This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86ec59ac-fc59-3551-9028-49ddb4e7a51a.roa File: 86ec59ac-fc59-3551-9028-49ddb4e7a51a.roa (raw, json) Hash identifier: OOYbbH3rS1SQPuujxhLC3SfgTSeCwVeV/s9MLOdp1C4= Subject key identifier: A0:8F:23:64:CE:46:24:97:0A:90:C1:DB:DB:67:9D:0B:FD:8A:3E:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140C0659B02156311873780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86ec59ac-fc59-3551-9028-49ddb4e7a51a.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 72.193.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:c0:65:9b:02:15:63:11:87:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=0ff7d411-3237-4947-bdd7-1208c5e3614d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:e8:75:82:e8:99:6e:45:32:4d:ad:1b:12: 19:5b:2d:8a:e0:4b:fb:a7:9f:e8:22:ca:e1:3b:82: 79:3e:60:ef:99:82:f8:48:ae:e7:ad:74:4f:65:9b: ef:96:c5:d9:f8:f9:b4:ca:d6:e1:01:9b:05:ee:08: 4c:69:d1:a0:60:44:8a:bf:40:77:20:e6:d1:64:1c: e3:df:54:94:dc:86:a7:8b:c8:91:ec:8d:12:9b:ae: 57:8b:65:80:ff:9a:14:2f:b0:9e:90:71:96:30:14: 8b:d0:15:1b:45:6e:a8:21:9a:75:37:d4:bc:bd:4d: f3:dc:ce:d5:89:2a:a2:30:5b:b8:ee:cf:b0:75:96: 51:ac:1f:63:ec:75:97:cd:85:d1:ce:3e:a4:48:2d: c4:02:6b:37:29:f1:6a:57:3a:85:99:5e:45:13:0f: b9:25:d9:1f:2a:5a:50:03:12:d9:86:b4:5d:c2:c9: 9e:3b:97:dd:b5:80:64:a3:ea:a4:2d:e8:1c:b3:90: 87:42:68:a5:66:f0:85:28:e0:f2:ad:8c:0b:4c:a1: 4c:1d:a3:5d:b9:47:8e:37:65:37:f8:5f:5c:f6:19: 28:4d:4d:7e:cf:d3:74:35:2e:d0:8f:53:47:6b:a3: fc:4a:4b:cc:fe:d5:ae:80:d3:eb:69:e2:ea:9a:93: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:23:64:CE:46:24:97:0A:90:C1:DB:DB:67:9D:0B:FD:8A:3E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86ec59ac-fc59-3551-9028-49ddb4e7a51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:84:e5:4f:82:95:9a:e0:e1:4f:89:5e:99:83:93:cb:19:79: 16:b1:78:2d:01:77:19:42:db:88:4d:eb:fe:8d:8e:97:72:20: 6a:23:cd:98:87:0d:2a:b1:84:19:4d:07:3b:64:e4:82:6f:e3: 41:c7:90:f5:e9:af:25:05:65:53:36:e7:40:bf:ed:cf:94:70: 92:9b:72:e2:bd:00:a2:1a:43:22:b0:79:22:3e:e7:17:55:8c: 60:ed:18:da:b4:e9:44:20:73:0d:9d:cb:96:fe:bc:0f:dd:1f: d0:a5:94:52:4d:20:e4:62:5e:4c:b2:5c:88:36:e0:26:af:43: a7:95:42:50:4f:79:71:b8:b0:18:50:a4:70:2d:97:1c:06:b2: e0:45:4e:f0:6b:d3:80:d3:ee:4e:d9:6f:92:07:1d:08:70:03: d7:7e:08:c7:f7:ed:50:5e:1d:63:0d:ad:d9:dd:8e:31:05:36: 79:08:bf:0c:ba:7d:78:82:e1:cb:25:33:07:c6:49:82:68:b2: d9:88:dd:08:44:84:0c:57:15:e3:fc:57:01:47:f0:8d:be:e3: a6:16:98:e8:68:e1:b4:80:4c:33:d8:5a:f2:44:c7:5b:94:15: bd:39:ac:38:6f:1e:fd:25:73:96:a2:02:a3:68:36:27:aa:bb: 8e:5e:62:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQMBlmwIVYxGHN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk MGZmN2Q0MTEtMzIzNy00OTQ3LWJkZDctMTIwOGM1ZTM2MTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzvodYLomW5FMk2tGxIZWy2K4Ev7p5/oIsrh O4J5PmDvmYL4SK7nrXRPZZvvlsXZ+Pm0ytbhAZsF7ghMadGgYESKv0B3IObRZBzj 31SU3Iani8iR7I0Sm65Xi2WA/5oUL7CekHGWMBSL0BUbRW6oIZp1N9S8vU3z3M7V iSqiMFu47s+wdZZRrB9j7HWXzYXRzj6kSC3EAms3KfFqVzqFmV5FEw+5JdkfKlpQ AxLZhrRdwsmeO5fdtYBko+qkLegcs5CHQmilZvCFKODyrYwLTKFMHaNduUeON2U3 +F9c9hkoTU1+z9N0NS7Qj1NHa6P8SkvM/tWugNPraeLqmpNvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCPI2TORiSXCpDB29tnnQv9ij4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZlYzU5YWMtZmM1OS0z NTUxLTkwMjgtNDlkZGI0ZTdhNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSE5U+ClZrg4U+JXpmDk8sZeRaxeC0BdxlC24hN6/6NjpdyIGojzZiH DSqxhBlNBztk5IJv40HHkPXpryUFZVM250C/7c+UcJKbcuK9AKIaQyKweSI+5xdV jGDtGNq06UQgcw2dy5b+vA/dH9CllFJNIORiXkyyXIg24CavQ6eVQlBPeXG4sBhQ pHAtlxwGsuBFTvBr04DT7k7Zb5IHHQhwA9d+CMf37VBeHWMNrdndjjEFNnkIvwy6 fXiC4cslMwfGSYJostmI3QhEhAxXFeP8VwFH8I2+46YWmOho4bSATDPYWvJEx1uU Fb05rDhvHv0lc5aiAqNoNiequ45eYuk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:50 2025 by rpki-client