This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8c7319a-caff-3be8-9a9e-4d804bdadf32.roa
File: e8c7319a-caff-3be8-9a9e-4d804bdadf32.roa (raw, json)
Hash identifier: hWB5BbRqqJ8sbr7qco/+8naJmIjU3nmghxM111g+RS8=
Subject key identifier: 37:3E:EB:42:5A:0C:EE:3C:25:D3:D0:13:26:38:D9:BC:6E:78:FF:5C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584C566713B050B29F3A536BD780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8c7319a-caff-3be8-9a9e-4d804bdadf32.roa
Signing time: Sun 28 Dec 2025 14:00:38 +0000
ROA not before: Sun 28 Dec 2025 14:00:38 +0000
ROA not after: Sat 28 Mar 2026 13:00:38 +0000
asID: 22773
IP address blocks: 72.220.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:56:67:13:b0:50:b2:9f:3a:53:6b:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 28 14:00:38 2025 GMT
Not After : Mar 28 13:00:38 2026 GMT
Subject: CN=3a1e9354-5702-4836-84b9-007234a9f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:47:be:92:38:4d:ac:8d:92:20:29:7f:eb:
90:de:b8:99:26:83:ab:78:c4:2f:b0:ad:70:cb:42:
22:b2:9b:ed:24:a9:10:c4:ab:6e:f5:da:10:69:be:
39:c9:9f:f4:cf:67:18:6b:e9:94:1f:e4:22:d2:7e:
fb:e5:47:03:3e:c8:de:d9:8b:37:f2:f5:0e:37:5c:
38:55:e5:85:da:fa:a9:e7:07:c2:4e:3d:a8:f3:a9:
69:7d:20:d2:60:56:54:85:f3:0d:19:00:d9:09:92:
81:5a:e4:69:2d:e3:59:e6:59:32:9a:ed:51:d5:d4:
d4:8b:bc:15:dc:b9:85:0f:ea:94:71:24:2c:d5:1b:
d0:ad:cd:e5:8a:7e:2e:7c:e1:6b:d4:fb:9d:2e:19:
3b:8c:95:f8:b7:91:84:4f:44:94:89:91:ce:b7:d3:
ca:6a:64:fa:e9:da:a5:c9:5e:24:f6:64:d9:84:85:
e1:c9:a0:13:05:df:79:74:f5:a6:b3:da:e1:79:18:
91:b1:6d:22:1f:75:f4:89:4d:2c:e6:4d:17:d7:d1:
f4:a7:ac:48:2f:e3:b5:23:85:79:c5:d2:1f:88:4c:
82:c2:42:3c:1d:4c:2e:04:00:d6:e3:b4:65:ad:aa:
b0:9f:38:5b:86:9c:c0:f9:e4:34:28:53:80:7e:a3:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:EB:42:5A:0C:EE:3C:25:D3:D0:13:26:38:D9:BC:6E:78:FF:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8c7319a-caff-3be8-9a9e-4d804bdadf32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.220.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:96:e1:fb:01:69:92:bf:57:24:84:1f:56:ca:bc:08:89:b8:
8c:cb:ce:e8:de:26:2e:fc:87:0f:5d:05:8c:c2:3c:d4:52:fc:
68:a9:ae:8b:e3:e5:e8:3d:24:b0:c8:59:29:ca:c3:7e:4e:af:
42:86:e2:d0:0b:70:85:7f:e4:da:e0:45:de:db:58:98:6e:62:
b1:24:99:7a:6a:2c:92:52:23:39:2e:95:24:22:b3:fc:8e:53:
5b:35:37:a4:7e:59:89:05:3c:ca:75:bd:ea:8e:a9:bc:bb:a4:
1b:93:f7:8f:36:45:66:7c:cc:b6:04:07:df:72:db:97:ce:dd:
94:26:3e:ae:e3:44:88:7f:8e:3f:de:4b:12:08:c4:fc:3b:3a:
6a:af:fd:12:44:f2:cf:62:6e:c1:b0:67:70:81:6b:3b:84:ae:
d1:98:c0:da:06:39:70:3f:fa:64:5e:9e:19:e8:21:ac:9d:31:
25:35:1f:a2:45:9b:cf:9f:5a:ae:ae:e8:14:cc:1f:a1:44:52:
3c:03:f4:1b:71:15:b4:b5:ad:19:4f:84:37:02:42:f9:a5:13:
b9:e4:54:6c:13:29:c7:29:25:b1:ec:67:55:93:33:b0:ff:31:
1d:38:01:41:84:4f:3a:ce:45:84:94:87:28:22:b8:3c:9a:2b:
b8:39:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:32:07 2026 by rpki-client