This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda1c97e-79b9-3f70-a14b-be333a43abb1.roa File: dda1c97e-79b9-3f70-a14b-be333a43abb1.roa (raw, json) Hash identifier: HptK86TtzNj/wDkWuCc3qR0WfcTmQj7GsMEkvfr8qHU= Subject key identifier: A7:96:AD:04:35:F5:54:A6:94:7E:57:1E:B7:38:9B:AB:98:03:21:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56668A371D428A7B866F7680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda1c97e-79b9-3f70-a14b-be333a43abb1.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:8a:37:1d:42:8a:7b:86:6f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=5cfe3a77-97a4-4761-a6db-ba4ff14a35ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:73:22:5b:18:6a:a2:a8:23:03:e3:23:ad: a8:94:6e:a0:5d:68:c5:48:4e:10:c1:d5:92:77:bc: 0d:4a:e2:04:9a:73:70:88:e9:b9:30:b0:94:f3:23: 76:b8:ab:e1:6e:70:b2:fb:0d:86:9c:d3:c4:92:55: 51:29:15:1b:17:52:0a:21:2e:db:dc:5a:cf:b2:aa: fb:e8:b2:3f:71:78:e3:b3:c4:9a:e5:54:d3:4c:17: 49:a9:f9:73:1a:a8:e2:bf:28:dd:6b:3d:95:3d:c8: 27:50:a0:6a:7f:de:81:61:0b:34:33:c5:db:21:c5: 4b:72:2f:ca:83:09:30:49:0b:9d:84:1c:71:dd:e5: 25:41:84:c0:dd:a0:ef:1f:ec:39:95:7d:74:3d:c2: 65:88:b4:1d:f5:09:ca:94:45:a5:e8:8e:95:62:83: d6:0d:b8:28:4e:25:6e:42:ae:34:2b:a3:7b:b8:95: f3:07:d5:35:5d:1b:1d:29:c1:e3:23:bd:a8:a9:37: 79:14:a7:0c:1d:d5:55:78:b0:03:1a:cb:3c:e3:c1: 04:bd:30:f6:1f:e8:c0:3a:e5:ee:09:c7:0e:0d:9f: ca:a0:52:0d:05:7d:9a:7a:e0:16:1b:55:74:1d:4c: 90:ba:27:45:ce:d7:7c:b1:87:9c:b4:8b:59:b6:9e: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:96:AD:04:35:F5:54:A6:94:7E:57:1E:B7:38:9B:AB:98:03:21:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda1c97e-79b9-3f70-a14b-be333a43abb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2a:a9:35:7a:5a:d5:1a:f2:87:36:d6:d8:48:47:36:62:fe: cc:aa:fe:cb:d9:6f:0a:69:6b:32:e2:37:47:a2:73:7e:15:62: 37:59:e9:5f:bd:0e:17:81:97:e0:4c:92:1e:8f:71:4f:e3:c8: b2:44:97:b7:67:f6:ed:ec:cc:d0:16:45:c4:19:92:e9:7c:10: 6a:79:04:e1:90:6c:11:0c:21:ec:bb:4b:a1:a0:ed:4d:55:9f: aa:b3:69:68:af:3b:6e:f2:2d:ba:46:f8:1d:b3:86:e6:0a:dd: d5:a7:43:6e:37:ef:9b:1f:cc:ea:45:34:27:e2:40:c3:89:5b: 20:e2:c9:6d:59:7e:ee:d1:16:e3:77:64:cb:19:98:42:cd:fd: e1:6e:c7:36:0a:95:d2:e4:db:9b:d7:62:4a:40:cb:2a:68:a0: c0:59:37:cf:eb:32:2a:74:0a:93:2d:2f:aa:91:8b:c6:fb:83: 66:bf:f4:db:05:f4:74:6f:9c:8e:d5:44:a5:d6:de:33:09:fb: ef:47:ea:50:39:88:4a:43:12:cb:6a:2a:db:fb:b0:41:73:5a: dc:4c:06:69:26:92:5c:98:93:24:19:36:1b:ef:9f:69:4e:a4: 56:51:e8:c9:9e:8b:3a:6f:28:be:a2:6b:f7:fb:48:8a:da:42: 40:3e:7e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZoo3HUKKe4ZvdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NWNmZTNhNzctOTdhNC00NzYxLWE2ZGItYmE0ZmYxNGEzNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEpzIlsYaqKoIwPjI62olG6gXWjFSE4QwdWS d7wNSuIEmnNwiOm5MLCU8yN2uKvhbnCy+w2GnNPEklVRKRUbF1IKIS7b3FrPsqr7 6LI/cXjjs8Sa5VTTTBdJqflzGqjivyjdaz2VPcgnUKBqf96BYQs0M8XbIcVLci/K gwkwSQudhBxx3eUlQYTA3aDvH+w5lX10PcJliLQd9QnKlEWl6I6VYoPWDbgoTiVu Qq40K6N7uJXzB9U1XRsdKcHjI72oqTd5FKcMHdVVeLADGss848EEvTD2H+jAOuXu CccODZ/KoFINBX2aeuAWG1V0HUyQuidFztd8sYectItZtp5d+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeWrQQ19VSmlH5XHrc4m6uYAyHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRhMWM5N2UtNzliOS0z ZjcwLWExNGItYmUzMzNhNDNhYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8qqTV6WtUa8oc21thIRzZi/syq/svZbwppazLiN0eic34VYjdZ6V+9 DheBl+BMkh6PcU/jyLJEl7dn9u3szNAWRcQZkul8EGp5BOGQbBEMIey7S6Gg7U1V n6qzaWivO27yLbpG+B2zhuYK3dWnQ24375sfzOpFNCfiQMOJWyDiyW1Zfu7RFuN3 ZMsZmELN/eFuxzYKldLk25vXYkpAyypooMBZN8/rMip0CpMtL6qRi8b7g2a/9NsF 9HRvnI7VRKXW3jMJ++9H6lA5iEpDEstqKtv7sEFzWtxMBmkmklyYkyQZNhvvn2lO pFZR6MmeizpvKL6ia/f7SIraQkA+fhk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:10:59 2026 by rpki-client