This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da518119-c1e0-3fe4-8616-c43cc92ca7cf.roa File: da518119-c1e0-3fe4-8616-c43cc92ca7cf.roa (raw, json) Hash identifier: HHmGFrU2Qq6upguNFOfgotY953YrUyeTs2hSJIE1IJk= Subject key identifier: DD:18:BB:85:15:D3:8D:5C:A4:8F:21:C7:6B:02:91:B2:A3:F4:31:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56669638440670FBFBEBED80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da518119-c1e0-3fe4-8616-c43cc92ca7cf.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:96:38:44:06:70:fb:fb:eb:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=256284b0-a6cb-4217-8ecd-6c779103bca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:5f:c0:d9:3a:67:10:37:cc:29:a6:4c:75: 3b:86:79:d9:ef:36:91:8f:c5:6a:1c:d1:7c:9e:3e: 22:65:b4:6f:94:f5:08:7f:2e:2b:04:08:5a:d9:b3: 68:ba:65:cc:15:28:f5:c1:55:e5:e8:ac:25:0f:02: 33:1d:17:56:9a:d6:ee:e4:09:6a:18:9f:cb:04:df: 82:94:90:95:5b:48:c3:b8:62:61:94:6d:c2:8e:8f: 49:f0:88:6e:36:4c:2d:53:ac:74:6d:5c:8a:15:3c: 9f:02:25:75:11:e4:df:16:78:b0:af:6a:0f:8b:82: e3:3b:d0:8f:fb:db:52:d6:68:9e:b7:bd:58:6a:2c: 7e:ea:f8:c0:21:e7:9a:fe:5e:c8:56:d3:15:12:43: 70:2b:90:06:98:ec:59:71:f2:2a:2d:cf:36:84:70: f0:3d:c3:96:79:84:f3:2c:f1:30:69:b6:c9:c2:03: 28:36:b7:d6:98:45:57:e8:e3:a7:81:5f:7b:76:75: 4d:94:98:1a:eb:97:f6:01:43:f5:cd:16:b5:e9:3e: 88:56:1e:eb:ea:7e:a8:06:16:ee:15:74:d8:97:7d: 15:68:d3:a4:4c:f2:58:98:ef:96:3f:d6:f8:ca:eb: 24:b8:ac:0c:15:9c:b9:1e:b0:f6:76:c6:04:b1:05: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:18:BB:85:15:D3:8D:5C:A4:8F:21:C7:6B:02:91:B2:A3:F4:31:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da518119-c1e0-3fe4-8616-c43cc92ca7cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:38:6a:cb:2e:0a:36:f8:0f:25:e3:41:53:d9:89:f4:a8:87: dd:2b:bf:f4:48:34:c9:95:a9:14:43:b8:94:4b:24:d0:31:92: df:52:ff:c0:fc:1a:97:2e:21:11:4d:e5:50:bb:44:00:39:76: 8c:38:81:29:a4:1b:5a:a9:bf:31:6b:2b:7e:ec:a5:6b:82:e2: 91:37:ce:6b:34:3c:1c:0f:ee:1e:4b:6a:bc:7c:fc:1d:64:68: a8:41:b9:75:b4:3d:5b:4d:7f:29:06:fb:0c:e3:38:e0:8c:89: 70:8f:cf:09:f9:7c:b6:d5:c7:53:6c:e7:e2:22:73:95:82:56: bd:10:e7:32:30:f0:d1:06:d8:2c:1e:04:f0:c8:c7:fa:1c:75: c7:0c:b3:fc:7c:ef:3e:5d:7b:dc:cb:ce:99:e7:e7:55:7f:bf: 32:df:93:b7:d2:ff:a5:96:e6:c4:a9:52:ef:d3:46:20:e0:ac: b8:ad:8d:0f:d6:a1:60:28:09:5c:83:81:09:a8:33:49:bb:17: 05:18:e9:12:6c:dd:f8:f7:fb:15:e7:01:09:00:09:ea:70:69: b5:da:b3:67:80:cf:8c:10:b4:e5:8a:82:d2:ac:60:e8:52:1d: 1e:43:6e:a9:72:d7:ad:2f:18:8f:11:c0:9d:33:64:a0:44:40: 35:32:88:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZpY4RAZw+/vr7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MjU2Mjg0YjAtYTZjYi00MjE3LThlY2QtNmM3NzkxMDNiY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFfwNk6ZxA3zCmmTHU7hnnZ7zaRj8VqHNF8 nj4iZbRvlPUIfy4rBAha2bNoumXMFSj1wVXl6KwlDwIzHRdWmtbu5AlqGJ/LBN+C lJCVW0jDuGJhlG3Cjo9J8IhuNkwtU6x0bVyKFTyfAiV1EeTfFniwr2oPi4LjO9CP +9tS1miet71Yaix+6vjAIeea/l7IVtMVEkNwK5AGmOxZcfIqLc82hHDwPcOWeYTz LPEwabbJwgMoNrfWmEVX6OOngV97dnVNlJga65f2AUP1zRa16T6IVh7r6n6oBhbu FXTYl30VaNOkTPJYmO+WP9b4yuskuKwMFZy5HrD2dsYEsQWfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0Yu4UV041cpI8hx2sCkbKj9DGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGE1MTgxMTktYzFlMC0z ZmU0LTg2MTYtYzQzY2M5MmNhN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD44assuCjb4DyXjQVPZifSoh90rv/RINMmVqRRDuJRLJNAxkt9S/8D8 GpcuIRFN5VC7RAA5dow4gSmkG1qpvzFrK37spWuC4pE3zms0PBwP7h5Larx8/B1k aKhBuXW0PVtNfykG+wzjOOCMiXCPzwn5fLbVx1Ns5+Iic5WCVr0Q5zIw8NEG2Cwe BPDIx/ocdccMs/x87z5de9zLzpnn51V/vzLfk7fS/6WW5sSpUu/TRiDgrLitjQ/W oWAoCVyDgQmoM0m7FwUY6RJs3fj3+xXnAQkACepwabXas2eAz4wQtOWKgtKsYOhS HR5Dbqly160vGI8RwJ0zZKBEQDUyiDI= -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:02 2026 by rpki-client