This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/daa9aec1-2827-3f08-8c24-314645ad0942.roa File: daa9aec1-2827-3f08-8c24-314645ad0942.roa (raw, json) Hash identifier: DcDM5ETj4P1vjhB2Ve+KeUXhernOt0/HJrqDZJox0XE= Subject key identifier: 7C:B7:02:8D:E7:C4:B9:B8:A6:C0:30:B7:A8:2D:50:3B:99:80:7E:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB6B120B8F81DC95AEA620 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/daa9aec1-2827-3f08-8c24-314645ad0942.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.217.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:6b:12:0b:8f:81:dc:95:ae:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=0f16e778-4410-418d-8545-b050e6c77e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:73:3e:b7:7f:32:96:ae:e3:0a:c4:6c:bc:b8: b8:87:d4:59:bf:c3:98:d2:6f:2b:8e:b7:be:79:f5: 5c:dd:e1:cc:79:25:41:c3:46:1c:9c:93:cb:09:eb: e5:67:d7:66:55:b6:86:77:1a:cf:6c:72:4d:79:96: ca:14:13:29:fd:0c:da:b4:2b:1e:cc:09:4b:13:ca: d7:31:47:e3:c9:a4:07:f9:3a:87:8d:03:59:cc:4a: 9a:81:be:f5:8c:fa:33:ed:a0:dc:80:98:51:eb:fc: f4:8d:98:0c:10:d4:8a:bd:ca:85:b0:35:b8:ff:9f: 46:2a:30:80:e2:9e:cc:c1:16:93:43:1c:1a:b8:8b: 9d:95:b6:ee:5e:f9:07:49:74:28:2e:23:b8:4b:44: b0:93:cb:9e:08:8e:c2:25:a8:21:cf:13:44:3e:15: 8e:51:ea:f6:aa:ac:9b:0d:7c:d6:2f:c8:6b:40:39: fb:38:66:9a:12:84:8d:b8:11:87:3b:53:5f:d6:67: c9:23:1b:5b:af:27:77:25:4f:a0:f4:46:31:2c:49: 33:89:9d:5d:93:5c:28:db:aa:3c:a7:3d:3a:ff:a1: 28:ab:84:15:aa:4d:c0:60:d0:ab:04:be:9c:6b:fe: c0:59:d6:f0:66:3e:f7:b4:fd:ad:93:a8:9e:70:31: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B7:02:8D:E7:C4:B9:B8:A6:C0:30:B7:A8:2D:50:3B:99:80:7E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/daa9aec1-2827-3f08-8c24-314645ad0942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3c:6d:8f:98:3a:84:43:6f:b7:05:73:04:93:7a:f9:e8:be: 94:a1:f3:43:9e:5e:21:4d:3c:7e:06:f9:c6:8a:ac:c0:03:09: fc:34:2b:2a:ea:de:c4:3e:09:3f:e8:aa:d0:3c:14:ef:82:f3: c0:0f:03:70:3f:4b:86:6e:52:ad:9d:c0:68:09:d9:df:95:7e: 87:75:45:d2:63:a4:10:d2:7c:c2:21:e0:11:bb:70:41:dd:c3: 6c:42:b9:95:b7:f9:02:6b:d5:4f:15:42:59:59:32:7a:8a:c4: 50:99:4c:d7:1f:5d:8e:c8:ef:c1:45:a9:4a:bb:8c:ed:ab:b4: c3:fe:aa:8d:d5:de:48:02:66:9f:9d:da:2d:44:79:c9:fc:b1: 33:5c:49:d8:c0:03:87:07:a7:b6:52:b0:01:fc:b1:f0:c7:40: 64:48:78:91:b5:e5:e2:73:b8:60:42:ea:83:9e:3d:00:75:df: 71:48:af:8b:5a:01:3a:4a:6e:3a:5f:c8:a3:2e:19:eb:1e:97: 3b:31:84:e4:60:9b:d2:da:48:f7:bb:9c:51:4d:5b:d4:c2:c3: 35:19:a1:87:99:de:c1:14:f0:51:68:28:e8:2a:51:fb:c3:80: d9:64:50:0e:47:7d:7b:ea:e7:39:29:38:30:af:9e:b9:1f:49: 67:02:7e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/22sSC4+B3JWupiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MGYxNmU3NzgtNDQxMC00MThkLTg1NDUtYjA1MGU2Yzc3ZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83M+t38ylq7jCsRsvLi4h9RZv8OY0m8rjre+ efVc3eHMeSVBw0YcnJPLCevlZ9dmVbaGdxrPbHJNeZbKFBMp/QzatCsezAlLE8rX MUfjyaQH+TqHjQNZzEqagb71jPoz7aDcgJhR6/z0jZgMENSKvcqFsDW4/59GKjCA 4p7MwRaTQxwauIudlbbuXvkHSXQoLiO4S0Swk8ueCI7CJaghzxNEPhWOUer2qqyb DXzWL8hrQDn7OGaaEoSNuBGHO1Nf1mfJIxtbryd3JU+g9EYxLEkziZ1dk1wo26o8 pz06/6Eoq4QVqk3AYNCrBL6ca/7AWdbwZj73tP2tk6iecDG0HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy3Ao3nxLm4psAwt6gtUDuZgH5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGFhOWFlYzEtMjgyNy0z ZjA4LThjMjQtMzE0NjQ1YWQwOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI08bY+YOoRDb7cFcwSTevnovpSh80OeXiFNPH4G+caKrMADCfw0Kyrq 3sQ+CT/oqtA8FO+C88APA3A/S4ZuUq2dwGgJ2d+Vfod1RdJjpBDSfMIh4BG7cEHd w2xCuZW3+QJr1U8VQllZMnqKxFCZTNcfXY7I78FFqUq7jO2rtMP+qo3V3kgCZp+d 2i1Eecn8sTNcSdjAA4cHp7ZSsAH8sfDHQGRIeJG15eJzuGBC6oOePQB133FIr4ta ATpKbjpfyKMuGeselzsxhORgm9LaSPe7nFFNW9TCwzUZoYeZ3sEU8FFoKOgqUfvD gNlkUA5HfXvq5zkpODCvnrkfSWcCftY= -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:55 2025 by rpki-client