This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff01ba2-cbc6-371a-8154-43483be5b012.roa File: aff01ba2-cbc6-371a-8154-43483be5b012.roa (raw, json) Hash identifier: h81iWjXiUbdEiR62HyhXm6/m9AXJ9mFsGuc8Ckm+n80= Subject key identifier: 94:3E:A4:5A:59:58:65:08:72:C5:00:50:69:53:94:91:C0:FE:99:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB6F4967204A8ECF7B1400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff01ba2-cbc6-371a-8154-43483be5b012.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.206.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:6f:49:67:20:4a:8e:cf:7b:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2a8dcd94-804f-43fa-9b2c-aebeb8581787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:1f:30:23:77:10:83:27:4f:26:58:7c:2f: 66:01:80:da:ad:7e:26:a2:71:a1:17:24:07:93:9c: b0:8f:a8:60:b0:9f:4e:0a:95:b6:99:a9:bb:f5:17: dd:76:06:79:1a:20:81:e2:74:12:fc:40:ed:27:a0: 8e:9f:32:d1:9e:01:d6:a8:81:47:83:b8:cf:f6:74: ca:e4:f0:92:74:e9:6c:c8:ba:81:7f:bf:91:d6:89: 86:83:93:8a:a6:8e:1c:f1:ce:03:0c:15:2c:ae:e2: f1:7d:8a:53:bf:bc:c4:df:dd:6e:9d:33:d0:58:67: 9d:0f:b2:5b:07:aa:cd:07:90:d1:6c:14:d2:c8:a8: b0:60:d5:71:df:55:75:cf:1e:38:e0:1e:fd:8a:26: 2b:ff:a0:06:e9:e2:75:a0:af:9f:3f:20:14:5f:1f: 98:f8:15:63:37:e4:8e:00:fe:39:54:4d:9e:e6:62: 69:6f:c8:91:bf:bf:54:f0:5c:12:f5:6b:ba:c2:d8: 3b:30:7c:c7:7e:8f:2d:ce:d7:9d:18:72:a4:f9:43: 9f:07:32:5a:c6:3b:b7:c9:b0:fb:f2:64:67:b9:e3: a4:20:db:1b:f4:a0:7d:29:ae:39:9d:78:5b:05:c7: f3:3e:81:a7:26:39:5c:be:b6:1b:a4:d2:87:36:04: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3E:A4:5A:59:58:65:08:72:C5:00:50:69:53:94:91:C0:FE:99:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff01ba2-cbc6-371a-8154-43483be5b012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:63:d7:7b:e9:52:81:23:06:d1:7a:52:27:6d:b5:ff:22:10: 15:72:3a:a0:76:b6:b5:be:3d:d8:3a:b4:d7:2a:74:2d:1c:20: 7f:a2:1c:15:bf:35:51:9a:bf:f1:28:ef:a9:67:56:fa:24:5c: fc:f5:08:20:79:6f:ff:d0:9b:0f:14:7b:a3:23:c8:eb:52:c4: ec:4e:d3:25:3b:b2:25:fe:e9:a9:1a:5c:bf:99:be:12:64:15: 82:55:e4:ef:e6:3a:07:70:50:ac:86:f6:a8:d6:8c:16:24:f2: 1b:4f:a9:ef:8c:59:3d:4b:a9:03:f4:b8:8b:2c:bd:7b:de:ae: 69:58:54:4e:e2:94:bf:62:6c:d5:09:6a:02:87:fd:a4:fd:81: 0b:2e:0e:87:2e:0f:b9:b5:a8:b9:fe:d1:69:ad:6c:50:00:f9: fd:05:00:26:cf:c3:17:5c:55:64:c5:00:af:ed:41:54:5b:8c: 45:5d:8e:17:44:b8:e9:4c:26:4c:ff:6a:1c:c7:70:45:fd:9d: 1e:92:49:a5:ca:b6:97:83:fb:2c:f1:e4:30:94:92:1e:b6:5e: b9:24:36:9b:53:24:8d:58:0d:bc:97:b0:b8:ad:cd:db:89:9b: 92:d5:01:9f:90:0c:fa:4c:d9:54:0c:07:e2:ad:38:00:05:33: 2f:1c:ff:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/229JZyBKjs97FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmE4ZGNkOTQtODA0Zi00M2ZhLTliMmMtYWViZWI4NTgxNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZEfMCN3EIMnTyZYfC9mAYDarX4monGhFyQH k5ywj6hgsJ9OCpW2mam79RfddgZ5GiCB4nQS/EDtJ6COnzLRngHWqIFHg7jP9nTK 5PCSdOlsyLqBf7+R1omGg5OKpo4c8c4DDBUsruLxfYpTv7zE391unTPQWGedD7Jb B6rNB5DRbBTSyKiwYNVx31V1zx444B79iiYr/6AG6eJ1oK+fPyAUXx+Y+BVjN+SO AP45VE2e5mJpb8iRv79U8FwS9Wu6wtg7MHzHfo8tztedGHKk+UOfBzJaxju3ybD7 8mRnueOkINsb9KB9Ka45nXhbBcfzPoGnJjlcvrYbpNKHNgT6awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ+pFpZWGUIcsUAUGlTlJHA/plCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZmMDFiYTItY2JjNi0z NzFhLTgxNTQtNDM0ODNiZTViMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM7JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFj13vpUoEjBtF6Uidttf8iEBVyOqB2trW+Pdg6tNcqdC0cIH+iHBW/ NVGav/Eo76lnVvokXPz1CCB5b//Qmw8Ue6MjyOtSxOxO0yU7siX+6akaXL+ZvhJk FYJV5O/mOgdwUKyG9qjWjBYk8htPqe+MWT1LqQP0uIssvXvermlYVE7ilL9ibNUJ agKH/aT9gQsuDocuD7m1qLn+0WmtbFAA+f0FACbPwxdcVWTFAK/tQVRbjEVdjhdE uOlMJkz/ahzHcEX9nR6SSaXKtpeD+yzx5DCUkh62XrkkNptTJI1YDbyXsLitzduJ m5LVAZ+QDPpM2VQMB+KtOAAFMy8c/6Y= -----END CERTIFICATE-----Generated at Sat Dec 6 18:30:06 2025 by rpki-client