This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba3d9edf-8154-3fff-a11a-e8ddec2c84cf.roa File: ba3d9edf-8154-3fff-a11a-e8ddec2c84cf.roa (raw, json) Hash identifier: LXLOeWzOn7OEOUoWP73gNNox85yAWZS7GaUifrda0QA= Subject key identifier: B1:28:B2:D8:52:91:3A:E7:06:73:96:3D:12:4D:AF:0C:9D:0D:27:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBE83B75D7321F82AEA480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba3d9edf-8154-3fff-a11a-e8ddec2c84cf.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.222.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:e8:3b:75:d7:32:1f:82:ae:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=80f6bd24-76b7-4f36-a565-9c1be6c3b238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:3d:db:1b:b7:8d:60:c8:8b:d7:de:ff:51: 2d:5c:f1:cf:07:a0:16:fd:14:11:7b:05:e2:1d:23: f1:76:08:77:73:ec:d1:3f:26:8c:c7:c0:a2:87:7c: 52:13:69:6b:5c:1f:24:b6:60:ca:9a:1f:a6:b3:ec: 3c:c1:08:60:6d:79:cf:66:04:7a:10:91:2b:7f:2b: d9:38:18:fd:44:ab:28:9f:99:0c:ca:d1:95:5b:94: 7b:20:c2:b3:b4:70:92:ec:54:a5:92:fd:83:af:32: 17:25:f7:e8:63:1d:9e:f6:74:fc:6d:3d:aa:75:01: 32:2b:0f:bd:54:be:ef:fa:b5:2a:2b:e2:8d:5d:11: 5b:97:99:54:f4:1c:a2:60:82:b7:91:e9:81:a2:e0: 08:4c:2d:e8:9e:e4:3a:50:9d:df:ec:f5:10:85:e2: 83:a9:73:28:ca:bb:bb:a7:15:e8:c2:e0:a4:10:23: a9:96:0a:55:ce:a8:1f:fe:49:a3:9d:e5:e9:83:fb: b2:0b:5e:fe:a4:e2:1b:61:04:20:ab:65:49:81:96: 76:f3:10:92:4f:e2:86:6c:30:90:c9:d6:21:f2:98: 12:73:f9:83:dc:7e:d3:d4:37:04:49:bc:63:38:63: a1:b3:4e:0b:b4:22:35:d9:44:74:97:f0:42:e9:31: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:28:B2:D8:52:91:3A:E7:06:73:96:3D:12:4D:AF:0C:9D:0D:27:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba3d9edf-8154-3fff-a11a-e8ddec2c84cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7b:da:ac:70:a9:f0:51:d6:48:87:48:12:45:a2:e7:9e:fa: e5:0a:40:21:a4:71:d3:2f:fe:4c:9a:30:fc:f4:25:48:0b:b3: d7:dc:75:d4:76:6c:47:81:bf:83:66:bd:11:18:38:a9:53:5e: 6a:e4:16:1f:ee:79:0d:6f:4b:ef:a8:9c:e3:79:a0:97:db:8a: 2b:a5:1b:e6:4c:18:88:6d:5a:28:e0:d9:63:57:43:ed:06:f6: ed:c0:45:52:46:6a:5c:ab:8b:26:c2:52:60:45:27:63:f0:60: 47:d2:cc:6e:32:07:6e:39:0a:48:a8:0c:a6:51:15:01:45:3a: 28:15:13:e8:37:12:29:94:65:44:85:0c:ba:2c:dd:34:c7:dd: 99:3d:30:8c:13:69:04:22:89:ad:fa:9f:c2:a5:9e:fe:2e:85: 36:22:9e:98:8b:7a:65:9a:af:8b:36:9a:1a:e3:4d:f8:ba:97: bf:64:db:10:ae:9e:d5:1a:47:f4:4b:55:bd:81:8a:f2:92:9d: ca:e9:92:d7:c4:37:87:5a:5d:a5:c7:16:fd:f8:57:b5:46:11: 73:9f:66:7a:b8:9d:b9:bb:4c:c6:ac:ab:33:35:29:b4:aa:51: 55:f8:45:bc:18:29:de:10:3e:f9:a3:11:df:36:4e:d7:cd:bb: 01:11:c8:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2+g7ddcyH4KupIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ODBmNmJkMjQtNzZiNy00ZjM2LWE1NjUtOWMxYmU2YzNiMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA892xu3jWDIi9fe/1EtXPHPB6AW/RQRewXi HSPxdgh3c+zRPyaMx8Cih3xSE2lrXB8ktmDKmh+ms+w8wQhgbXnPZgR6EJErfyvZ OBj9RKson5kMytGVW5R7IMKztHCS7FSlkv2DrzIXJffoYx2e9nT8bT2qdQEyKw+9 VL7v+rUqK+KNXRFbl5lU9ByiYIK3kemBouAITC3onuQ6UJ3f7PUQheKDqXMoyru7 pxXowuCkECOplgpVzqgf/kmjneXpg/uyC17+pOIbYQQgq2VJgZZ28xCST+KGbDCQ ydYh8pgSc/mD3H7T1DcESbxjOGOhs04LtCI12UR0l/BC6TGX1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEosthSkTrnBnOWPRJNrwydDSfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmEzZDllZGYtODE1NC0z ZmZmLWExMWEtZThkZGVjMmM4NGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ72qxwqfBR1kiHSBJFouee+uUKQCGkcdMv/kyaMPz0JUgLs9fcddR2 bEeBv4NmvREYOKlTXmrkFh/ueQ1vS++onON5oJfbiiulG+ZMGIhtWijg2WNXQ+0G 9u3ARVJGalyriybCUmBFJ2PwYEfSzG4yB245CkioDKZRFQFFOigVE+g3EimUZUSF DLos3TTH3Zk9MIwTaQQiia36n8Klnv4uhTYinpiLemWar4s2mhrjTfi6l79k2xCu ntUaR/RLVb2BivKSncrpktfEN4daXaXHFv34V7VGEXOfZnq4nbm7TMasqzM1KbSq UVX4RbwYKd4QPvmjEd82TtfNuwERyG8= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:25 2025 by rpki-client