This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/948733a2-3c76-307f-8ea4-f50d995a9ede.roa File: 948733a2-3c76-307f-8ea4-f50d995a9ede.roa (raw, json) Hash identifier: r1HatoVsSmf6+GyEohaZKuKSywg+wq+oeQ5OdKx4L/c= Subject key identifier: D9:57:0A:5F:81:CF:C1:0F:FB:89:36:A9:6D:2C:EB:C2:50:4D:A4:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBF28732E08C5187D60B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/948733a2-3c76-307f-8ea4-f50d995a9ede.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.206.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:f2:87:32:e0:8c:51:87:d6:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=030cd8cf-35a7-4c74-b0bf-7e1f23d4ac87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:d2:f9:8e:40:28:f7:56:65:3e:02:a3:91: 49:84:84:b1:14:49:5c:82:0f:0c:d2:07:a6:fc:1b: 30:5e:01:3a:c3:70:70:19:0d:95:7f:55:e5:21:15: 30:f7:f1:62:06:9b:b7:a4:62:d2:31:bc:a4:8a:1c: 16:95:f6:0d:88:20:8e:4a:bc:e1:f9:fa:95:e9:f0: a6:7e:b4:62:71:a9:d2:50:6d:5a:90:08:33:7f:a2: 17:c8:30:fc:25:17:e8:c4:83:a7:fc:0f:31:5a:dd: f0:0d:73:12:7e:8d:14:73:fe:e9:1c:70:9a:c6:80: 61:d0:93:00:6d:7d:a0:08:72:1f:99:c4:ad:11:50: 9d:87:85:9f:da:50:8e:7d:fc:49:db:4a:91:e9:05: 5b:d6:ff:21:9d:39:bd:16:94:de:b6:44:66:21:9d: db:23:d4:38:31:39:4d:22:93:bd:ed:1b:94:f7:52: 63:cd:cb:28:f3:97:2b:f6:2c:cd:1f:04:72:57:2f: 8a:13:de:d5:f1:de:ce:f3:6d:e1:a0:c4:87:1a:2e: 85:3a:dd:ba:33:04:e1:46:91:9f:1c:7d:f3:2c:fc: 68:66:b4:a5:dd:56:7a:2d:e1:17:ce:88:f3:b1:b0: 07:01:4a:1e:2d:a2:b6:72:03:d2:f2:9d:29:6a:08: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:0A:5F:81:CF:C1:0F:FB:89:36:A9:6D:2C:EB:C2:50:4D:A4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/948733a2-3c76-307f-8ea4-f50d995a9ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d2:cb:db:c3:c4:72:81:72:3b:7e:9c:9c:fb:c0:5f:18:7f: fe:0b:24:a6:14:7b:aa:db:a1:a1:18:81:51:e1:c9:2f:a4:c8: c8:8d:94:14:13:ad:78:68:9e:96:ba:9b:11:55:2c:20:31:32: c8:08:83:bc:42:09:1b:ab:ea:7b:5a:e8:0f:7d:40:13:4c:41: b7:41:0c:88:53:65:15:41:94:ad:9e:8d:4c:5c:04:fd:ca:66: c2:9f:42:0e:65:20:c6:c1:49:9e:e4:64:b7:0d:19:39:23:b6: af:65:80:5f:8e:c2:10:ee:28:84:92:d9:be:20:73:84:35:af: 1c:52:28:fd:f4:d2:9a:11:1e:5b:41:73:d9:7c:ad:00:e2:08: a3:2f:e0:f7:b5:67:f6:4a:80:d5:fb:47:4a:ea:15:80:6f:13: 08:b4:b5:35:bd:6e:ba:59:51:7d:02:d2:60:d0:a0:55:da:c5: 71:26:f4:26:8b:43:b5:d3:8b:fc:ef:8d:cb:6c:ff:94:67:86: ea:3e:bd:30:54:51:79:54:15:3d:bd:61:d8:5b:7f:32:87:62: f0:ce:dc:7e:9c:81:c8:c1:cc:de:26:a2:7f:c7:b6:47:02:2c: c3:06:3c:8d:4e:28:0b:74:c6:d4:4b:60:c8:7e:66:17:9c:b1: 1a:30:92:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2/KHMuCMUYfWCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MDMwY2Q4Y2YtMzVhNy00Yzc0LWIwYmYtN2UxZjIzZDRhYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XLS+Y5AKPdWZT4Co5FJhISxFElcgg8M0gem /BswXgE6w3BwGQ2Vf1XlIRUw9/FiBpu3pGLSMbykihwWlfYNiCCOSrzh+fqV6fCm frRicanSUG1akAgzf6IXyDD8JRfoxIOn/A8xWt3wDXMSfo0Uc/7pHHCaxoBh0JMA bX2gCHIfmcStEVCdh4Wf2lCOffxJ20qR6QVb1v8hnTm9FpTetkRmIZ3bI9Q4MTlN IpO97RuU91Jjzcso85cr9izNHwRyVy+KE97V8d7O823hoMSHGi6FOt26MwThRpGf HH3zLPxoZrSl3VZ6LeEXzojzsbAHAUoeLaK2cgPS8p0pagho5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlXCl+Bz8EP+4k2qW0s68JQTaQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQ4NzMzYTItM2M3Ni0z MDdmLThlYTQtZjUwZDk5NWE5ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTSy9vDxHKBcjt+nJz7wF8Yf/4LJKYUe6rboaEYgVHhyS+kyMiNlBQT rXhonpa6mxFVLCAxMsgIg7xCCRur6nta6A99QBNMQbdBDIhTZRVBlK2ejUxcBP3K ZsKfQg5lIMbBSZ7kZLcNGTkjtq9lgF+OwhDuKISS2b4gc4Q1rxxSKP300poRHltB c9l8rQDiCKMv4Pe1Z/ZKgNX7R0rqFYBvEwi0tTW9brpZUX0C0mDQoFXaxXEm9CaL Q7XTi/zvjcts/5Rnhuo+vTBUUXlUFT29YdhbfzKHYvDO3H6cgcjBzN4mon/HtkcC LMMGPI1OKAt0xtRLYMh+ZhecsRowkuc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:24:44 2025 by rpki-client