This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa File: da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa (raw, json) Hash identifier: 0Nuz8lPqlyn7hLGVB8EKa9WHbL0ZqlEEzxXDVl9x5MA= Subject key identifier: 0F:0E:5A:0B:63:86:82:98:12:EC:ED:41:51:69:F5:6C:E3:84:51:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56668A94D973D7F8555D3F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:8a:94:d9:73:d7:f8:55:5d:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=caf268e4-ada5-4a4d-a0e4-96d55d0e4db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:71:49:1e:68:d4:4d:4f:b3:c5:16:78:00: af:fd:15:b7:c3:c5:5d:58:41:32:66:c4:01:b9:60: 85:e0:c8:f0:a1:40:62:4b:dc:ef:31:6e:94:83:f7: c9:64:52:90:02:04:66:8a:5e:af:38:9d:e0:0f:9a: 5f:97:17:6e:06:bc:74:4e:b0:35:2e:d7:f9:33:0b: ee:be:c2:f3:1d:f7:47:a0:76:0c:23:2b:11:69:10: ab:8f:d5:d0:bb:b6:a8:ed:61:d9:4b:f8:4b:45:ef: 7a:da:3f:a9:63:67:84:ab:47:51:37:c2:c8:de:b9: 20:bc:6f:71:2c:c5:7c:5e:23:c5:76:ae:db:40:f9: 53:27:5e:64:07:7d:f1:ab:75:31:b9:ca:06:bf:a5: e7:25:9f:b1:5a:61:fe:bb:d0:29:89:a0:cd:41:27: 92:0a:c0:5d:fd:68:7c:2f:15:66:5a:0e:63:42:6a: be:78:86:39:87:cf:93:8e:78:a7:bd:3d:f4:09:73: 03:60:4d:cf:d5:c4:a9:81:bc:43:df:60:92:0d:75: 64:db:68:22:7e:9a:1d:9e:21:40:37:99:14:f9:c3: 42:81:bf:5d:fa:8c:56:d2:89:9a:8e:24:f3:48:59: 2d:e0:75:de:d4:f7:cf:28:a1:a0:9d:b4:fc:e6:af: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0E:5A:0B:63:86:82:98:12:EC:ED:41:51:69:F5:6C:E3:84:51:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da26ae0c-a09e-341f-82f2-b20d10a0e82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1a:48:bd:32:63:0d:14:f3:8c:a6:1e:17:4d:f4:be:6b:45: 6e:57:c1:f2:b1:46:c1:4b:66:db:52:d8:64:6b:9b:3b:99:fd: 45:cc:8a:a9:9d:8c:4e:e3:36:d6:1e:84:be:c2:5f:ee:5f:34: 25:62:89:09:07:4b:e4:a4:2d:3a:db:52:a5:0a:96:b1:62:db: 48:f1:2f:21:fa:16:53:da:ec:9e:82:9e:67:1b:9d:e2:e5:f1: 9a:37:9b:24:ee:9d:3f:12:4c:4e:31:5d:f5:0a:c6:bc:42:f6: c8:a0:5f:a4:a8:1c:62:5a:7b:fc:47:10:7b:52:0c:98:f5:a2: 3f:3f:08:0d:fd:a1:5c:0b:d5:36:86:3e:8d:12:25:7a:c6:c5: ec:29:0b:6a:e6:10:d4:bb:66:5c:db:b4:f4:4f:ec:8e:c3:6f: a4:3f:21:88:95:cd:c8:84:0b:01:37:cc:58:69:41:4c:b2:a5: 72:d3:9f:47:62:61:4a:fd:bb:2a:5d:c7:45:f3:f5:66:84:d6: 6f:ff:85:02:46:34:c9:fc:5f:72:2e:1a:94:6f:9f:9c:0d:9e: 4f:9a:5c:3f:99:cf:10:e5:a5:f5:a9:21:d4:d3:6e:0d:ec:22: 96:63:a5:f6:db:be:4d:db:98:34:0e:2e:69:9a:aa:e6:61:ad: d4:b1:88:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZoqU2XPX+FVdP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk Y2FmMjY4ZTQtYWRhNS00YTRkLWEwZTQtOTZkNTVkMGU0ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZxSR5o1E1Ps8UWeACv/RW3w8VdWEEyZsQB uWCF4MjwoUBiS9zvMW6Ug/fJZFKQAgRmil6vOJ3gD5pflxduBrx0TrA1Ltf5Mwvu vsLzHfdHoHYMIysRaRCrj9XQu7ao7WHZS/hLRe962j+pY2eEq0dRN8LI3rkgvG9x LMV8XiPFdq7bQPlTJ15kB33xq3UxucoGv6XnJZ+xWmH+u9ApiaDNQSeSCsBd/Wh8 LxVmWg5jQmq+eIY5h8+TjninvT30CXMDYE3P1cSpgbxD32CSDXVk22gifpodniFA N5kU+cNCgb9d+oxW0omajiTzSFkt4HXe1PfPKKGgnbT85q97/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8OWgtjhoKYEuztQVFp9WzjhFEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGEyNmFlMGMtYTA5ZS0z NDFmLTgyZjItYjIwZDEwYTBlODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoaSL0yYw0U84ymHhdN9L5rRW5XwfKxRsFLZttS2GRrmzuZ/UXMiqmd jE7jNtYehL7CX+5fNCViiQkHS+SkLTrbUqUKlrFi20jxLyH6FlPa7J6CnmcbneLl 8Zo3myTunT8STE4xXfUKxrxC9sigX6SoHGJae/xHEHtSDJj1oj8/CA39oVwL1TaG Po0SJXrGxewpC2rmENS7ZlzbtPRP7I7Db6Q/IYiVzciECwE3zFhpQUyypXLTn0di YUr9uypdx0Xz9WaE1m//hQJGNMn8X3IuGpRvn5wNnk+aXD+ZzxDlpfWpIdTTbg3s IpZjpfbbvk3bmDQOLmmaquZhrdSxiB0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:57 2026 by rpki-client