This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3366e32-0222-3c96-9fda-465296c3305d.roa File: a3366e32-0222-3c96-9fda-465296c3305d.roa (raw, json) Hash identifier: REUlLwh7ZLucZNmKtAa7oHrTXhBSZa2cdQ+npLCqdOo= Subject key identifier: D1:6F:5E:1F:77:78:E6:05:C5:3B:DB:01:C8:58:A9:F8:7F:73:80:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB4B691CC540E583770380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3366e32-0222-3c96-9fda-465296c3305d.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.201.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:4b:69:1c:c5:40:e5:83:77:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=bac8d148-f452-45e7-bf2b-4443c6e9fa81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5d:5c:e4:25:a2:e3:5e:88:fc:6a:9e:da:1b: 95:21:67:b4:1b:44:a9:a4:23:fb:d6:34:f5:0b:dc: ff:32:c1:45:39:74:fb:80:92:2a:66:38:1b:df:6f: 1d:3c:c4:e8:54:fe:5f:17:05:c0:7c:e1:80:e8:a5: 3a:41:4a:b0:73:2d:0d:66:35:cf:4a:26:aa:49:8b: 4a:4c:d5:85:c8:a6:04:ef:ba:2f:ab:5b:da:77:f5: a2:94:f3:0f:77:54:03:8e:29:d1:a3:ad:c9:a7:81: 41:e7:42:c7:40:a1:03:e4:b9:a4:5b:1f:ae:43:e9: 77:38:c5:18:4d:9e:52:94:00:10:ad:0f:38:c7:46: 58:55:45:d1:2c:be:2d:04:16:62:ce:52:bb:b6:78: 35:03:cf:f9:07:2f:42:91:7a:93:8c:15:7f:00:f8: d1:23:a2:ea:aa:4d:2b:ca:ef:12:44:96:9c:1d:9e: 42:ba:5a:1c:64:46:ea:a6:0f:5a:de:68:ca:29:c2: f9:c4:35:07:de:50:42:13:4a:e3:81:aa:d8:11:2f: 30:6f:9c:f4:f2:bd:c9:f5:a9:be:e8:e4:10:ed:4c: 82:91:53:52:ed:39:69:2a:ae:b4:8d:b2:81:8f:1d: c2:07:a0:6f:63:7a:15:3d:89:5b:9f:fa:20:80:62: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6F:5E:1F:77:78:E6:05:C5:3B:DB:01:C8:58:A9:F8:7F:73:80:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3366e32-0222-3c96-9fda-465296c3305d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:84:e3:ce:7b:8a:3e:1d:00:9d:c9:8a:31:81:02:0d:7b:15: 8b:9b:ec:24:e4:4a:47:0f:ca:2c:fd:e9:4d:56:c8:0b:75:95: 3a:41:43:c4:4f:93:bc:c9:88:b7:48:c2:0b:93:0c:fb:64:7d: 1f:d3:22:c5:ce:73:a7:af:da:2f:93:e8:bb:71:c3:90:c2:b1: 37:c0:80:71:45:dc:41:4d:08:ac:3e:ff:25:77:3a:06:ce:43: 95:06:0c:29:4f:4c:58:aa:68:d4:3a:34:17:68:63:98:bb:65: 1a:ae:e0:c1:de:ff:cf:dc:51:6d:8a:7c:06:5b:40:47:2f:db: 6a:e4:03:44:2c:86:ad:43:2c:ec:a6:89:4e:28:25:75:7f:e2: 88:60:b1:2f:22:60:b1:86:98:9b:20:84:0c:07:25:f0:1c:4f: 66:ae:c5:dd:a3:bd:11:fa:43:ff:7d:46:b3:75:a9:95:8f:55: d5:31:19:26:e1:bb:aa:3a:3c:72:5f:1e:93:8b:66:01:c4:2a: b1:19:2d:ea:cb:a7:a0:c4:3e:ed:66:e3:2b:dc:80:bc:1b:46: fa:de:3c:48:3e:6c:70:b3:0a:47:27:e4:9e:06:0b:be:93:58: 07:54:86:95:1a:1d:10:8a:db:75:90:3f:49:d7:75:ee:23:7e: bd:59:c3:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/20tpHMVA5YN3A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YmFjOGQxNDgtZjQ1Mi00NWU3LWJmMmItNDQ0M2M2ZTlmYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV1c5CWi416I/Gqe2huVIWe0G0SppCP71jT1 C9z/MsFFOXT7gJIqZjgb328dPMToVP5fFwXAfOGA6KU6QUqwcy0NZjXPSiaqSYtK TNWFyKYE77ovq1vad/WilPMPd1QDjinRo63Jp4FB50LHQKED5LmkWx+uQ+l3OMUY TZ5SlAAQrQ84x0ZYVUXRLL4tBBZizlK7tng1A8/5By9CkXqTjBV/APjRI6Lqqk0r yu8SRJacHZ5CulocZEbqpg9a3mjKKcL5xDUH3lBCE0rjgarYES8wb5z08r3J9am+ 6OQQ7UyCkVNS7TlpKq60jbKBjx3CB6BvY3oVPYlbn/oggGK6dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFvXh93eOYFxTvbAchYqfh/c4CuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTMzNjZlMzItMDIyMi0z Yzk2LTlmZGEtNDY1Mjk2YzMzMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2E4857ij4dAJ3JijGBAg17FYub7CTkSkcPyiz96U1WyAt1lTpBQ8RP k7zJiLdIwguTDPtkfR/TIsXOc6ev2i+T6Ltxw5DCsTfAgHFF3EFNCKw+/yV3OgbO Q5UGDClPTFiqaNQ6NBdoY5i7ZRqu4MHe/8/cUW2KfAZbQEcv22rkA0Qshq1DLOym iU4oJXV/4ohgsS8iYLGGmJsghAwHJfAcT2auxd2jvRH6Q/99RrN1qZWPVdUxGSbh u6o6PHJfHpOLZgHEKrEZLerLp6DEPu1m4yvcgLwbRvrePEg+bHCzCkcn5J4GC76T WAdUhpUaHRCK23WQP0nXde4jfr1ZwwE= -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:14 2025 by rpki-client