This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a51a52f6-82dc-3384-8f88-4284d931b1b1.roa File: a51a52f6-82dc-3384-8f88-4284d931b1b1.roa (raw, json) Hash identifier: yu+/NLNdrEEcMODs8A4/Cqqbshmc4MmZA3cbY0P9Wgg= Subject key identifier: 66:7C:68:4C:D6:E8:46:04:3E:01:0A:EB:F9:25:84:7A:EF:80:B2:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB51CAFD6FDC69345145C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a51a52f6-82dc-3384-8f88-4284d931b1b1.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.217.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:51:ca:fd:6f:dc:69:34:51:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=491cf76d-ed27-4bb5-b13c-cb874cf94559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:90:c1:3f:a6:ce:67:e8:b3:99:f9:de:c8: ff:d4:42:e8:c6:54:1d:07:68:e7:83:c7:e2:a4:a6: 65:8d:e7:ab:3c:0f:62:d3:6a:96:a4:48:c0:59:52: 75:32:69:c6:82:7b:93:f3:18:23:f7:a0:89:be:c2: 73:0a:0f:45:b8:77:db:88:93:dd:fe:0c:7d:58:d2: b7:4c:ba:32:cb:0d:63:c7:b8:5a:61:78:1c:b0:5c: 1c:1d:f3:bb:87:50:02:ea:8d:59:91:b1:d2:27:2c: c4:85:a4:63:d8:47:63:f7:64:49:e8:92:a0:95:94: 26:c3:4c:49:5e:14:8d:fa:d7:04:89:38:dd:c1:e7: 7a:a0:c5:06:7d:34:ee:a1:d3:82:09:b9:79:b1:2f: 68:ec:38:94:8f:7f:68:ff:2c:51:e6:49:46:e9:d4: e1:2c:1a:fb:5e:c5:94:3a:78:2c:15:27:da:14:a0: 1a:b5:ca:02:ba:24:4b:37:39:3a:c0:1a:61:cc:82: 4b:02:6c:eb:32:d8:77:d1:3e:56:af:e2:fa:f3:91: 63:ec:86:8d:d9:ef:c0:a1:e6:a6:22:eb:87:31:94: de:cd:b8:11:79:04:6c:fe:d8:45:17:9b:43:6d:e0: cc:b6:bd:d9:fe:ba:ff:a9:6b:0c:ba:27:6e:4f:af: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:68:4C:D6:E8:46:04:3E:01:0A:EB:F9:25:84:7A:EF:80:B2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a51a52f6-82dc-3384-8f88-4284d931b1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8a:86:fa:3b:95:4d:0a:0c:4d:87:f6:05:f7:1d:a0:26:e0: 46:02:af:f4:14:c1:87:c9:94:24:a6:99:f8:45:49:72:d7:af: 99:47:cb:c7:42:ca:ea:5a:e7:89:04:4e:18:96:61:68:10:31: 7d:2e:d2:7e:e9:28:7a:a1:96:98:ac:ec:52:ac:fb:db:7a:19: fd:f2:38:7b:2f:d3:52:63:15:3a:07:76:91:67:42:a6:aa:c0: a6:55:91:47:a8:a4:c7:f2:4b:98:62:9a:c2:d7:ce:86:a0:32: a5:03:3e:84:1c:79:7d:8e:ed:f1:57:45:6a:fc:76:fb:75:31: 05:5d:f2:40:60:09:21:9d:ea:cd:c6:12:dc:eb:4c:08:d4:44: 5f:fa:57:d6:80:94:0d:be:50:99:c6:77:c2:7a:fb:01:13:4b: 53:9d:8b:1e:ef:44:c2:6b:be:89:bb:86:a7:27:15:41:4f:4e: cf:02:63:91:1c:dc:95:55:a4:0a:b2:30:4c:ff:e3:4f:49:30: 3b:bb:25:00:d1:d7:a2:8c:7a:0b:2a:20:32:cf:5f:b3:cc:67: aa:25:49:29:86:f8:fa:22:a0:73:b6:d1:d5:47:7a:51:cd:0f: 13:ec:28:05:44:53:78:1f:8a:20:f4:46:0a:f1:57:f2:6b:ac: 6f:4b:f3:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/21HK/W/caTRRRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk NDkxY2Y3NmQtZWQyNy00YmI1LWIxM2MtY2I4NzRjZjk0NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLyQwT+mzmfos5n53sj/1ELoxlQdB2jng8fi pKZljeerPA9i02qWpEjAWVJ1MmnGgnuT8xgj96CJvsJzCg9FuHfbiJPd/gx9WNK3 TLoyyw1jx7haYXgcsFwcHfO7h1AC6o1ZkbHSJyzEhaRj2Edj92RJ6JKglZQmw0xJ XhSN+tcEiTjdwed6oMUGfTTuodOCCbl5sS9o7DiUj39o/yxR5klG6dThLBr7XsWU OngsFSfaFKAatcoCuiRLNzk6wBphzIJLAmzrMth30T5Wr+L685Fj7IaN2e/Aoeam IuuHMZTezbgReQRs/thFF5tDbeDMtr3Z/rr/qWsMuiduT6+eVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ8aEzW6EYEPgEK6/klhHrvgLLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTUxYTUyZjYtODJkYy0z Mzg0LThmODgtNDI4NGQ5MzFiMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuKhvo7lU0KDE2H9gX3HaAm4EYCr/QUwYfJlCSmmfhFSXLXr5lHy8dC yupa54kEThiWYWgQMX0u0n7pKHqhlpis7FKs+9t6Gf3yOHsv01JjFToHdpFnQqaq wKZVkUeopMfyS5himsLXzoagMqUDPoQceX2O7fFXRWr8dvt1MQVd8kBgCSGd6s3G EtzrTAjURF/6V9aAlA2+UJnGd8J6+wETS1Odix7vRMJrvom7hqcnFUFPTs8CY5Ec 3JVVpAqyMEz/409JMDu7JQDR16KMegsqIDLPX7PMZ6olSSmG+PoioHO20dVHelHN DxPsKAVEU3gfiiD0RgrxV/JrrG9L88o= -----END CERTIFICATE-----Generated at Sun Dec 7 03:03:32 2025 by rpki-client