53:df:c0:71:aa:c0:76:33: 44:65:e9:3f:52:ab:e4:d7:9c:a4:03:f0:77:b6:27:f4:e7:7f: d4:17:0d:94:57:e3:f8:03:1d:1e:27:ed:80:75:30:7e:e1:cd: 5e:f6:5a:75:c7:88:14:76:cc:0e:5c:88:90:f2:ac:42:07:94: 2a:bf:dc:56:47:63:fd:a0:ca:1d:ce:65:2b:ea:bc:d4:30:2f: 0c:c0:2f:cd:47:dc:0f:45:37:3e:f8:1f:41:98:d6:19:56:2f: 60:ef:99:12:25:c5:a0:1e:08:7d:41:ea:f6:78:a3:e7:7d:6d: 6a:b5:b5:44:35:47:f6:fd:c3:82:59:37:c6:09:54:f3:4a:06: b7:c4:4b:9f:cb:f2:bf:ea:46:ef:be:62:c2:f8:ba:be:d1:3a: 19:41:db:41:4e:c4:21:15:67:df:e6:a3:61:6c:47:c0:68:4b: 2e:7a:77:fd:7f:1e:e6:6b:28:f0:8d:ba:29:d5:9c:b9:64:92: 32:c6:4f:be:65:06:55:3e:82:90:89:f3:bc:2f:09:62:18:51: dd:27:b2:a5:5f:52:9e:d2:c9:3e:0d:2c:53:a7:6e:36:d2:9f: 5a:c2:14:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQJNsdBKNJ70EFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk NWRmZmMzMTctMjc3ZS00NmNiLTljZGItMDQzYmFkOTI3NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlqzJo194+5Iy13Uc0Nb56eQ9coHD/1Iud68 8YAdcZNWPNts7t63FxoPScmlYndxrmFELcTVwalhIDs8G+mlrkbFrX1IdUoxdfJX tn3aHRyN0HifTuVry+hQfTIpdlOFWzkDYhWkD2/ssE4T9MNRflCG9HQNLSJQK7lM yBy1vreK7Jh2YQEg0eaMybejONydulnfcfznCwDvlw4777nXv37UYhcADxEsecc3 ApMyIi7aGuL5sFbaUhwmPHbujn7VN3QhxXLTLX+n6/ch7oJpkwwMdgJhtAI22/xD cIxJIX1m43+Y6zm3QDpEq5bdB5fnlSFRnt4VS8IJ/DptlxzoWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUDqCjUwtFJNxqez9mQSZm3QmKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQwZjAwMDktMzlmYS0z MzI1LThkYmEtYmZhZjI0OWY2ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnNSo0pBPzpwIxYprX4gRWciztQBfiQJ2LPVpBT38BxqsB2M0Rl6T9S q+TXnKQD8He2J/Tnf9QXDZRX4/gDHR4n7YB1MH7hzV72WnXHiBR2zA5ciJDyrEIH lCq/3FZHY/2gyh3OZSvqvNQwLwzAL81H3A9FNz74H0GY1hlWL2DvmRIlxaAeCH1B 6vZ4o+d9bWq1tUQ1R/b9w4JZN8YJVPNKBrfES5/L8r/qRu++YsL4ur7ROhlB20FO xCEVZ9/mo2FsR8BoSy56d/1/HuZrKPCNuinVnLlkkjLGT75lBlU+gpCJ87wvCWIY Ud0nsqVfUp7SyT4NLFOnbjbSn1rCFHs= -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:46 2025 by rpki-client