This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcef3481-11f7-3666-9956-d780e61d7435.roa File: bcef3481-11f7-3666-9956-d780e61d7435.roa (raw, json) Hash identifier: /i9iGnu+om8nzEYb9mFrFhCPj+jBWbn1W7Xxk4PnUVk= Subject key identifier: B4:43:D0:3E:08:E2:4D:41:1C:00:04:3F:5D:9C:62:CE:BC:40:56:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666C91AF129E49BEF33FE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcef3481-11f7-3666-9956-d780e61d7435.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:c9:1a:f1:29:e4:9b:ef:33:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=2b034ac8-87c2-492e-818f-3734ed9113c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:1b:d3:99:7f:a7:ee:66:38:ff:94:d8:0a: 11:3f:37:a6:55:ef:70:f8:b9:dc:9e:85:3b:3b:95: 21:62:80:78:2c:d8:e5:a1:52:a3:2b:d8:5c:f2:0d: f9:a6:f8:17:10:3a:57:dc:a8:05:83:2f:36:8a:cf: bc:15:2e:e7:34:db:81:9c:5d:6c:01:7c:d8:37:b2: de:c0:31:84:a6:78:6f:50:20:57:d5:40:02:cc:66: 11:68:bd:81:22:9d:43:1d:46:f3:29:b4:50:1b:35: 88:9b:54:cc:c4:bf:2e:a3:7b:fb:38:e0:4e:8e:21: 6a:c5:8a:0c:47:44:c3:6b:f6:ed:1b:28:0f:7c:c2: 5f:18:fd:bb:6b:45:58:f7:ee:d3:2f:a4:a1:cf:e8: 29:8a:cf:37:36:fd:ed:9d:78:de:70:d7:7e:eb:27: 44:19:a8:f5:74:a9:00:f9:ed:58:6c:1b:60:1c:a1: 5e:ad:d0:75:22:5c:bb:04:69:92:af:19:86:46:95: d2:6b:1c:fc:4e:82:60:dc:dc:b4:39:01:a6:fd:e9: fd:58:db:b3:ea:df:cc:6b:cd:20:93:c4:78:84:5d: 09:cc:7f:e9:89:ad:9b:bf:35:c7:bc:87:3c:cd:78: 62:5a:4e:c1:a3:1f:fd:00:07:f0:e3:76:b5:38:b8: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:43:D0:3E:08:E2:4D:41:1C:00:04:3F:5D:9C:62:CE:BC:40:56:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcef3481-11f7-3666-9956-d780e61d7435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:29:37:37:6a:21:92:ce:46:77:29:a1:c8:e4:0e:dc:0c:57: 23:9c:1a:31:6d:5e:6c:68:8e:f1:9d:9e:c1:19:92:f7:95:af: 5c:5c:24:f0:34:38:c8:21:d5:54:c8:0b:89:42:55:5d:7a:46: e1:83:7b:ef:13:76:42:cd:86:7b:50:4f:50:0c:be:ac:4b:0d: 5d:6b:a5:94:e1:9c:98:40:2e:56:7a:ae:55:04:7f:d9:f8:56: 51:4a:01:d3:4c:4f:2f:4a:7c:7f:ef:7d:e2:d5:d1:7c:a2:82: eb:20:f1:65:1c:c8:20:57:6c:cb:f8:6c:fb:b2:48:60:0f:48: ee:6c:67:71:50:c5:c0:58:11:dd:f3:3f:91:5f:a1:12:c0:28: 8e:62:6b:40:f7:bd:5e:7d:b2:a9:b2:64:4b:99:64:e0:e9:cd: c0:43:bc:07:e8:ca:2e:af:d7:92:e0:50:88:82:0c:58:2f:d8: 8b:a1:0d:5d:e6:43:61:eb:98:89:cb:d8:5a:a0:94:b0:d1:6c: 43:d0:b2:e9:73:37:21:2c:a0:e9:e4:8b:50:66:3a:62:04:3f: f2:85:91:0d:7d:7a:0e:41:f5:d6:03:6a:ac:bb:39:d6:99:99: ba:9d:da:e2:79:77:c8:e8:ec:9b:d8:5b:68:5f:85:28:6c:36: 1e:28:78:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZska8Snkm+8z/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MmIwMzRhYzgtODdjMi00OTJlLTgxOGYtMzczNGVkOTExM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4cb05l/p+5mOP+U2AoRPzemVe9w+LncnoU7 O5UhYoB4LNjloVKjK9hc8g35pvgXEDpX3KgFgy82is+8FS7nNNuBnF1sAXzYN7Le wDGEpnhvUCBX1UACzGYRaL2BIp1DHUbzKbRQGzWIm1TMxL8uo3v7OOBOjiFqxYoM R0TDa/btGygPfMJfGP27a0VY9+7TL6Shz+gpis83Nv3tnXjecNd+6ydEGaj1dKkA +e1YbBtgHKFerdB1Ily7BGmSrxmGRpXSaxz8ToJg3Ny0OQGm/en9WNuz6t/Ma80g k8R4hF0JzH/pia2bvzXHvIc8zXhiWk7Box/9AAfw43a1OLiokwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRD0D4I4k1BHAAEP12cYs68QFZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmNlZjM0ODEtMTFmNy0z NjY2LTk5NTYtZDc4MGU2MWQ3NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMpNzdqIZLORncpocjkDtwMVyOcGjFtXmxojvGdnsEZkveVr1xcJPA0 OMgh1VTIC4lCVV16RuGDe+8TdkLNhntQT1AMvqxLDV1rpZThnJhALlZ6rlUEf9n4 VlFKAdNMTy9KfH/vfeLV0Xyigusg8WUcyCBXbMv4bPuySGAPSO5sZ3FQxcBYEd3z P5FfoRLAKI5ia0D3vV59sqmyZEuZZODpzcBDvAfoyi6v15LgUIiCDFgv2IuhDV3m Q2HrmInL2FqglLDRbEPQsulzNyEsoOnki1BmOmIEP/KFkQ19eg5B9dYDaqy7OdaZ mbqd2uJ5d8jo7JvYW2hfhShsNh4oeC8= -----END CERTIFICATE-----Generated at Mon Dec 29 03:29:19 2025 by rpki-client