This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa File: a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa (raw, json) Hash identifier: NJ8WQgxttzv8ir2eVbK1Hd+TelnWmvmb9C52QAorR3Y= Subject key identifier: CA:EF:BB:AC:2C:86:99:8C:AF:97:20:9A:B6:6F:1A:60:24:8B:48:EE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB7A38397F2A02003B49C8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.201.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:7a:38:39:7f:2a:02:00:3b:49:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2ea75e10-51a9-42e2-bbb1-d9c7dbe83210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:16:af:fd:08:43:4e:8f:cd:39:2d:f0:42:f6: ba:4b:9a:33:72:40:2a:a0:a4:59:94:c2:58:d2:10: 0a:20:49:cd:a0:29:bb:e3:3c:23:e7:7b:6d:8f:b3: bf:5f:21:9f:a1:e1:9a:46:9a:13:d8:4b:86:b7:1a: 87:5d:dc:e7:4c:6d:7b:e4:68:20:80:46:b3:64:d2: 78:7b:ba:19:99:46:52:00:38:40:5c:53:c9:a2:1c: 8d:fe:aa:aa:77:9f:e9:f3:fa:95:72:59:7d:2f:55: b6:38:58:9e:5c:d3:25:12:a9:17:12:dd:ce:8d:56: fd:64:e8:84:3b:c5:f7:ca:ea:ee:60:9a:4c:98:8d: 51:08:dd:ef:d6:6e:3b:9a:6f:5d:36:9a:ce:4d:e4: 90:a5:7b:c2:14:7a:1a:dd:20:52:7c:91:27:c9:38: 2c:d7:ac:82:dd:3a:d0:6f:5b:e5:a4:4f:6a:16:96: ff:0b:9b:8d:38:81:68:eb:b5:cd:40:2d:87:78:a1: 8f:13:67:9d:92:b9:2e:17:10:07:5d:e8:a1:53:ad: bb:c4:91:b9:10:37:a4:ae:7a:72:7d:42:ac:05:2d: 93:f1:0e:2a:7a:95:f0:6e:3d:c6:41:8d:87:88:f9: 2c:45:6e:b3:18:c8:c0:ec:7b:47:ea:0c:36:5b:06: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:BB:AC:2C:86:99:8C:AF:97:20:9A:B6:6F:1A:60:24:8B:48:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1e68e7a-1f6a-3597-a1d5-033b17d2bc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:40:98:6f:c8:f0:49:7c:15:17:01:7e:53:0a:43:ca:2d:e9: 8b:e8:51:3e:91:f8:9a:7b:c5:67:1b:0c:ed:22:d8:01:ce:b6: 2f:66:6a:82:4e:4d:11:cd:b4:07:01:a0:db:36:a5:d4:e0:5d: 67:0c:43:f9:35:f4:f1:e3:f8:86:b1:14:68:a4:66:54:12:53: ea:63:69:e5:73:b3:f4:42:a2:f6:b5:a0:06:79:4e:2e:84:e9: 04:5a:fb:b9:23:40:99:ed:e7:5d:f1:e1:08:8a:c6:58:27:23: f1:92:8b:4d:11:cd:27:3d:b4:91:8d:de:f3:46:72:a3:ad:49: 41:e4:f4:5e:84:55:5b:7b:09:88:e7:ff:8f:d6:c7:2f:dd:48: 87:d0:fb:1d:4c:ef:a0:0e:02:d8:f0:39:e4:90:6a:78:25:b5: c1:e4:47:76:bf:aa:29:ae:25:98:53:46:90:9d:a3:bb:8c:e4: 98:71:d4:71:ad:fc:16:69:f8:3f:5e:ec:5d:19:ee:c4:9c:7a: 6a:ec:11:21:9a:d3:3b:9f:58:e2:e0:43:d2:dc:07:0e:58:d6: 63:b2:8a:1f:90:0a:be:f4:47:0c:be:d6:d8:79:b6:0e:dd:a9: 05:19:dc:66:c5:ec:32:89:f1:58:b4:38:c1:ba:c3:28:cb:33: 6a:bd:7d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/23o4OX8qAgA7ScgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmVhNzVlMTAtNTFhOS00MmUyLWJiYjEtZDljN2RiZTgzMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Rav/QhDTo/NOS3wQva6S5ozckAqoKRZlMJY 0hAKIEnNoCm74zwj53ttj7O/XyGfoeGaRpoT2EuGtxqHXdznTG175GgggEazZNJ4 e7oZmUZSADhAXFPJohyN/qqqd5/p8/qVcll9L1W2OFieXNMlEqkXEt3OjVb9ZOiE O8X3yuruYJpMmI1RCN3v1m47mm9dNprOTeSQpXvCFHoa3SBSfJEnyTgs16yC3TrQ b1vlpE9qFpb/C5uNOIFo67XNQC2HeKGPE2edkrkuFxAHXeihU627xJG5EDekrnpy fUKsBS2T8Q4qepXwbj3GQY2HiPksRW6zGMjA7HtH6gw2WwYGSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrvu6wshpmMr5cgmrZvGmAki0juMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFlNjhlN2EtMWY2YS0z NTk3LWExZDUtMDMzYjE3ZDJiYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1AmG/I8El8FRcBflMKQ8ot6YvoUT6R+Jp7xWcbDO0i2AHOti9maoJO TRHNtAcBoNs2pdTgXWcMQ/k19PHj+IaxFGikZlQSU+pjaeVzs/RCova1oAZ5Ti6E 6QRa+7kjQJnt513x4QiKxlgnI/GSi00RzSc9tJGN3vNGcqOtSUHk9F6EVVt7CYjn /4/Wxy/dSIfQ+x1M76AOAtjwOeSQangltcHkR3a/qimuJZhTRpCdo7uM5Jhx1HGt /BZp+D9e7F0Z7sScemrsESGa0zufWOLgQ9LcBw5Y1mOyih+QCr70Rwy+1th5tg7d qQUZ3GbF7DKJ8Vi0OMG6wyjLM2q9fb0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:34 2025 by rpki-client