This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89c084cb-45bb-35e0-8a01-1a55ced00890.roa File: 89c084cb-45bb-35e0-8a01-1a55ced00890.roa (raw, json) Hash identifier: TfzZiGRZC13aNUMPD4YhoquYHLNMyEOG05brw4GC9SI= Subject key identifier: 73:C3:32:28:61:A0:20:7C:A7:3E:1D:12:C6:63:0D:ED:6E:65:00:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB676E2E13C3845DA5D500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89c084cb-45bb-35e0-8a01-1a55ced00890.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.201.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:67:6e:2e:13:c3:84:5d:a5:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=7fd0fa7d-9107-4ce4-b6e9-805115fbb22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6c:2c:8a:c3:65:30:03:67:92:3d:ce:08:3c: ed:66:c3:55:17:e2:0e:f3:12:08:8e:5d:3f:1c:4a: de:a9:86:8d:6e:5f:e6:ec:db:10:fe:75:85:34:16: 00:73:58:c4:d0:2a:23:28:57:65:d7:ce:e0:bb:c1: e7:57:52:39:66:84:fc:02:63:51:6d:e0:a7:0f:b2: ec:29:28:00:3a:80:be:f0:1b:6b:28:1b:b4:d5:21: 3f:3d:53:46:46:66:5f:a6:4f:56:49:36:95:2c:9c: 9f:30:ec:5e:8a:3f:7f:ad:e6:1c:7f:c5:c5:86:e9: 57:2d:f3:7e:19:fb:e8:8d:96:8c:74:74:ab:5c:15: cd:bb:ab:9f:40:0f:c1:1c:af:1f:b0:45:65:d4:6f: 25:a9:82:11:9d:69:06:58:d3:e1:ec:da:55:3c:1b: 72:07:ac:ce:ec:f7:50:16:d2:c2:fd:de:af:6c:97: ca:d2:64:af:9a:58:a3:f2:9b:d5:b8:98:38:3b:44: e1:1b:81:3b:d9:2b:4d:f4:ae:44:db:a8:d5:e5:6e: e7:90:9d:62:a6:8f:0d:b4:aa:e2:58:2e:64:39:07: 5e:be:82:ed:a4:06:84:f6:77:9d:20:8e:7c:98:38: 58:84:44:2d:88:a8:bb:6d:3f:35:22:47:5f:84:d8: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C3:32:28:61:A0:20:7C:A7:3E:1D:12:C6:63:0D:ED:6E:65:00:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89c084cb-45bb-35e0-8a01-1a55ced00890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:58:00:9e:bb:82:65:5b:d6:59:01:fb:49:ec:9c:5c:41:a5: 90:e6:1b:75:45:c6:66:4c:a7:51:c0:21:6d:3e:ed:44:19:7f: 91:78:52:2d:49:44:bc:0d:4e:d8:4d:bc:f4:64:1d:0b:4e:e4: d9:5f:53:81:c4:71:58:ee:79:ca:ed:a1:c0:6b:8f:7c:27:aa: 44:66:f6:d3:e9:86:49:ad:21:18:63:38:3f:06:e6:84:c6:af: b3:53:c4:b7:1f:00:a3:94:3c:6e:c4:91:44:11:02:8c:9c:1a: d6:c2:8b:79:eb:ba:43:89:e3:8c:7d:7a:6c:06:93:1a:f0:0b: 46:dd:81:32:ad:7c:31:70:25:93:fb:24:08:d4:10:07:7d:40: 97:5b:12:f5:00:bf:11:ac:b5:2b:69:f7:27:08:cc:ce:fa:c7: 7e:d3:b5:33:09:5e:7a:5c:7a:c3:55:a4:32:e7:04:e3:95:cc: b1:a5:2e:53:4d:52:e6:cb:66:fe:82:0a:c9:3e:19:db:0a:99: 93:1e:ab:06:91:3b:4a:2d:9c:ed:f5:1f:36:b4:2a:c5:40:63: 11:48:ad:cd:ef:6c:3d:72:25:1d:4d:5a:77:9d:71:42:98:a3: 12:eb:23:01:3f:0b:75:86:d8:cc:cb:40:4e:b4:b9:74:a1:ac: b1:05:77:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/22duLhPDhF2l1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk N2ZkMGZhN2QtOTEwNy00Y2U0LWI2ZTktODA1MTE1ZmJiMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWwsisNlMANnkj3OCDztZsNVF+IO8xIIjl0/ HEreqYaNbl/m7NsQ/nWFNBYAc1jE0CojKFdl187gu8HnV1I5ZoT8AmNRbeCnD7Ls KSgAOoC+8BtrKBu01SE/PVNGRmZfpk9WSTaVLJyfMOxeij9/reYcf8XFhulXLfN+ GfvojZaMdHSrXBXNu6ufQA/BHK8fsEVl1G8lqYIRnWkGWNPh7NpVPBtyB6zO7PdQ FtLC/d6vbJfK0mSvmlij8pvVuJg4O0ThG4E72StN9K5E26jV5W7nkJ1ipo8NtKri WC5kOQdevoLtpAaE9nedII58mDhYhEQtiKi7bT81IkdfhNiBVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPDMihhoCB8pz4dEsZjDe1uZQD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODljMDg0Y2ItNDViYi0z NWUwLThhMDEtMWE1NWNlZDAwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpYAJ67gmVb1lkB+0nsnFxBpZDmG3VFxmZMp1HAIW0+7UQZf5F4Ui1J RLwNTthNvPRkHQtO5NlfU4HEcVjuecrtocBrj3wnqkRm9tPphkmtIRhjOD8G5oTG r7NTxLcfAKOUPG7EkUQRAoycGtbCi3nrukOJ44x9emwGkxrwC0bdgTKtfDFwJZP7 JAjUEAd9QJdbEvUAvxGstStp9ycIzM76x37TtTMJXnpcesNVpDLnBOOVzLGlLlNN UubLZv6CCsk+GdsKmZMeqwaRO0otnO31Hza0KsVAYxFIrc3vbD1yJR1NWnedcUKY oxLrIwE/C3WG2MzLQE60uXShrLEFd+k= -----END CERTIFICATE-----Generated at Sat Dec 6 19:33:45 2025 by rpki-client