This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd5db9f8-a247-3c41-8788-79720bdafb6b.roa
File: cd5db9f8-a247-3c41-8788-79720bdafb6b.roa (raw, json)
Hash identifier: 7tEJ/n6UHewObV3b4SA35E2ZM820inILLJMphsRCr+Y=
Subject key identifier: 65:DC:DB:41:B3:3A:09:64:88:B8:63:38:44:5A:82:84:0A:9F:5E:25
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584C5666E8A61CDB4A16B45A3980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd5db9f8-a247-3c41-8788-79720bdafb6b.roa
Signing time: Sun 28 Dec 2025 14:00:38 +0000
ROA not before: Sun 28 Dec 2025 14:00:38 +0000
ROA not after: Sat 28 Mar 2026 13:00:38 +0000
asID: 22773
IP address blocks: 72.218.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:56:66:e8:a6:1c:db:4a:16:b4:5a:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 28 14:00:38 2025 GMT
Not After : Mar 28 13:00:38 2026 GMT
Subject: CN=a9d6ee0c-b36e-4110-9856-a76c06f154e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:77:e3:15:1a:c8:ef:b9:58:30:b4:bc:d0:
62:0c:8d:c8:92:f3:f8:d6:0e:e8:9d:76:e5:1d:e1:
72:10:a0:c6:4c:9d:cf:7b:d9:90:94:d4:6c:fe:9d:
bc:f9:bc:47:67:00:af:25:2b:2e:1e:66:4f:1b:94:
f2:47:eb:2e:f4:56:a5:dc:f5:77:5c:5e:0e:03:57:
f0:6c:a6:60:a7:4e:96:6f:54:5f:6f:7d:1b:7f:21:
39:b8:ee:76:54:98:1e:79:b4:65:95:0e:1b:1b:45:
45:34:e8:e5:6f:83:a0:df:60:28:4c:9a:22:81:7e:
73:8c:46:d0:b8:4c:82:b7:78:2d:aa:15:47:d2:9c:
44:b5:e6:76:18:f1:22:2f:18:e7:79:ca:3c:17:4d:
4e:c4:bd:49:2b:9a:c3:75:72:0c:00:dc:d4:d6:f5:
4d:7d:c6:c6:5c:b9:fd:89:3f:dc:29:a9:79:53:d4:
ac:f5:6d:07:f7:07:38:77:49:bb:a9:fb:a3:b5:32:
b4:27:e0:0d:a5:fa:17:e7:ea:57:52:a1:95:8a:8f:
f7:df:24:dd:6b:ae:c1:09:37:b2:ec:5b:e2:11:aa:
cc:79:95:14:3d:e5:3c:0e:10:a9:1b:08:71:ca:bf:
57:37:ec:ee:72:02:2f:dd:10:03:d4:7d:1e:be:61:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:DB:41:B3:3A:09:64:88:B8:63:38:44:5A:82:84:0A:9F:5E:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd5db9f8-a247-3c41-8788-79720bdafb6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.218.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:39:c2:e1:be:38:a2:ec:84:68:cd:f3:63:12:7e:07:6c:93:
9c:1e:94:68:3d:44:4b:e8:bc:dd:2d:48:aa:b4:de:2c:8e:96:
f0:39:b4:36:98:31:50:13:2b:2a:c3:df:a9:c8:d9:83:80:50:
0d:b1:8d:23:7a:b5:ef:ba:fd:a2:0f:9e:53:0c:3d:1d:a7:c8:
0c:66:e2:37:54:a7:4e:7e:9f:07:c3:69:32:bb:c7:df:ba:d3:
c8:54:96:1f:05:e4:7c:c5:84:50:95:7e:cc:34:1c:c1:cd:e4:
9b:13:21:72:cb:21:79:9c:1f:40:17:a7:8c:7c:f1:97:8a:cd:
8b:b4:15:65:df:63:19:32:97:d2:be:26:11:1c:74:b1:02:be:
c3:97:f1:77:de:93:b5:ea:ec:83:52:28:03:16:73:d2:1a:21:
81:75:ed:26:3e:fa:01:d7:3d:ce:aa:d2:54:46:26:2c:5f:25:
44:0c:5c:54:bf:3c:26:27:3a:5a:59:44:81:0a:d9:60:11:b6:
d8:5c:5f:b2:1c:c2:b5:ef:a7:11:6d:0d:76:6c:9a:c8:42:f5:
05:d1:05:56:fd:8b:8f:7f:db:67:b9:24:f9:e4:68:d5:50:14:
68:f5:a2:6d:df:0a:24:b1:c0:e4:1c:82:ef:90:51:37:b8:b0:
33:06:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:07:37 2026 by rpki-client