This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa File: e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa (raw, json) Hash identifier: CNNi14z4Lw9ezAHkWtR6SpbnGGf7VLL+sr1+wrgy5EA= Subject key identifier: 95:90:E2:3C:76:A5:86:F7:EB:BF:2D:89:A2:22:72:C9:73:DD:C1:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666B96A8BEF5BE71F6E0B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 174.65.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b9:6a:8b:ef:5b:e7:1f:6e:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=811e54e8-eb36-483f-bcd8-fe03dbe8b4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:c7:2b:75:65:87:82:b9:11:26:51:4d:11: 64:8e:ab:5f:ae:93:90:a0:a6:45:9f:3d:e6:61:69: 28:fa:57:3d:f3:fb:0b:14:07:22:e3:5f:63:fd:8f: fa:d9:a4:99:df:ee:e1:db:3f:4e:e4:a6:72:fd:13: 78:52:76:93:98:d8:b7:f6:89:88:d2:ec:00:06:5e: 7b:ac:6f:a0:6b:1e:b2:db:45:b6:5e:d5:2a:96:36: a7:9f:35:4d:44:fa:0a:16:ad:33:a3:de:95:d4:50: df:c2:b9:23:7c:78:4f:83:3c:6f:66:18:20:2b:e9: c8:14:25:57:42:47:e3:8f:ec:3c:62:2d:81:76:6a: fe:b2:c3:f5:e9:5f:48:89:48:70:6e:d9:7b:9c:0b: 2d:20:82:e5:d9:93:03:67:7d:15:d0:ba:ab:70:08: e0:f5:13:e7:c7:db:d3:b7:2b:d4:17:c3:d7:c4:0c: 9f:aa:fb:d9:af:23:07:cc:9d:d6:85:1d:d0:ba:c6: 45:e7:9b:7b:90:43:ec:a9:0b:41:c7:b5:1d:5d:3a: 67:3b:d0:ed:70:02:e5:d5:4b:59:25:86:4d:ea:5a: 92:ce:2f:a4:45:41:60:d4:84:b6:de:04:55:36:a4: 9b:15:21:12:94:21:81:a8:ee:42:db:62:f3:a3:94: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:90:E2:3C:76:A5:86:F7:EB:BF:2D:89:A2:22:72:C9:73:DD:C1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d1:10:39:38:6f:36:74:64:b5:ff:90:2d:f0:63:24:d9:a6: aa:b0:3f:14:e1:72:e1:c5:97:63:24:ce:12:c8:e5:c3:36:ac: c5:d9:4d:04:58:dd:8d:ea:3b:3a:68:9b:13:b7:1c:fa:3d:46: 4e:cd:a6:62:c6:21:f0:19:ca:52:6a:72:ba:ec:89:07:f9:db: fd:5b:3e:7d:43:45:60:95:3a:c8:0d:be:78:1a:91:47:3d:56: d8:fa:2f:e8:1d:0b:9c:90:7d:1b:e7:ae:80:bc:4f:d3:11:05: 1d:90:23:65:b4:64:73:cf:1c:b9:4f:43:79:19:4c:07:db:e4: 5a:20:0e:e0:f2:d8:ee:97:22:ec:e9:51:43:80:be:f9:b5:c9: c2:0a:52:2e:b4:36:5e:e9:46:aa:74:c3:3d:9c:3d:63:e2:77: 6a:5f:12:e5:7f:78:02:bd:35:b0:9b:12:88:33:ba:ae:94:e4: 9c:6b:1c:2a:17:61:d3:f8:fd:dc:91:eb:1e:a7:98:43:8e:2c: 4b:50:8c:b7:10:e2:46:4d:dc:29:28:78:f4:5c:07:5e:cb:9b: 20:b6:6e:75:22:46:5e:53:ab:4e:c6:b3:82:3d:81:73:7d:ee: 90:bb:f8:ea:7d:a4:4b:34:d9:72:0a:e7:4d:98:30:a7:72:66: 56:c5:3d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrlqi+9b5x9uC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ODExZTU0ZTgtZWIzNi00ODNmLWJjZDgtZmUwM2RiZThiNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHjHK3Vlh4K5ESZRTRFkjqtfrpOQoKZFnz3m YWko+lc98/sLFAci419j/Y/62aSZ3+7h2z9O5KZy/RN4UnaTmNi39omI0uwABl57 rG+gax6y20W2XtUqljannzVNRPoKFq0zo96V1FDfwrkjfHhPgzxvZhggK+nIFCVX Qkfjj+w8Yi2Bdmr+ssP16V9IiUhwbtl7nAstIILl2ZMDZ30V0LqrcAjg9RPnx9vT tyvUF8PXxAyfqvvZryMHzJ3WhR3QusZF55t7kEPsqQtBx7UdXTpnO9DtcALl1UtZ JYZN6lqSzi+kRUFg1IS23gRVNqSbFSESlCGBqO5C22Lzo5R0KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWQ4jx2pYb3678tiaIicslz3cGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTk4ZWI4NmYtYTFhYi0z N2QzLTgyNjktYmRkM2E3MWI0ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3REDk4bzZ0ZLX/kC3wYyTZpqqwPxThcuHFl2MkzhLI5cM2rMXZTQRY 3Y3qOzpomxO3HPo9Rk7NpmLGIfAZylJqcrrsiQf52/1bPn1DRWCVOsgNvngakUc9 Vtj6L+gdC5yQfRvnroC8T9MRBR2QI2W0ZHPPHLlPQ3kZTAfb5FogDuDy2O6XIuzp UUOAvvm1ycIKUi60Nl7pRqp0wz2cPWPid2pfEuV/eAK9NbCbEogzuq6U5JxrHCoX YdP4/dyR6x6nmEOOLEtQjLcQ4kZN3CkoePRcB17LmyC2bnUiRl5Tq07Gs4I9gXN9 7pC7+Op9pEs02XIK502YMKdyZlbFPR8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:45:32 2026 by rpki-client