This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9a555d5-b0a9-31a0-8cfa-caba25a0fb38.roa File: c9a555d5-b0a9-31a0-8cfa-caba25a0fb38.roa (raw, json) Hash identifier: 7enX3e0DYfxx+pNE8PCPEbFmwcOgCGF0ndIIIXHz7oY= Subject key identifier: B1:E9:83:6D:73:A3:D8:7F:E9:15:34:66:CC:F3:3E:C5:D3:81:28:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C566689E64C1C1C1BE9B4B3E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9a555d5-b0a9-31a0-8cfa-caba25a0fb38.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.197.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:89:e6:4c:1c:1c:1b:e9:b4:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=906cadd6-a45a-4758-855b-ff13034e4465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:34:87:25:c2:b6:9b:de:15:b9:a1:ed:ff: d3:74:4f:ac:1a:50:94:75:32:cf:e9:e8:7f:cd:cb: 82:82:bf:ac:c5:e8:12:6e:b1:68:d4:cd:56:65:0b: 54:92:06:99:b5:a3:d2:34:af:ff:38:7c:de:4a:1b: a6:2e:3e:a4:7e:3a:9d:86:b0:9e:b7:da:2e:ff:37: 14:04:82:10:b9:18:ca:d7:87:87:7a:af:35:b6:95: 58:02:e2:5b:f6:44:fe:02:3a:44:0b:db:2d:44:6f: ae:0d:2e:da:16:35:f9:f9:73:5f:d5:90:2c:ce:b0: 0b:6a:ea:40:95:bc:62:49:4a:b4:1e:c8:38:47:c6: d7:b4:2c:ce:ef:4f:e7:b9:c6:35:04:3c:ed:c2:3d: 27:1b:a8:3c:a4:3e:84:f9:37:f0:a2:38:01:7a:c8: 55:fc:2c:6d:a5:6b:2d:ae:7e:6a:c6:d2:32:54:46: 52:e8:3c:57:d6:69:db:45:cd:47:49:a2:06:83:7a: 79:75:b3:f3:83:68:c9:ef:df:6f:81:78:9a:d3:84: 6e:51:d2:bb:e3:e1:fd:47:c2:9d:b9:e2:f6:51:69: 12:72:04:80:f2:f3:d0:3d:b8:4d:17:0f:70:e5:fb: af:45:f6:87:79:bc:9c:db:0a:37:c7:f5:07:e8:ee: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E9:83:6D:73:A3:D8:7F:E9:15:34:66:CC:F3:3E:C5:D3:81:28:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9a555d5-b0a9-31a0-8cfa-caba25a0fb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5d:73:cb:bd:31:57:38:4f:ca:a8:08:4c:07:28:15:32:28: 63:d6:e1:fe:07:bd:48:e3:8b:52:ba:a5:20:83:8b:8f:3d:fb: 06:77:c3:8c:49:c6:2d:2c:7b:37:73:ff:a1:92:04:41:0d:3e: 31:0b:12:21:4b:69:81:64:48:62:85:2c:bd:fd:dd:3a:1d:db: 9d:f2:d8:74:cf:60:f5:9d:e6:d7:80:c1:f6:d1:2f:d2:dd:e5: 7f:71:91:c2:7e:92:51:0e:73:c0:62:33:78:17:3b:36:33:cb: 67:3c:4f:0c:76:3b:87:2f:15:60:56:ab:05:2c:a3:89:1c:df: 75:0e:9e:f9:9b:ad:20:ca:fe:2b:a4:69:94:15:c8:01:46:21: 16:45:19:cd:d7:03:ea:30:7d:b3:27:ca:8b:5c:3a:ea:89:07: 84:24:43:e5:9d:b0:c5:87:6c:ef:5c:3f:fb:ba:ca:2f:61:49: 75:d4:03:53:6b:98:0d:5f:f7:96:a6:db:33:c2:af:90:eb:41: f7:24:8a:15:03:c8:84:08:42:dd:f3:28:ac:5e:b5:4d:c7:24: 06:b9:32:71:c3:93:f3:4c:3c:c5:f5:f7:b9:e7:10:4b:b5:40: 1a:93:ff:81:6b:75:06:a9:fe:21:8d:13:9a:81:11:86:08:d1: 90:54:02:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZonmTBwcG+m0s+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OTA2Y2FkZDYtYTQ1YS00NzU4LTg1NWItZmYxMzAzNGU0NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLc0hyXCtpveFbmh7f/TdE+sGlCUdTLP6eh/ zcuCgr+sxegSbrFo1M1WZQtUkgaZtaPSNK//OHzeShumLj6kfjqdhrCet9ou/zcU BIIQuRjK14eHeq81tpVYAuJb9kT+AjpEC9stRG+uDS7aFjX5+XNf1ZAszrALaupA lbxiSUq0Hsg4R8bXtCzO70/nucY1BDztwj0nG6g8pD6E+TfwojgBeshV/CxtpWst rn5qxtIyVEZS6DxX1mnbRc1HSaIGg3p5dbPzg2jJ799vgXia04RuUdK74+H9R8Kd ueL2UWkScgSA8vPQPbhNFw9w5fuvRfaHebyc2wo3x/UH6O5f9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHpg21zo9h/6RU0ZszzPsXTgSiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzlhNTU1ZDUtYjBhOS0z MWEwLThjZmEtY2FiYTI1YTBmYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEldc8u9MVc4T8qoCEwHKBUyKGPW4f4HvUjji1K6pSCDi489+wZ3w4xJ xi0sezdz/6GSBEENPjELEiFLaYFkSGKFLL393Tod253y2HTPYPWd5teAwfbRL9Ld 5X9xkcJ+klEOc8BiM3gXOzYzy2c8Twx2O4cvFWBWqwUso4kc33UOnvmbrSDK/iuk aZQVyAFGIRZFGc3XA+owfbMnyotcOuqJB4QkQ+WdsMWHbO9cP/u6yi9hSXXUA1Nr mA1f95am2zPCr5DrQfckihUDyIQIQt3zKKxetU3HJAa5MnHDk/NMPMX197nnEEu1 QBqT/4FrdQap/iGNE5qBEYYI0ZBUAoo= -----END CERTIFICATE-----Generated at Sun Jan 25 09:29:58 2026 by rpki-client