This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a593915b-f851-3103-8b70-6d47fb33e307.roa File: a593915b-f851-3103-8b70-6d47fb33e307.roa (raw, json) Hash identifier: O+UyZBF58rhv/fgB4QCRMqktvzOpCy0AhmYjVTrG55w= Subject key identifier: 10:45:8A:9B:6D:38:5E:B1:9C:9E:FF:E3:31:EE:59:60:C1:DE:A3:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666D62A12FCCDF843782F20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a593915b-f851-3103-8b70-6d47fb33e307.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.221.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:d6:2a:12:fc:cd:f8:43:78:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=9e758d4d-9172-4e51-b48e-abf8b5c38144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:1a:47:e7:b4:a7:0a:bf:d4:59:31:a4:4e: df:40:d5:06:32:e2:4f:5a:7b:60:64:ef:5e:36:b7: 62:4a:2c:bc:f5:c2:1e:3d:53:73:64:5c:c4:78:a5: ee:9c:18:0e:d7:de:f0:67:66:20:aa:e4:ea:47:e3: 3e:f8:42:37:ec:75:d5:e0:52:e0:70:75:a1:61:d9: 9f:47:30:86:a9:5f:5e:6c:66:c3:44:e4:78:6f:c0: f2:d5:17:90:92:44:1d:5b:72:11:ee:1d:af:04:ad: d4:0c:71:16:ff:3a:81:2f:5a:f7:6e:2c:90:c2:8b: be:e6:d4:b1:8b:e1:68:1c:f1:a7:94:6a:31:8d:f7: e4:22:be:c7:95:64:28:9a:df:8f:66:e6:f1:17:76: 30:49:35:f9:88:d4:c5:58:fa:9f:fa:40:72:bc:dc: d5:2f:be:35:3b:a0:cd:6b:2a:35:62:d9:5f:fe:a7: 42:d1:55:2c:d5:4f:75:b4:6e:8b:85:a2:76:c3:ed: c0:7e:c5:19:63:c1:ae:db:26:e3:6d:e2:ac:90:62: 90:60:d9:ca:e8:2e:6c:b9:bf:6b:40:8f:78:d8:32: 02:68:12:70:c0:c2:25:f3:19:57:98:16:7d:b1:c5: a3:46:71:30:24:dc:b3:56:e0:7f:ff:b2:78:cc:d9: 61:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:45:8A:9B:6D:38:5E:B1:9C:9E:FF:E3:31:EE:59:60:C1:DE:A3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a593915b-f851-3103-8b70-6d47fb33e307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b9:24:17:d9:3f:1e:3d:ed:c3:c5:fc:c8:d3:19:33:5e:7c: b0:d0:70:08:a5:e8:e3:fc:d3:0e:bd:5a:63:67:15:5e:96:4b: 6f:46:b5:04:dc:5d:bf:ef:2b:ae:7d:45:26:63:cb:06:ed:6b: 45:b3:c7:b6:a1:cb:24:8c:d5:21:18:58:61:41:7c:93:6e:c2: f9:26:df:a3:08:2e:30:4f:00:d3:04:6b:81:a8:e1:67:22:5d: 79:34:e7:f7:4f:ea:a9:5f:51:5f:76:61:18:a5:8a:56:5d:4d: bb:84:ed:be:a2:52:9b:96:93:f8:40:d9:7c:18:51:7b:e3:68: 64:ed:24:84:22:2c:56:40:5c:83:7a:c1:55:cf:d0:47:e2:d5: 20:e6:c6:21:55:98:f2:4d:b8:44:92:7b:55:db:c7:97:eb:0a: 90:3a:95:6a:5d:a3:bc:67:7b:f2:a7:37:57:95:60:01:15:4b: b3:a2:e8:dd:5e:e7:29:0d:e1:6c:5e:71:20:9c:44:ef:d3:92: bb:9c:96:07:24:ee:ac:35:ca:4f:fc:1d:52:5a:86:f4:c2:3f: dc:19:5a:9e:c1:f6:5a:a5:f3:cb:34:4b:e1:e7:e4:cc:c2:05: 9e:90:82:82:1a:c2:5f:d9:ec:8c:07:85:2a:18:6a:2d:52:6f: b3:de:e7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZtYqEvzN+EN4LyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OWU3NThkNGQtOTE3Mi00ZTUxLWI0OGUtYWJmOGI1YzM4MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEcaR+e0pwq/1FkxpE7fQNUGMuJPWntgZO9e NrdiSiy89cIePVNzZFzEeKXunBgO197wZ2YgquTqR+M++EI37HXV4FLgcHWhYdmf RzCGqV9ebGbDROR4b8Dy1ReQkkQdW3IR7h2vBK3UDHEW/zqBL1r3biyQwou+5tSx i+FoHPGnlGoxjffkIr7HlWQomt+PZubxF3YwSTX5iNTFWPqf+kByvNzVL741O6DN ayo1Ytlf/qdC0VUs1U91tG6LhaJ2w+3AfsUZY8Gu2ybjbeKskGKQYNnK6C5sub9r QI942DICaBJwwMIl8xlXmBZ9scWjRnEwJNyzVuB//7J4zNlh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBFipttOF6xnJ7/4zHuWWDB3qNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTU5MzkxNWItZjg1MS0z MTAzLThiNzAtNmQ0N2ZiMzNlMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm5JBfZPx497cPF/MjTGTNefLDQcAil6OP80w69WmNnFV6WS29GtQTc Xb/vK659RSZjywbta0Wzx7ahyySM1SEYWGFBfJNuwvkm36MILjBPANMEa4Go4Wci XXk05/dP6qlfUV92YRililZdTbuE7b6iUpuWk/hA2XwYUXvjaGTtJIQiLFZAXIN6 wVXP0Efi1SDmxiFVmPJNuESSe1Xbx5frCpA6lWpdo7xne/KnN1eVYAEVS7Oi6N1e 5ykN4WxecSCcRO/Tkruclgck7qw1yk/8HVJahvTCP9wZWp7B9lql88s0S+Hn5MzC BZ6QgoIawl/Z7IwHhSoYai1Sb7Pe5yc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:51:39 2026 by rpki-client