This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa File: a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa (raw, json) Hash identifier: Ri8LuFQwl9TQRkDdNzjqVPF83LbxHd6cg2bppcYHPjM= Subject key identifier: DE:A6:5C:E9:44:51:31:14:49:F1:0E:DF:DF:7A:42:80:02:D3:F3:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFE761F149F89BB4E939D02C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 22773 IP address blocks: 70.172.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:1f:14:9f:89:bb:4e:93:9d:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=27cdeaaa-e49a-4b32-8dd7-6f3d78d1e689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:89:d8:78:d6:35:64:67:ce:a4:51:72:1e: 6c:52:0b:43:5a:11:b2:ed:90:01:af:4e:f0:40:d2: 3a:6a:95:99:0c:61:49:2c:1d:ef:e4:64:93:51:03: ea:0f:ec:65:2e:e6:2d:bd:9e:b5:3e:c4:da:fa:7a: 5a:7b:e3:6d:ed:ec:04:c8:92:80:e4:5f:8a:6a:41: 92:04:10:7f:6c:33:77:65:5b:65:be:e2:02:e6:00: af:90:25:7d:39:01:ae:0f:85:a0:9c:7b:fe:e0:3b: 1c:30:54:17:ba:92:ee:f1:1f:41:16:36:60:70:2c: e3:55:d1:e9:3f:81:49:95:9b:00:2b:b3:3e:ef:29: 97:fa:c6:a9:b4:23:73:52:31:b2:e2:5f:bd:a1:a9: fa:f3:35:5d:02:d0:42:c9:cc:67:0f:5f:85:79:4a: f1:52:07:44:b5:cc:85:e0:19:42:e9:56:1d:9f:2a: 6a:b7:d3:35:86:9e:fe:0f:f8:07:f8:b6:2b:1d:21: 25:bc:63:4c:cf:0a:0d:68:26:40:3f:8c:b0:63:d4: 2b:c5:4b:1f:d7:a7:67:b5:93:cc:d1:17:81:a1:74: 6b:68:39:68:fc:12:2b:fd:d2:67:5f:cb:ca:d0:fb: 59:4a:5e:5c:cb:0c:6a:5b:db:a6:3e:fd:33:62:f9: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:5C:E9:44:51:31:14:49:F1:0E:DF:DF:7A:42:80:02:D3:F3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:14:22:84:18:82:02:a9:c0:f4:37:7b:7b:db:b7:cc:98:1f: ea:f6:1d:ac:57:aa:65:45:1e:44:4b:3f:16:4d:74:da:ee:cd: 75:ee:bd:51:a3:e7:22:bf:23:15:6a:66:11:26:71:9c:39:2d: 87:99:73:54:59:3d:38:e0:50:ba:b0:f0:2a:65:5f:be:fa:96: a3:12:95:40:19:e3:8b:29:4a:d9:88:38:44:20:ea:6c:4c:b1: ac:d2:8c:e8:0a:b2:05:d1:14:53:50:15:b9:84:1b:43:26:1d: 08:9e:14:8c:3a:5c:d1:bc:50:22:0e:69:c6:1e:62:0e:f8:49: a7:21:40:36:5e:bc:a0:b8:db:b4:59:47:a8:4a:4e:61:d3:24: 0d:b3:e7:bd:ce:bb:18:56:05:55:ae:6a:97:86:52:92:11:10: 8f:93:e0:42:67:3b:d2:c4:3d:11:01:09:4a:7f:6a:5b:4a:80: b9:2c:b8:d2:4e:cc:26:ed:a6:2f:e9:76:3b:43:d4:ce:59:bd: f8:84:7a:6a:dd:1a:f5:5c:98:c3:1e:a5:e7:9b:d0:04:5f:dc: 92:43:fe:63:33:da:9e:91:c7:29:92:4f:e7:df:d2:c0:5a:da: 18:5e:c2:af:be:18:09:15:35:8b:9c:f9:d7:93:d2:3d:76:d2: 30:c1:f5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+dh8Un4m7TpOdAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk MjdjZGVhYWEtZTQ5YS00YjMyLThkZDctNmYzZDc4ZDFlNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTeJ2HjWNWRnzqRRch5sUgtDWhGy7ZABr07w QNI6apWZDGFJLB3v5GSTUQPqD+xlLuYtvZ61PsTa+npae+Nt7ewEyJKA5F+KakGS BBB/bDN3ZVtlvuIC5gCvkCV9OQGuD4WgnHv+4DscMFQXupLu8R9BFjZgcCzjVdHp P4FJlZsAK7M+7ymX+saptCNzUjGy4l+9oan68zVdAtBCycxnD1+FeUrxUgdEtcyF 4BlC6VYdnypqt9M1hp7+D/gH+LYrHSElvGNMzwoNaCZAP4ywY9QrxUsf16dntZPM 0ReBoXRraDlo/BIr/dJnX8vK0PtZSl5cywxqW9umPv0zYvle0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6mXOlEUTEUSfEO3996QoAC0/OHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTJiYmIzOWMtMjhlMy0z YTNkLTlhMmUtNjU5N2VlMDg2ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4UIoQYggKpwPQ3e3vbt8yYH+r2HaxXqmVFHkRLPxZNdNruzXXuvVGj 5yK/IxVqZhEmcZw5LYeZc1RZPTjgULqw8CplX776lqMSlUAZ44spStmIOEQg6mxM sazSjOgKsgXRFFNQFbmEG0MmHQieFIw6XNG8UCIOacYeYg74SachQDZevKC427RZ R6hKTmHTJA2z573OuxhWBVWuapeGUpIREI+T4EJnO9LEPREBCUp/altKgLksuNJO zCbtpi/pdjtD1M5ZvfiEemrdGvVcmMMepeeb0ARf3JJD/mMz2p6RxymST+ff0sBa 2hhewq++GAkVNYuc+deT0j120jDB9VY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:23 2025 by rpki-client