This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa File: caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa (raw, json) Hash identifier: 4mllr5rIZw1s+u8i+yrzQ81KGhxGvr6KUiaII8ZB3VE= Subject key identifier: 9A:02:FB:1A:5E:A6:56:83:08:24:3A:10:AF:93:AF:AA:A4:00:17:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB8BE7DF33009ED2DBB580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.212.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:8b:e7:df:33:00:9e:d2:db:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=9d580b7a-9966-41ce-b35c-902d3a3339f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:e5:45:27:65:90:27:63:c7:15:77:c8:b1: 59:0e:bd:2e:d5:83:b6:7b:77:29:0f:d1:2c:2c:2b: 6c:42:db:fb:2e:4a:88:23:ae:c6:07:a3:75:16:79: 0d:7c:9b:17:5b:ca:26:c0:d7:3f:a9:ce:76:f9:e6: 66:04:2d:40:22:40:be:7a:16:d8:60:99:3e:3e:e0: ea:41:a4:29:56:5b:0b:b2:b1:a7:43:23:74:ea:9b: 4c:73:61:04:2d:b3:6d:19:b8:fe:8b:1f:d9:93:82: 44:a6:31:7b:c4:76:4a:27:b8:8c:33:7b:04:dc:af: 06:b3:14:09:de:09:cf:dd:13:0d:59:32:b4:86:5c: 20:55:6c:ea:de:8a:79:18:15:3c:25:01:5e:e0:2b: 68:41:c6:c5:6b:9b:9d:ed:8b:64:e5:ef:56:06:7d: 1c:1c:5a:e8:e4:a5:61:67:3d:94:8e:6f:f2:97:16: 7a:03:40:e9:e2:c9:ab:00:d4:7c:31:0d:6f:ca:6c: aa:f1:48:57:d1:72:07:df:d6:18:61:6a:94:b7:2c: 6f:81:89:1b:53:41:42:9d:5e:68:b0:32:38:1e:c7: 49:93:e6:1b:de:e4:87:1a:6f:f0:22:3e:21:fa:55: d1:0d:56:86:84:3b:d5:8c:67:0c:e8:3c:25:79:d0: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:FB:1A:5E:A6:56:83:08:24:3A:10:AF:93:AF:AA:A4:00:17:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caf8bb34-3daa-3b80-8047-b4a5d711a2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:16:76:5f:9a:f6:8b:65:2b:dc:95:88:1f:a4:b7:dc:01:54: e4:25:22:d8:12:1d:e1:94:14:e5:2d:49:be:40:f4:f6:ee:fd: d5:c3:3d:ec:d9:85:b5:52:80:84:c7:f2:f4:c3:8b:42:67:06: e4:54:00:9c:14:ba:bf:80:2a:22:27:56:d7:f3:1e:f4:dc:78: 9a:92:6c:ff:24:b5:5b:d6:f6:10:3d:c7:a9:19:0f:10:44:80: 9f:95:cb:1c:5a:e2:9c:60:e9:9c:53:f8:81:fc:44:e6:13:9d: df:c2:90:3f:03:d9:4f:6c:a4:71:06:d4:84:fb:a5:c3:88:62: ed:64:d0:5b:3b:45:7f:e2:be:7b:89:49:4f:89:d3:c4:75:4b: 7d:8b:15:56:38:90:f3:95:42:fa:57:55:4e:c0:63:c8:87:31: 9f:fe:4e:c3:50:be:15:c2:29:43:c5:e8:16:6f:45:ab:2f:5f: 30:6b:3f:6a:7e:f6:1f:8b:92:76:9e:39:ec:56:7f:07:cc:8f: 4b:be:a9:bf:b2:5d:0e:f6:58:a4:13:3c:ff:94:6f:de:aa:dd: 99:b8:40:ca:33:2a:27:0e:be:de:ae:06:2b:25:ce:04:50:9d: 3c:8b:1c:91:9e:00:ad:21:89:71:f1:9a:0e:cf:1e:48:20:ea: 34:31:95:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/24vn3zMAntLbtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk OWQ1ODBiN2EtOTk2Ni00MWNlLWIzNWMtOTAyZDNhMzMzOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnPlRSdlkCdjxxV3yLFZDr0u1YO2e3cpD9Es LCtsQtv7LkqII67GB6N1FnkNfJsXW8omwNc/qc52+eZmBC1AIkC+ehbYYJk+PuDq QaQpVlsLsrGnQyN06ptMc2EELbNtGbj+ix/Zk4JEpjF7xHZKJ7iMM3sE3K8GsxQJ 3gnP3RMNWTK0hlwgVWzq3op5GBU8JQFe4CtoQcbFa5ud7Ytk5e9WBn0cHFro5KVh Zz2Ujm/ylxZ6A0Dp4smrANR8MQ1vymyq8UhX0XIH39YYYWqUtyxvgYkbU0FCnV5o sDI4HsdJk+Yb3uSHGm/wIj4h+lXRDVaGhDvVjGcM6DwledAmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoC+xpeplaDCCQ6EK+Tr6qkABcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FmOGJiMzQtM2RhYS0z YjgwLTgwNDctYjRhNWQ3MTFhMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNR1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYWdl+a9otlK9yViB+kt9wBVOQlItgSHeGUFOUtSb5A9Pbu/dXDPezZ hbVSgITH8vTDi0JnBuRUAJwUur+AKiInVtfzHvTceJqSbP8ktVvW9hA9x6kZDxBE gJ+Vyxxa4pxg6ZxT+IH8ROYTnd/CkD8D2U9spHEG1IT7pcOIYu1k0Fs7RX/ivnuJ SU+J08R1S32LFVY4kPOVQvpXVU7AY8iHMZ/+TsNQvhXCKUPF6BZvRasvXzBrP2p+ 9h+LknaeOexWfwfMj0u+qb+yXQ72WKQTPP+Ub96q3Zm4QMozKicOvt6uBislzgRQ nTyLHJGeAK0hiXHxmg7PHkgg6jQxlV4= -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:56 2025 by rpki-client