This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ba60f25-4954-3ce2-8aa6-016ee299ea9a.roa File: 4ba60f25-4954-3ce2-8aa6-016ee299ea9a.roa (raw, json) Hash identifier: DTFlFlAzUHBu8BUy6aQSJPhAVS1+YdSFFkEdr393XJc= Subject key identifier: A0:A6:A3:9B:AE:2B:A8:17:AA:38:75:BC:1B:BB:4A:2F:4C:29:45:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C56669BBCF8218826F8E4A640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ba60f25-4954-3ce2-8aa6-016ee299ea9a.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:9b:bc:f8:21:88:26:f8:e4:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=e2955afa-1831-4d5b-8a6f-887ef4138c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:a6:d8:5e:15:c3:62:c0:19:21:ae:37:08: cc:99:85:25:91:1e:80:c5:47:76:d4:1c:62:8e:c7: 8d:f8:72:ff:2c:14:32:a5:43:61:43:ae:2b:0c:dc: d9:ac:1f:6f:0d:89:66:a1:36:36:94:f1:fd:de:52: af:27:7d:ea:63:61:69:46:65:cb:ff:10:cc:4e:47: e2:57:a6:b5:d4:c9:37:1d:73:a6:0c:b7:bf:8c:b6: 2a:67:64:4f:90:a1:2d:55:bb:4f:7f:c7:0b:30:76: 7e:ec:52:cf:8e:72:5d:72:ef:fe:1c:a9:eb:86:55: 19:51:f5:30:62:28:6f:de:72:36:b9:45:88:14:8c: 46:92:63:44:3c:43:2e:df:45:71:d3:d5:91:ab:b0: b9:1a:e3:f3:4d:7a:9a:70:b5:fd:05:0b:22:00:51: a6:c9:14:25:91:c6:5f:7b:d8:1f:2a:32:e0:96:77: c1:ca:77:3a:63:10:99:4f:08:12:e6:35:77:fb:1a: 05:1f:08:de:55:ab:9c:2d:3d:99:32:b1:48:89:f5: 74:63:5f:bc:9a:00:12:ee:03:22:24:fc:8a:96:cc: 0b:08:a7:cb:ec:a3:a6:f2:49:55:cd:03:9d:1a:3b: 14:20:0d:01:93:95:0f:96:12:77:a7:24:86:15:4b: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A6:A3:9B:AE:2B:A8:17:AA:38:75:BC:1B:BB:4A:2F:4C:29:45:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ba60f25-4954-3ce2-8aa6-016ee299ea9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b2:bc:e7:70:a3:cf:be:e2:48:41:2f:46:90:6a:5a:07:d5: 4c:99:b6:60:f8:8f:dd:bf:32:c3:1d:05:de:38:7b:c3:1a:64: b3:c4:ae:8b:94:e6:4e:22:6c:a0:59:61:62:e8:7f:04:c6:61: fd:38:df:c2:b7:50:26:f3:dc:56:e0:03:b3:86:a0:d4:dd:75: 7f:c8:92:ff:9b:15:c4:cd:2e:b6:16:78:79:02:16:e8:10:a6: b7:bb:3e:aa:a2:43:ce:31:47:c5:ad:b4:25:3f:37:56:c3:11: 3e:40:7b:1a:88:19:d4:31:79:9d:0a:ae:0b:22:05:4a:1a:c1: 65:a7:7e:d0:e7:99:71:a5:96:00:e0:ed:98:23:be:6c:fd:14: 30:08:71:7b:65:bd:c2:ca:ef:d3:be:d5:70:00:e8:b9:cf:8f: 6b:28:6a:15:23:6c:25:e0:04:e6:d3:38:94:53:d7:a0:c9:ba: 46:dd:84:60:eb:fb:cf:63:2f:ae:94:30:ea:42:ab:27:de:fa: 6e:86:50:e9:c9:dc:86:d3:fd:3e:6a:29:c0:03:52:dd:d3:97: 52:cb:f1:ae:aa:8b:bb:34:8e:93:d6:7d:df:db:5e:b8:93:b0: c6:a1:99:12:a0:87:4f:86:8c:f1:9e:79:15:99:bb:9d:0f:d8: 0b:41:24:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZpu8+CGIJvjkpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ZTI5NTVhZmEtMTgzMS00ZDViLThhNmYtODg3ZWY0MTM4YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bym2F4Vw2LAGSGuNwjMmYUlkR6AxUd21Bxi jseN+HL/LBQypUNhQ64rDNzZrB9vDYlmoTY2lPH93lKvJ33qY2FpRmXL/xDMTkfi V6a11Mk3HXOmDLe/jLYqZ2RPkKEtVbtPf8cLMHZ+7FLPjnJdcu/+HKnrhlUZUfUw Yihv3nI2uUWIFIxGkmNEPEMu30Vx09WRq7C5GuPzTXqacLX9BQsiAFGmyRQlkcZf e9gfKjLglnfBync6YxCZTwgS5jV3+xoFHwjeVaucLT2ZMrFIifV0Y1+8mgAS7gMi JPyKlswLCKfL7KOm8klVzQOdGjsUIA0Bk5UPlhJ3pySGFUs+MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCmo5uuK6gXqjh1vBu7Si9MKUXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJhNjBmMjUtNDk1NC0z Y2UyLThhYTYtMDE2ZWUyOTllYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiyvOdwo8++4khBL0aQaloH1UyZtmD4j92/MsMdBd44e8MaZLPErouU 5k4ibKBZYWLofwTGYf0438K3UCbz3FbgA7OGoNTddX/Ikv+bFcTNLrYWeHkCFugQ pre7PqqiQ84xR8WttCU/N1bDET5AexqIGdQxeZ0KrgsiBUoawWWnftDnmXGllgDg 7Zgjvmz9FDAIcXtlvcLK79O+1XAA6LnPj2soahUjbCXgBObTOJRT16DJukbdhGDr +89jL66UMOpCqyfe+m6GUOnJ3IbT/T5qKcADUt3Tl1LL8a6qi7s0jpPWfd/bXriT sMahmRKgh0+GjPGeeRWZu50P2AtBJGo= -----END CERTIFICATE-----Generated at Mon Dec 29 01:52:14 2025 by rpki-client