This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ace014a4-61a5-3005-a054-75f084057a6b.roa File: ace014a4-61a5-3005-a054-75f084057a6b.roa (raw, json) Hash identifier: ngyiaLH8lptgZjTkpfB0aPhsrYcWMR3zxcz4TWB8ipA= Subject key identifier: ED:19:25:F9:72:B3:9F:4C:8E:F3:F1:4A:9C:8D:DB:DE:1B:54:C8:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBF036A724646F31368220 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ace014a4-61a5-3005-a054-75f084057a6b.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.217.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:f0:36:a7:24:64:6f:31:36:82:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=882b49bd-8a0b-4c90-8b4c-8c8f276237d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:7f:57:59:33:7a:8f:dc:78:3d:52:25:ad: b7:44:19:f9:5f:7e:e9:ad:38:1a:02:9a:1e:6e:3c: 0e:be:e2:6a:7c:f8:8c:a9:fe:04:e2:91:d5:42:fa: bc:93:f4:69:ce:49:e4:6c:a1:be:78:f1:0b:35:1a: 7d:c8:d6:4e:7f:fb:c8:3a:d1:d6:2d:a8:8d:81:47: b8:0f:03:54:ad:85:a6:73:0f:ab:02:23:ef:f7:d1: cc:c6:d9:f8:78:e9:12:e2:8e:8f:28:82:ef:6c:a8: 6a:9e:ad:97:9d:9a:a4:e7:d1:4c:3f:a4:da:ee:0d: be:e4:a1:e3:6d:b6:b4:94:f7:e0:8d:f4:c0:c4:37: 17:11:f0:52:66:31:71:32:47:df:b7:70:8d:06:92: 2f:78:d8:45:68:1f:3a:ba:70:6e:a8:80:9a:93:ac: c0:d7:8b:a0:2e:02:34:89:eb:95:d3:be:7b:a2:3f: d8:10:71:93:de:3e:72:e4:08:4d:be:92:b7:ec:ea: 69:e5:75:aa:6f:be:32:ff:8c:8c:42:7e:a1:78:f1: a1:0e:66:f9:fc:8e:52:a8:48:8d:99:f8:81:c7:03: 01:c0:42:67:f6:4c:d6:c8:11:8f:df:06:3f:12:bd: 2c:b8:67:a4:f4:ab:d5:60:6a:d1:db:b3:56:3a:4d: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:25:F9:72:B3:9F:4C:8E:F3:F1:4A:9C:8D:DB:DE:1B:54:C8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ace014a4-61a5-3005-a054-75f084057a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:fe:8f:7f:e5:e4:6b:6a:d4:c9:ce:48:51:7b:b3:fe:dd: ed:cb:e0:52:17:69:87:74:dc:29:f0:5f:5f:08:98:c8:0c:72: 9d:7d:6b:e2:00:f5:2c:bc:70:f2:18:73:56:32:c0:21:7a:20: 04:68:1e:59:96:34:af:7e:2a:20:22:83:f0:68:c7:10:4d:d9: 05:30:c4:6f:e1:93:ba:55:fc:01:99:09:8e:5c:f4:44:17:0e: 68:98:b0:a5:c3:dc:5b:67:ea:60:63:83:d2:4a:f1:00:83:3e: 2a:02:73:33:a6:be:97:e7:06:c1:77:f0:a8:03:ff:b4:0e:58: 7f:e8:77:20:1e:71:eb:d9:10:ea:9a:3c:3f:82:cc:90:d7:7f: 92:0a:88:cb:8c:e5:8c:1c:13:26:76:79:79:2b:3c:05:b1:84: be:aa:a6:16:6d:07:4e:79:f7:ac:9c:ce:a4:af:39:59:4b:85: cd:f2:1f:c5:97:13:e9:9e:7a:d1:b2:97:d9:76:ee:ba:2a:c0: fe:da:88:c7:e6:7f:68:ab:84:d7:3a:0b:4a:bd:3c:2a:85:41: c3:1b:0b:c4:64:d5:05:67:f8:99:85:0d:1b:64:08:40:0d:3a: 6c:8d:52:32:9b:a7:92:1f:0b:ea:e9:49:d6:b3:3c:36:75:55: 5a:4b:7d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2/A2pyRkbzE2giAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ODgyYjQ5YmQtOGEwYi00YzkwLThiNGMtOGM4ZjI3NjIzN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKR/V1kzeo/ceD1SJa23RBn5X37prTgaApoe bjwOvuJqfPiMqf4E4pHVQvq8k/RpzknkbKG+ePELNRp9yNZOf/vIOtHWLaiNgUe4 DwNUrYWmcw+rAiPv99HMxtn4eOkS4o6PKILvbKhqnq2XnZqk59FMP6Ta7g2+5KHj bba0lPfgjfTAxDcXEfBSZjFxMkfft3CNBpIveNhFaB86unBuqICak6zA14ugLgI0 ieuV0757oj/YEHGT3j5y5AhNvpK37Opp5XWqb74y/4yMQn6hePGhDmb5/I5SqEiN mfiBxwMBwEJn9kzWyBGP3wY/Er0suGek9KvVYGrR27NWOk0//wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0ZJflys59MjvPxSpyN294bVMiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWNlMDE0YTQtNjFhNS0z MDA1LWEwNTQtNzVmMDg0MDU3YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPH/o9/5eRratTJzkhRe7P+3e3L4FIXaYd03CnwX18ImMgMcp19a+IA 9Sy8cPIYc1YywCF6IARoHlmWNK9+KiAig/BoxxBN2QUwxG/hk7pV/AGZCY5c9EQX DmiYsKXD3Ftn6mBjg9JK8QCDPioCczOmvpfnBsF38KgD/7QOWH/odyAecevZEOqa PD+CzJDXf5IKiMuM5YwcEyZ2eXkrPAWxhL6qphZtB05596yczqSvOVlLhc3yH8WX E+meetGyl9l27roqwP7aiMfmf2irhNc6C0q9PCqFQcMbC8Rk1QVn+JmFDRtkCEAN OmyNUjKbp5IfC+rpSdazPDZ1VVpLfTA= -----END CERTIFICATE-----Generated at Sat Dec 6 20:23:16 2025 by rpki-client