This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9dcf59a3-59b3-3b6f-b882-d31447a487ea.roa File: 9dcf59a3-59b3-3b6f-b882-d31447a487ea.roa (raw, json) Hash identifier: eNXn+sZQEvGxZktEU7Rgn1K4BV7W3OEBXdoqrGrFEGI= Subject key identifier: A6:76:6D:E4:AE:11:6F:21:F5:25:9A:EE:3D:1C:E8:C4:36:71:75:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666D2CF6417C85E4C631F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9dcf59a3-59b3-3b6f-b882-d31447a487ea.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 70.172.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:d2:cf:64:17:c8:5e:4c:63:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=4daf59f1-82a5-476b-989e-88703df242fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:78:05:81:b8:32:a5:8e:7a:8c:60:88:00: 92:e4:2d:ec:08:14:44:72:fe:38:1f:8b:36:8f:24: 3c:c1:aa:62:f8:b2:ba:a4:71:1e:b8:af:51:0f:8c: 3d:44:a2:c6:6b:9a:fd:1e:ad:e3:21:6d:b9:2c:d9: da:bd:3f:18:12:71:f5:03:73:09:d1:42:65:06:cd: f5:d3:ca:2c:64:d8:e4:7b:1f:74:72:8e:8c:6d:b1: c1:ba:52:c3:4f:ed:d6:40:cb:bb:49:e1:03:29:8a: 68:a0:63:a4:a5:58:76:78:de:1f:36:52:9d:aa:c1: 30:e4:af:ce:3b:19:fe:8b:45:2b:03:61:24:a0:60: 77:c2:19:5d:ee:82:7d:57:48:86:89:66:46:19:94: e0:b4:f3:12:08:d0:a6:5a:11:db:8d:a4:61:02:a5: bb:0f:f0:75:59:e9:53:9a:8b:29:42:b7:ea:d8:02: 64:51:5f:e2:4e:c7:5c:bc:1c:ab:36:39:57:fc:85: 70:36:0b:28:d5:34:ae:5c:b3:cf:08:cb:3f:74:c5: 7f:91:7f:32:a0:d6:2f:96:84:2a:49:2d:80:bb:f0: 6f:dc:8b:81:11:e6:ea:1d:92:67:0e:32:bc:e9:0f: aa:48:00:24:43:6f:85:cd:25:e3:ea:d5:fb:8d:5b: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:76:6D:E4:AE:11:6F:21:F5:25:9A:EE:3D:1C:E8:C4:36:71:75:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9dcf59a3-59b3-3b6f-b882-d31447a487ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ba:78:26:54:f8:7c:c8:6b:64:e3:83:0f:81:5f:33:82:da: c7:af:23:6d:9b:4f:2a:53:cc:c7:c4:16:07:6f:65:ed:5d:a1: e5:f2:31:ac:f7:c5:88:72:6a:7a:e1:1d:59:9b:ce:96:7b:7a: ea:dd:43:be:b1:4b:b4:b3:37:8a:0c:e5:95:5c:34:56:13:27: 18:8a:cf:67:a3:e5:53:2e:b4:fb:cc:9c:5c:b2:9c:1f:6e:90: a2:44:b0:c4:2a:f9:04:a6:1d:cd:53:93:0e:e1:bd:98:fa:44: fa:8a:fa:b1:17:d8:0c:e7:c0:24:e4:1c:27:c1:f9:c9:b8:22: ef:f5:2a:d5:37:5c:6f:59:56:cd:25:d0:a8:22:05:d2:17:3a: c0:c2:14:b7:2f:14:6d:40:5a:62:07:4f:73:bd:72:f1:c4:9f: 91:bb:e6:8a:06:f1:5e:22:ad:97:f6:85:56:a6:06:db:40:d4: 03:ab:37:7a:e3:e8:01:4b:1c:82:b6:90:b8:6a:db:7b:3c:94: c3:5a:1d:ee:6a:cf:38:49:aa:0e:85:23:a9:ec:56:dd:77:83: 54:b3:1b:38:d8:d2:f0:a2:ba:c8:d3:b3:32:cc:6a:bb:99:47: 2e:22:1f:99:ee:f8:b7:63:bb:c7:fc:fe:7f:fe:b2:65:ec:40: fb:67:26:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZtLPZBfIXkxjH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NGRhZjU5ZjEtODJhNS00NzZiLTk4OWUtODg3MDNkZjI0MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIh4BYG4MqWOeoxgiACS5C3sCBREcv44H4s2 jyQ8wapi+LK6pHEeuK9RD4w9RKLGa5r9Hq3jIW25LNnavT8YEnH1A3MJ0UJlBs31 08osZNjkex90co6MbbHBulLDT+3WQMu7SeEDKYpooGOkpVh2eN4fNlKdqsEw5K/O Oxn+i0UrA2EkoGB3whld7oJ9V0iGiWZGGZTgtPMSCNCmWhHbjaRhAqW7D/B1WelT mospQrfq2AJkUV/iTsdcvByrNjlX/IVwNgso1TSuXLPPCMs/dMV/kX8yoNYvloQq SS2Au/Bv3IuBEebqHZJnDjK86Q+qSAAkQ2+FzSXj6tX7jVsIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ2beSuEW8h9SWa7j0c6MQ2cXVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWRjZjU5YTMtNTliMy0z YjZmLWI4ODItZDMxNDQ3YTQ4N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC66eCZU+HzIa2Tjgw+BXzOC2sevI22bTypTzMfEFgdvZe1doeXyMaz3 xYhyanrhHVmbzpZ7eurdQ76xS7SzN4oM5ZVcNFYTJxiKz2ej5VMutPvMnFyynB9u kKJEsMQq+QSmHc1Tkw7hvZj6RPqK+rEX2AznwCTkHCfB+cm4Iu/1KtU3XG9ZVs0l 0KgiBdIXOsDCFLcvFG1AWmIHT3O9cvHEn5G75ooG8V4irZf2hVamBttA1AOrN3rj 6AFLHIK2kLhq23s8lMNaHe5qzzhJqg6FI6nsVt13g1SzGzjY0vCiusjTszLMaruZ Ry4iH5nu+Ldju8f8/n/+smXsQPtnJlk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:31:36 2026 by rpki-client