This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba65f817-2d54-30b3-ae6e-46593861a239.roa File: ba65f817-2d54-30b3-ae6e-46593861a239.roa (raw, json) Hash identifier: X5GKVjXCp4zKYKh07f0pGgWN79Hp8BMj4ad1MpyFEK8= Subject key identifier: F8:CF:92:0A:7E:5C:17:83:06:05:64:3F:E5:09:C1:85:A1:EB:3B:D6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBF8B7301F0C42D27CC920 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba65f817-2d54-30b3-ae6e-46593861a239.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.216.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:f8:b7:30:1f:0c:42:d2:7c:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=00a64c9a-185f-4aef-98e9-711efa93de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:7a:a3:23:3a:d3:64:28:91:22:8f:31:4c: e4:67:32:d4:98:f4:83:7c:6c:40:4b:b4:23:3d:9d: 06:d4:ca:ec:f4:45:4d:72:83:48:ca:85:66:18:7d: 5a:1d:e7:43:4b:b2:71:f5:f7:2f:97:20:9a:38:39: 39:59:60:85:34:67:d1:01:f0:e4:75:40:4a:ff:79: 6b:84:cc:b1:e1:67:9c:f4:fb:95:70:dc:54:5c:79: 09:0d:ad:fa:91:7a:cc:da:aa:03:c4:c4:77:84:6c: b3:f0:af:8b:25:05:cf:67:44:24:52:a3:50:b4:1c: 2a:30:61:53:26:32:8d:5a:9d:8a:28:03:a6:4e:4f: 41:6c:c9:4a:c1:a9:de:50:0c:29:3d:08:37:d6:04: de:99:d8:51:71:05:0e:1c:a6:db:32:8c:5d:63:98: 15:a4:7b:69:67:35:c9:71:79:e1:b9:5d:b8:23:83: 39:70:2e:d4:b2:dd:5e:15:4a:25:36:d4:ab:07:50: 64:3d:c9:07:89:1e:3d:1a:5d:f6:65:cc:db:a2:c7: cb:6d:01:e0:d5:6e:c5:b8:80:d2:03:10:88:d7:fc: e7:e3:b4:34:3b:e0:a9:29:7f:23:63:e3:f7:0b:ac: 6d:21:66:b2:36:30:3d:96:d2:e0:6d:bc:be:6a:fc: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:92:0A:7E:5C:17:83:06:05:64:3F:E5:09:C1:85:A1:EB:3B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba65f817-2d54-30b3-ae6e-46593861a239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:88:92:56:f5:38:7e:e7:35:30:e3:c0:74:6c:49:84:8f:6f: ae:ca:4e:9a:0e:3a:6e:cb:b8:ef:f7:34:66:94:6e:1d:7e:4f: ee:8a:5c:fc:d5:75:bb:6f:46:ec:df:23:ae:e3:2e:f2:7e:f5: c6:e3:50:f3:5b:8e:02:dd:e5:8d:a3:3f:f3:61:dc:6a:09:52: f4:78:25:80:11:2a:76:4d:de:8e:21:97:e0:f7:a8:90:6a:d3: 7e:3f:1b:59:50:00:1b:3e:3a:bd:75:fd:83:2c:d0:fb:be:fa: fd:db:c0:e3:26:52:77:11:6e:b2:9a:96:38:bd:d1:2e:38:46: d3:f6:57:40:fa:e9:c4:32:45:e0:aa:21:e9:69:48:ca:db:b9: 5b:05:1c:83:20:af:8c:7e:66:9c:5d:23:e5:8c:07:b1:af:bc: 4e:c6:d9:ff:c9:ca:19:22:60:74:69:f6:64:b6:48:c9:a5:5d: b9:ce:32:4e:23:b1:bc:c7:5c:9e:04:71:9d:8f:c9:ec:32:b4: a0:60:25:6c:b7:b3:6a:ab:ac:48:d1:d8:8c:d7:80:69:f4:cd: 58:c6:f2:d5:c5:71:61:37:79:0c:b1:4c:18:0d:42:68:a4:2c: 16:3e:95:3f:f9:df:f8:ce:ac:b5:05:2d:b5:ea:c0:9a:fd:e7: a5:5f:da:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2/i3MB8MQtJ8ySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MDBhNjRjOWEtMTg1Zi00YWVmLTk4ZTktNzExZWZhOTNkZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7p6oyM602QokSKPMUzkZzLUmPSDfGxAS7Qj PZ0G1Mrs9EVNcoNIyoVmGH1aHedDS7Jx9fcvlyCaODk5WWCFNGfRAfDkdUBK/3lr hMyx4Wec9PuVcNxUXHkJDa36kXrM2qoDxMR3hGyz8K+LJQXPZ0QkUqNQtBwqMGFT JjKNWp2KKAOmTk9BbMlKwaneUAwpPQg31gTemdhRcQUOHKbbMoxdY5gVpHtpZzXJ cXnhuV24I4M5cC7Ust1eFUolNtSrB1BkPckHiR49Gl32ZczbosfLbQHg1W7FuIDS AxCI1/zn47Q0O+CpKX8jY+P3C6xtIWayNjA9ltLgbby+avzbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjPkgp+XBeDBgVkP+UJwYWh6zvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE2NWY4MTctMmQ1NC0z MGIzLWFlNmUtNDY1OTM4NjFhMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNhRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWIklb1OH7nNTDjwHRsSYSPb67KTpoOOm7LuO/3NGaUbh1+T+6KXPzV dbtvRuzfI67jLvJ+9cbjUPNbjgLd5Y2jP/Nh3GoJUvR4JYARKnZN3o4hl+D3qJBq 034/G1lQABs+Or11/YMs0Pu++v3bwOMmUncRbrKalji90S44RtP2V0D66cQyReCq IelpSMrbuVsFHIMgr4x+ZpxdI+WMB7GvvE7G2f/JyhkiYHRp9mS2SMmlXbnOMk4j sbzHXJ4EcZ2PyewytKBgJWy3s2qrrEjR2IzXgGn0zVjG8tXFcWE3eQyxTBgNQmik LBY+lT/53/jOrLUFLbXqwJr956Vf2mo= -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:34 2025 by rpki-client