This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa File: bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa (raw, json) Hash identifier: gbqW2Xoc6UawpYcMvPtGaZBqZXr2Sb08bLNxH4UApWs= Subject key identifier: 37:35:5F:AF:DD:49:61:5D:A2:1A:CF:84:32:53:4E:AF:EC:D3:49:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB97FAF6780668E1C36600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.222.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:97:fa:f6:78:06:68:e1:c3:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=5ff904d4-fb2d-4312-9e1d-fca214b49c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:34:67:f7:1b:cb:f7:d7:55:2e:a9:1c:a9: b9:17:3e:7c:1a:b8:88:49:11:5c:77:f6:70:0a:ad: cb:76:ee:2c:5a:c0:c7:e3:66:48:61:d3:b7:7f:1a: 85:0c:9e:b1:e3:78:50:83:36:c9:ec:0c:f6:c6:2c: 89:33:3b:6f:c3:9d:66:7a:27:a8:41:70:78:2c:b1: 6b:e0:f9:91:cd:c2:4e:e3:fa:69:1b:a9:56:de:0d: 93:20:28:34:44:03:2c:ed:17:6a:71:30:f8:99:91: 92:54:d7:82:44:b8:3a:fc:6a:77:6e:1c:1f:7c:9d: 1f:9d:66:77:73:68:39:56:33:87:3b:34:68:86:cc: 91:74:63:f9:7f:f2:f8:27:cd:e7:ce:d1:9a:8b:3a: 02:f7:9e:be:5f:c6:80:45:1d:7e:9b:20:cd:f6:a2: 03:ad:48:e6:7d:ea:db:09:a0:6b:46:85:22:ed:84: 28:76:30:53:bb:3c:1a:5c:9d:f8:14:0b:9f:aa:ae: b9:ef:60:be:6b:c7:f6:53:43:f3:3d:36:f6:5e:a6: c5:70:57:35:ac:43:81:cf:cb:65:0e:1d:ba:27:d0: a5:25:5a:64:01:2c:1f:16:4b:ff:23:f7:a3:ec:56: d9:4a:d8:fa:26:a7:de:6b:91:a6:0d:97:69:97:1c: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:35:5F:AF:DD:49:61:5D:A2:1A:CF:84:32:53:4E:AF:EC:D3:49:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf819e71-ef47-3aa8-9ba9-8228ff1f99f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:56:f3:95:4f:17:dd:d0:8c:2c:96:50:33:32:75:e3:f0:71: 0a:1a:fd:04:93:3d:ea:69:1e:5c:14:33:96:ae:48:73:7d:d3: b8:82:26:ee:5e:35:62:cb:af:e0:c5:65:5a:53:67:5e:a3:9e: 5d:6f:33:56:61:3f:f2:84:62:26:4c:66:53:b1:2f:a7:83:4a: 41:99:7e:fb:32:5c:b2:06:bf:36:70:53:7f:04:68:1f:07:78: 67:c5:61:7a:da:45:6e:50:5d:96:99:af:15:ff:b3:d5:d6:ff: 63:81:9b:59:40:0d:8b:e5:56:76:a5:f9:74:dc:0c:b8:0b:d1: 80:fd:0c:c9:84:3d:5b:b9:b7:d4:6d:19:dc:c7:f6:fc:b5:67: 80:be:e1:3d:5f:c6:39:fb:40:ba:db:d0:c3:cc:45:9e:b3:73: 8e:a1:9c:53:cc:75:36:a9:28:4a:5e:85:61:ca:77:71:d6:27: 11:2b:a4:1e:5b:6f:71:9f:df:e9:37:bb:d0:01:cf:10:47:00: 39:3b:0c:fe:e2:7d:2c:1f:2e:06:95:99:1e:4c:52:7e:c0:03: f7:44:b1:e3:94:f1:a2:6c:4c:89:9f:a4:5a:50:25:26:09:cc: 7d:8c:44:75:10:a6:96:1f:eb:e2:82:d3:7c:df:13:01:bb:83: 02:3f:fb:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/25f69ngGaOHDZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk NWZmOTA0ZDQtZmIyZC00MzEyLTllMWQtZmNhMjE0YjQ5YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7c0Z/cby/fXVS6pHKm5Fz58GriISRFcd/Zw Cq3Ldu4sWsDH42ZIYdO3fxqFDJ6x43hQgzbJ7Az2xiyJMztvw51meieoQXB4LLFr 4PmRzcJO4/ppG6lW3g2TICg0RAMs7RdqcTD4mZGSVNeCRLg6/Gp3bhwffJ0fnWZ3 c2g5VjOHOzRohsyRdGP5f/L4J83nztGaizoC956+X8aARR1+myDN9qIDrUjmferb CaBrRoUi7YQodjBTuzwaXJ34FAufqq6572C+a8f2U0PzPTb2XqbFcFc1rEOBz8tl Dh26J9ClJVpkASwfFkv/I/ej7FbZStj6Jqfea5GmDZdplxwW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDc1X6/dSWFdohrPhDJTTq/s00m5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY4MTllNzEtZWY0Ny0z YWE4LTliYTktODIyOGZmMWY5OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9W85VPF93QjCyWUDMydePwcQoa/QSTPeppHlwUM5auSHN907iCJu5e NWLLr+DFZVpTZ16jnl1vM1ZhP/KEYiZMZlOxL6eDSkGZfvsyXLIGvzZwU38EaB8H eGfFYXraRW5QXZaZrxX/s9XW/2OBm1lADYvlVnal+XTcDLgL0YD9DMmEPVu5t9Rt GdzH9vy1Z4C+4T1fxjn7QLrb0MPMRZ6zc46hnFPMdTapKEpehWHKd3HWJxErpB5b b3Gf3+k3u9ABzxBHADk7DP7ifSwfLgaVmR5MUn7AA/dEseOU8aJsTImfpFpQJSYJ zH2MRHUQppYf6+KC03zfEwG7gwI/+yk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:16 2025 by rpki-client