This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde73ae9-3fef-3a4f-b47d-c92df87f2077.roa File: fde73ae9-3fef-3a4f-b47d-c92df87f2077.roa (raw, json) Hash identifier: AgJoiPRQ2qgQ9qjw4MqtH7b52G+LiVlQ8vhNVIYt2dc= Subject key identifier: 21:4B:CA:BC:3B:A1:BD:19:33:2B:86:FC:D3:A4:B4:C6:A7:24:99:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBAC1E506CF0BEB6A040C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde73ae9-3fef-3a4f-b47d-c92df87f2077.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.208.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:ac:1e:50:6c:f0:be:b6:a0:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=885fa9c0-1bb3-4c91-9336-e04645deaaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:42:ab:5d:0f:0a:78:0c:19:4a:cf:62:ae: cf:85:fb:46:2a:dd:24:6b:c0:b0:8c:86:3d:71:2a: 2f:13:83:5e:ad:9a:30:88:9f:d2:b5:22:c7:9c:05: ba:01:45:31:a9:af:60:74:7e:73:ee:04:d9:f3:e0: 31:89:0b:fa:10:54:63:1f:93:ff:60:f5:f7:da:77: b7:76:c0:ed:12:13:80:e5:29:be:37:48:75:46:fe: 1e:53:c5:35:24:ee:e8:87:11:72:8a:19:eb:07:e0: 46:e6:43:29:58:e5:85:f1:5b:9f:fc:9e:d1:96:0b: c4:74:8a:77:6f:11:5d:09:4e:96:f1:c1:5a:07:df: f9:6c:46:a1:dc:cd:d1:36:5f:85:6c:87:20:b1:fb: d7:dd:f2:46:34:3a:30:89:9a:95:cf:0e:cd:b7:8d: 4f:be:4c:6d:37:60:73:8c:00:b5:8e:ec:69:6c:af: 40:ca:a2:96:13:13:e8:7e:ad:3e:96:27:a2:ef:7f: 72:be:5f:ee:e9:07:d3:5a:50:18:2e:82:05:54:9f: 1a:d3:73:0f:9d:f0:e4:6e:68:f9:c1:98:84:f0:2e: e8:e3:dc:3a:12:49:0f:92:0a:9e:46:24:eb:f3:56: a3:85:f6:bd:a4:88:6b:48:00:70:e5:de:ca:6a:1f: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:CA:BC:3B:A1:BD:19:33:2B:86:FC:D3:A4:B4:C6:A7:24:99:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde73ae9-3fef-3a4f-b47d-c92df87f2077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d1:da:4a:23:00:b8:16:ff:10:01:ef:61:a1:62:85:61:5f: a7:20:a9:29:48:d3:74:84:6b:8a:ec:d3:0f:a5:26:05:56:f4: e6:68:ce:d1:59:b2:47:7e:1c:20:40:bb:4c:72:06:32:6f:fd: 8f:b7:53:e6:6e:7c:2b:1e:b2:88:31:39:b6:36:f1:c6:d6:b7: ae:77:35:74:ee:78:7e:2f:44:49:e7:18:70:99:bd:68:f3:f3: 12:af:e4:e2:13:6f:f9:5f:80:18:b4:5e:b9:1c:1b:25:e3:23: 02:87:0f:f4:93:19:fe:08:94:92:40:76:4c:e0:d6:ec:00:3f: e5:2c:e6:f9:dc:84:c7:a4:bc:19:29:92:7d:e9:f1:0a:89:b3: ac:2c:89:c8:11:c6:8a:b2:c2:96:04:88:06:81:be:6c:8d:f6: 12:7c:f5:a9:c4:58:12:16:fd:5d:fe:ad:67:8a:a2:30:1d:0c: 46:63:b3:d3:13:0a:3e:08:6c:cf:3a:92:c5:ff:35:2b:c0:70: 28:38:a9:bc:34:c2:0e:c7:92:37:57:b4:ee:c8:29:51:35:76: 49:da:da:33:dc:bd:9e:33:b0:7c:43:a6:c1:fa:db:2e:f2:71: d3:00:56:e2:2a:7e:b6:59:e0:27:74:04:92:3f:c7:82:e4:17: 80:af:d2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/26weUGzwvragQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ODg1ZmE5YzAtMWJiMy00YzkxLTkzMzYtZTA0NjQ1ZGVhYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsztCq10PCngMGUrPYq7PhftGKt0ka8CwjIY9 cSovE4NerZowiJ/StSLHnAW6AUUxqa9gdH5z7gTZ8+AxiQv6EFRjH5P/YPX32ne3 dsDtEhOA5Sm+N0h1Rv4eU8U1JO7ohxFyihnrB+BG5kMpWOWF8Vuf/J7RlgvEdIp3 bxFdCU6W8cFaB9/5bEah3M3RNl+FbIcgsfvX3fJGNDowiZqVzw7Nt41PvkxtN2Bz jAC1juxpbK9AyqKWExPofq0+liei739yvl/u6QfTWlAYLoIFVJ8a03MPnfDkbmj5 wZiE8C7o49w6EkkPkgqeRiTr81ajhfa9pIhrSABw5d7Kah8hfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFLyrw7ob0ZMyuG/NOktManJJmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmRlNzNhZTktM2ZlZi0z YTRmLWI0N2QtYzkyZGY4N2YyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrR2kojALgW/xAB72GhYoVhX6cgqSlI03SEa4rs0w+lJgVW9OZoztFZ skd+HCBAu0xyBjJv/Y+3U+ZufCsesogxObY28cbWt653NXTueH4vREnnGHCZvWjz 8xKv5OITb/lfgBi0XrkcGyXjIwKHD/STGf4IlJJAdkzg1uwAP+Us5vnchMekvBkp kn3p8QqJs6wsicgRxoqywpYEiAaBvmyN9hJ89anEWBIW/V3+rWeKojAdDEZjs9MT Cj4IbM86ksX/NSvAcCg4qbw0wg7HkjdXtO7IKVE1dkna2jPcvZ4zsHxDpsH62y7y cdMAVuIqfrZZ4Cd0BJI/x4LkF4Cv0r8= -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:48 2025 by rpki-client