This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9ede2a7-8572-3e6e-a018-52fb8cae8a18.roa File: c9ede2a7-8572-3e6e-a018-52fb8cae8a18.roa (raw, json) Hash identifier: pmPseK3IBo0odKh50dlfEIS5kCCZ+RIYP/c2A8J6tFg= Subject key identifier: E4:0B:15:3D:C9:3C:8E:80:82:5E:82:ED:42:56:B5:8B:3A:59:8B:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB66E959C0F8B75A3046E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9ede2a7-8572-3e6e-a018-52fb8cae8a18.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.217.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:66:e9:59:c0:f8:b7:5a:30:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=b258cb87-c009-4cdb-8c5a-cc72e05a8bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:1a:88:f5:ca:e8:34:6e:df:cd:50:5c:a6: f1:5f:cb:82:35:58:bf:69:16:b9:00:f0:f2:86:ff: 03:d0:ae:3a:28:4f:82:a2:ba:39:98:aa:14:0b:84: 95:d6:d1:e9:30:83:31:40:96:93:53:41:9d:1c:5e: f0:4b:87:0a:32:d5:18:6d:5e:06:1b:0f:1f:bb:25: 7a:4b:2b:df:aa:fa:9c:ac:0f:c9:b1:79:b6:a8:e0: b4:73:af:b2:dd:86:4f:72:5e:90:15:4b:ca:58:ac: c2:40:c7:2a:81:15:4d:59:c8:e3:9b:a5:fb:52:94: 8a:b0:44:fb:08:c4:52:84:6f:6c:7d:02:e7:62:48: de:d8:91:89:4d:34:04:4d:2f:65:54:f0:c3:4c:ed: 3b:f7:7c:62:b3:75:c6:f3:91:a4:b3:20:b6:73:01: c5:5c:85:96:07:3d:6d:39:01:08:79:7b:5e:23:dd: e2:03:85:19:aa:a8:db:3f:2d:73:23:6d:8d:6c:11: cc:a4:e0:85:6c:e4:7e:a8:91:0c:d8:13:7b:68:a6: f2:2b:6f:ef:7c:e3:25:38:f0:8a:7d:f8:27:61:c2: d4:b5:bc:ff:64:d4:eb:f1:b9:41:85:fb:a8:9a:99: 7c:74:32:d0:ce:ac:e5:d9:8f:e4:24:88:cd:02:96: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:15:3D:C9:3C:8E:80:82:5E:82:ED:42:56:B5:8B:3A:59:8B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9ede2a7-8572-3e6e-a018-52fb8cae8a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:03:58:61:8a:63:1a:c0:38:38:5e:d6:63:34:50:92:31:76: 1a:94:ba:34:3f:a3:32:5e:5d:bf:7a:3d:7b:fc:f9:1e:97:64: 06:20:fb:b0:bb:5e:32:80:71:d6:d0:6d:6b:df:4c:c2:94:79: 84:3b:74:ec:fb:78:c4:81:32:cd:f0:20:3b:f7:d2:40:64:f2: d3:05:a2:d9:a5:0b:43:92:e1:81:21:20:89:f4:7c:f5:3a:12: cf:78:71:7f:7f:66:4d:01:e5:06:94:39:58:11:7c:28:bf:5b: 0b:e6:fc:e7:a3:86:d9:74:5b:10:3d:11:79:8a:2b:96:71:a3: 37:0e:30:68:b1:48:ba:b9:5b:da:c0:77:a4:98:08:07:97:61: 9c:69:f9:88:38:c7:7a:3b:78:d8:71:f0:fd:de:b0:10:a0:19: 28:6f:96:0d:0a:61:4d:ef:61:d9:0c:53:84:7d:2b:e0:4a:01: ac:d7:3f:00:3f:d2:12:e7:8c:38:55:2a:bb:83:e8:e7:f0:1e: 28:7b:04:b2:c5:ab:6a:48:9b:20:8e:ce:55:08:e2:ee:be:a2: 5f:43:46:2e:b3:43:a9:7f:7e:e4:c9:70:81:d2:f3:37:02:c2: 69:2a:ca:c3:88:de:c1:b6:08:42:b6:2e:ff:12:de:c4:cb:f7: a7:40:c4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/22bpWcD4t1owRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YjI1OGNiODctYzAwOS00Y2RiLThjNWEtY2M3MmUwNWE4YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7MaiPXK6DRu381QXKbxX8uCNVi/aRa5APDy hv8D0K46KE+Coro5mKoUC4SV1tHpMIMxQJaTU0GdHF7wS4cKMtUYbV4GGw8fuyV6 SyvfqvqcrA/JsXm2qOC0c6+y3YZPcl6QFUvKWKzCQMcqgRVNWcjjm6X7UpSKsET7 CMRShG9sfQLnYkje2JGJTTQETS9lVPDDTO0793xis3XG85GksyC2cwHFXIWWBz1t OQEIeXteI93iA4UZqqjbPy1zI22NbBHMpOCFbOR+qJEM2BN7aKbyK2/vfOMlOPCK ffgnYcLUtbz/ZNTr8blBhfuompl8dDLQzqzl2Y/kJIjNApbRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQLFT3JPI6Agl6C7UJWtYs6WYtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzllZGUyYTctODU3Mi0z ZTZlLWEwMTgtNTJmYjhjYWU4YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUDWGGKYxrAODhe1mM0UJIxdhqUujQ/ozJeXb96PXv8+R6XZAYg+7C7 XjKAcdbQbWvfTMKUeYQ7dOz7eMSBMs3wIDv30kBk8tMFotmlC0OS4YEhIIn0fPU6 Es94cX9/Zk0B5QaUOVgRfCi/Wwvm/Oejhtl0WxA9EXmKK5ZxozcOMGixSLq5W9rA d6SYCAeXYZxp+Yg4x3o7eNhx8P3esBCgGShvlg0KYU3vYdkMU4R9K+BKAazXPwA/ 0hLnjDhVKruD6OfwHih7BLLFq2pImyCOzlUI4u6+ol9DRi6zQ6l/fuTJcIHS8zcC wmkqysOI3sG2CEK2Lv8S3sTL96dAxMc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:56 2025 by rpki-client