This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a685d9ac-4dd8-39c5-9b6c-a0a5806b419a.roa File: a685d9ac-4dd8-39c5-9b6c-a0a5806b419a.roa (raw, json) Hash identifier: ee5MQn4J+/whwbn0SYXOBVZKBXG+CNfOn2xPY841fk0= Subject key identifier: 59:E0:85:5F:43:7B:6D:70:1E:BD:D0:B6:D7:4D:7D:29:B0:D6:85:FE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C0140D8ACD04377A77A292C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a685d9ac-4dd8-39c5-9b6c-a0a5806b419a.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22773 IP address blocks: 174.72.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:d8:ac:d0:43:77:a7:7a:29:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=abb99f05-a5ea-40f5-a5ff-a030f498459e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:eb:67:0e:b7:59:22:cd:fe:35:bd:40:a0: 54:db:84:3c:2a:70:63:1a:3c:c1:8a:88:01:67:5c: 83:b1:24:34:95:64:8f:ea:97:4f:7f:e8:c1:b2:b3: 3c:cc:16:43:37:b0:30:83:49:f0:a4:ec:da:93:95: 41:b3:20:1b:6e:61:7d:8d:0b:d2:53:0b:5c:73:9e: bc:4e:de:92:54:68:ff:59:b0:08:b1:18:92:64:95: 01:cf:61:bb:37:6c:1e:ad:fa:f0:bc:c0:c2:27:86: 31:51:13:b9:e4:d1:7b:14:a3:23:fe:e6:ec:a7:f3: 0e:c0:c1:cf:54:c0:2d:33:59:95:f5:33:84:1f:df: 6f:e3:28:ba:57:78:c9:a2:90:58:fa:05:24:f1:20: a6:ed:d7:d3:d0:1c:ff:75:2a:1f:a1:8c:a1:55:3a: de:d5:55:e5:37:4d:69:5d:f4:3d:a8:48:0f:3b:f0: e9:5f:01:98:32:8b:fc:e1:0d:ae:e6:c4:2e:49:e5: e4:ee:53:f8:1b:cd:11:1b:b3:ad:bd:3a:5f:43:14: aa:45:3c:36:79:f0:55:06:d8:c3:9f:6c:90:72:af: 7a:86:4e:d2:b8:93:73:50:d3:a0:21:bb:42:6a:e2: a2:2a:e9:cf:75:93:49:1f:81:0c:48:ed:7d:0b:fe: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E0:85:5F:43:7B:6D:70:1E:BD:D0:B6:D7:4D:7D:29:B0:D6:85:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a685d9ac-4dd8-39c5-9b6c-a0a5806b419a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a0:dd:f7:1d:6b:a4:7b:e3:2f:a2:48:63:0f:2f:67:d5:8f: 68:1b:9d:53:52:92:d8:2a:e0:23:0d:3c:b3:cb:37:51:42:82: 2e:f4:f1:f0:52:3e:df:fd:f3:95:0c:59:9e:7c:8e:81:93:eb: 98:04:0d:25:c1:bb:7e:d1:a4:25:78:45:c1:fd:3d:a0:98:68: 5e:b3:86:2f:0f:ec:bc:f1:67:d7:bc:13:ce:90:86:5a:87:a3: 98:7c:67:17:9a:e0:1e:84:ad:55:63:b4:e2:e7:b5:6b:65:2a: 52:f2:42:5b:f2:d9:6d:d8:d5:ef:60:dc:a1:68:96:ad:0d:0c: 5f:b3:48:24:66:77:d7:80:f9:dc:90:b4:ef:fd:36:d9:a9:e8: c3:a0:b0:07:f2:78:3c:85:d3:7d:36:0f:04:ef:de:40:2b:b1: e0:7b:fb:d4:38:8d:65:8c:f6:83:ea:ac:60:d3:44:6d:1f:72: 73:98:9f:49:f8:5e:65:9a:96:b3:80:7f:ce:75:84:07:50:47: 5b:ab:de:2f:5f:81:ac:a0:7e:bd:a8:52:86:d3:2e:9d:8b:3d: 62:78:dc:fe:d9:2e:76:31:3c:e3:bb:d4:43:5c:31:61:76:65: 1d:d7:a0:b4:d9:01:17:62:cb:8f:45:ac:6c:5e:fb:30:3a:21: 9c:86:a0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQNis0EN3p3opLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk YWJiOTlmMDUtYTVlYS00MGY1LWE1ZmYtYTAzMGY0OTg0NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ/rZw63WSLN/jW9QKBU24Q8KnBjGjzBiogB Z1yDsSQ0lWSP6pdPf+jBsrM8zBZDN7Awg0nwpOzak5VBsyAbbmF9jQvSUwtcc568 Tt6SVGj/WbAIsRiSZJUBz2G7N2werfrwvMDCJ4YxURO55NF7FKMj/ubsp/MOwMHP VMAtM1mV9TOEH99v4yi6V3jJopBY+gUk8SCm7dfT0Bz/dSofoYyhVTre1VXlN01p XfQ9qEgPO/DpXwGYMov84Q2u5sQuSeXk7lP4G80RG7OtvTpfQxSqRTw2efBVBtjD n2yQcq96hk7SuJNzUNOgIbtCauKiKunPdZNJH4EMSO19C/5hbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnghV9De21wHr3QttdNfSmw1oX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY4NWQ5YWMtNGRkOC0z OWM1LTliNmMtYTBhNTgwNmI0MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkjiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOg3fcda6R74y+iSGMPL2fVj2gbnVNSktgq4CMNPLPLN1FCgi708fBS Pt/985UMWZ58joGT65gEDSXBu37RpCV4RcH9PaCYaF6zhi8P7LzxZ9e8E86QhlqH o5h8Zxea4B6ErVVjtOLntWtlKlLyQlvy2W3Y1e9g3KFolq0NDF+zSCRmd9eA+dyQ tO/9Ntmp6MOgsAfyeDyF0302DwTv3kArseB7+9Q4jWWM9oPqrGDTRG0fcnOYn0n4 XmWalrOAf851hAdQR1ur3i9fgaygfr2oUobTLp2LPWJ43P7ZLnYxPOO71ENcMWF2 ZR3XoLTZARdiy49FrGxe+zA6IZyGoDE= -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:41 2025 by rpki-client