This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8a9cefd-db44-3baf-a586-d56a5ef1be6c.roa File: a8a9cefd-db44-3baf-a586-d56a5ef1be6c.roa (raw, json) Hash identifier: lKn4R/Q+8CFLld8onAa5MC4BwUlwSoRXXouuAiMiy+Y= Subject key identifier: B7:27:5B:D2:27:59:E0:A5:8D:AD:9B:53:42:15:28:E6:BF:C6:2F:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB9C37B43CFE70FD47F780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8a9cefd-db44-3baf-a586-d56a5ef1be6c.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.223.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:9c:37:b4:3c:fe:70:fd:47:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=d5c40892-c1b4-4e81-a908-d03788c0eccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:22:1a:4b:32:6f:6b:ce:11:5d:56:5e:db: 92:b2:82:97:9b:d0:d6:92:e6:24:02:5c:72:72:30: 6c:43:03:81:66:8a:33:97:74:3c:32:bf:e2:0a:c2: 4e:07:cd:ba:2e:38:3c:ae:dc:ba:46:a3:2b:a5:2b: 82:b3:b1:05:a3:48:13:99:2d:28:6c:56:da:c6:e8: a8:fd:80:9e:35:0a:bc:7c:e8:0b:13:98:11:1f:5b: 49:87:0b:2e:b0:c9:4c:90:aa:17:b4:e6:a1:15:b5: 7b:b8:93:08:cb:13:f3:a3:dc:9d:c5:12:af:a1:99: 29:92:7e:7c:67:be:9e:4b:b9:18:97:98:80:e2:24: 19:61:8f:47:a8:17:b2:43:21:d5:f6:d3:e1:72:42: df:2b:2a:d3:5c:c2:ed:b1:77:3a:2c:10:3d:e9:bc: 75:1a:06:09:2e:30:f6:14:46:c8:53:26:ec:ff:3b: 7d:67:61:5e:eb:b5:97:7b:db:52:c0:03:b0:a5:d0: db:2a:b3:60:3c:71:d5:3a:35:17:7d:fc:5b:02:e7: b4:42:f7:0c:be:87:b4:69:12:08:bf:20:81:4a:f7: ee:bb:9b:2f:86:e2:8b:4f:52:fa:86:21:83:ab:8e: 5b:bb:98:a0:c5:33:1c:f0:e0:fd:bf:30:cc:48:12: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:27:5B:D2:27:59:E0:A5:8D:AD:9B:53:42:15:28:E6:BF:C6:2F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8a9cefd-db44-3baf-a586-d56a5ef1be6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c8:fc:07:39:f7:1b:b4:51:9a:0c:7d:33:81:8c:26:f1:a3: 73:f8:40:92:0e:bd:73:f9:69:11:80:b0:04:1c:63:e9:02:d6: 22:fd:98:3c:82:b1:cb:a5:b1:e8:3a:50:5e:07:e5:7f:55:8f: 3c:91:c3:1a:e8:5f:c3:04:d9:27:6b:20:87:81:e5:72:f7:c6: 63:af:80:c6:82:6c:f8:3a:fe:6e:54:ff:0f:8b:bd:af:fb:50: 29:ea:aa:29:1f:ad:13:57:bc:9a:3a:f5:36:17:38:66:c1:68: d5:bd:6c:cf:2b:32:81:5c:fd:3a:7e:63:b4:cc:df:74:eb:e3: 11:1c:b7:81:cf:74:f4:49:ca:7b:73:06:3e:c9:a4:a2:28:b0: d5:d2:d2:2c:69:8c:26:b5:0e:b1:dc:9c:95:fa:5a:05:14:6f: 4c:3e:59:6e:09:42:4c:6f:ad:23:4a:27:43:f1:90:72:5d:7a: d6:22:ff:76:fd:91:f0:55:8f:e4:cc:5b:c8:b6:38:94:a2:88: 44:cc:3e:22:d8:c1:e3:e6:4c:58:56:5d:77:c2:43:f5:16:51: 76:23:bf:4c:73:05:7c:26:d5:8b:87:2e:cb:70:ac:72:1d:57: 13:1b:0c:78:3d:69:80:7d:bd:16:ef:ac:66:8b:16:0e:b7:3e: 66:52:c9:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/25w3tDz+cP1H94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZDVjNDA4OTItYzFiNC00ZTgxLWE5MDgtZDAzNzg4YzBlY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCoiGksyb2vOEV1WXtuSsoKXm9DWkuYkAlxy cjBsQwOBZoozl3Q8Mr/iCsJOB826Ljg8rty6RqMrpSuCs7EFo0gTmS0obFbaxuio /YCeNQq8fOgLE5gRH1tJhwsusMlMkKoXtOahFbV7uJMIyxPzo9ydxRKvoZkpkn58 Z76eS7kYl5iA4iQZYY9HqBeyQyHV9tPhckLfKyrTXMLtsXc6LBA96bx1GgYJLjD2 FEbIUybs/zt9Z2Fe67WXe9tSwAOwpdDbKrNgPHHVOjUXffxbAue0QvcMvoe0aRII vyCBSvfuu5svhuKLT1L6hiGDq45bu5igxTMc8OD9vzDMSBLaFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcnW9InWeClja2bU0IVKOa/xi8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYThhOWNlZmQtZGI0NC0z YmFmLWE1ODYtZDU2YTVlZjFiZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrI/Ac59xu0UZoMfTOBjCbxo3P4QJIOvXP5aRGAsAQcY+kC1iL9mDyC sculseg6UF4H5X9VjzyRwxroX8ME2SdrIIeB5XL3xmOvgMaCbPg6/m5U/w+Lva/7 UCnqqikfrRNXvJo69TYXOGbBaNW9bM8rMoFc/Tp+Y7TM33Tr4xEct4HPdPRJyntz Bj7JpKIosNXS0ixpjCa1DrHcnJX6WgUUb0w+WW4JQkxvrSNKJ0PxkHJdetYi/3b9 kfBVj+TMW8i2OJSiiETMPiLYwePmTFhWXXfCQ/UWUXYjv0xzBXwm1YuHLstwrHId VxMbDHg9aYB9vRbvrGaLFg63PmZSySs= -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:04 2025 by rpki-client