This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af02f07c-7106-390d-9d23-fabaaa22f113.roa File: af02f07c-7106-390d-9d23-fabaaa22f113.roa (raw, json) Hash identifier: Ll5LNy1SH3N61JNzI6vXvm3MYMXA3oVEeROkM0gS8/E= Subject key identifier: 2A:93:2A:25:AB:9D:91:C9:CC:C2:21:C8:43:7E:98:3B:2D:08:B5:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584C5666D279BCEE0D6921247C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af02f07c-7106-390d-9d23-fabaaa22f113.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 22773 IP address blocks: 72.220.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Feb 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:d2:79:bc:ee:0d:69:21:24:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=373ec0da-b911-4de5-9ff8-08ee72200cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:1e:c9:3f:61:83:ea:70:b0:86:4e:c6:f7: 75:be:0e:c9:e8:d5:84:b2:dc:22:3c:50:8c:24:e2: 93:41:94:76:9e:5e:2b:79:86:7d:0c:3f:8f:05:dc: 63:8d:f3:56:4c:49:4a:2c:e8:e5:82:f5:7c:e0:5d: 47:f6:1e:06:e6:56:82:b5:db:8b:c3:cb:a0:97:75: dc:d1:17:fb:25:d1:6e:82:4e:2e:74:2b:bb:ca:a6: f4:e8:1c:fd:14:2c:2b:f6:d2:cd:8c:04:78:64:9f: 87:c2:06:7e:4f:ab:9a:74:93:77:7e:46:cf:a4:9a: 98:81:97:c0:73:d1:96:d8:2b:47:e8:ee:9c:e9:26: 40:8f:11:26:08:e4:f5:ea:0e:6e:3d:ee:0e:ca:14: f9:aa:1f:e7:c3:cd:24:1e:a5:67:aa:f9:6a:04:76: 52:15:74:be:37:e2:ec:2f:23:2c:bf:7e:11:82:58: 8e:75:7d:6a:c7:8d:5a:48:e8:13:fd:8d:3b:9c:ca: 09:b1:4a:98:d7:63:c5:3c:2c:ee:c1:1f:51:a9:fc: 43:24:89:67:36:fd:42:8a:4b:d3:4d:34:17:82:50: 3e:1b:04:9f:18:55:d1:5c:80:89:f0:40:15:d4:ac: af:0e:b3:b0:a5:22:41:89:99:89:b0:e9:6a:4f:91: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:2A:25:AB:9D:91:C9:CC:C2:21:C8:43:7E:98:3B:2D:08:B5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af02f07c-7106-390d-9d23-fabaaa22f113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:98:11:c8:e2:a7:8c:9d:9a:95:3e:fc:bb:ad:18:e1:1f:6d: 5f:b0:7a:0c:4b:aa:8a:6d:c7:7a:50:99:62:ef:1e:30:f8:e8: 59:14:53:67:f7:3d:76:e8:9e:f2:f8:85:c8:53:65:03:c2:b1: 24:ca:0a:1e:a5:41:48:56:0c:a9:52:2e:72:27:4c:3a:a1:b9: 9d:5f:23:60:9e:de:0f:13:19:8b:d8:df:af:d6:ac:93:5c:6c: af:37:48:d5:3b:d1:11:ad:16:c9:47:ce:b4:31:30:c8:64:08: 1d:3a:ac:6b:d8:cc:12:19:b3:e5:5b:87:af:09:7e:59:95:15: 8f:d6:d7:16:27:cd:a3:60:6d:c1:66:73:cf:a4:97:d0:be:7c: d4:99:01:cb:8e:bf:72:b3:ce:89:74:8f:81:a5:dc:c2:34:7c: 2d:57:a2:a8:e8:eb:af:cc:0b:9e:5d:cf:25:b2:da:ee:35:19: b5:21:a2:d3:b4:7b:86:22:3b:63:c4:0f:12:be:78:e5:4a:4b: fc:b2:fd:46:55:18:32:25:88:28:41:58:4d:b2:79:d6:ef:93: 8d:c7:d8:13:54:f4:c0:fc:d0:d2:0b:be:6c:cf:a8:55:9c:af: e2:46:2b:33:cb:ec:3f:c8:a7:05:65:a7:95:c7:7b:8d:e1:93: 8c:c4:b6:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZtJ5vO4NaSEkfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MzczZWMwZGEtYjkxMS00ZGU1LTlmZjgtMDhlZTcyMjAwY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJceyT9hg+pwsIZOxvd1vg7J6NWEstwiPFCM JOKTQZR2nl4reYZ9DD+PBdxjjfNWTElKLOjlgvV84F1H9h4G5laCtduLw8ugl3Xc 0Rf7JdFugk4udCu7yqb06Bz9FCwr9tLNjAR4ZJ+HwgZ+T6uadJN3fkbPpJqYgZfA c9GW2CtH6O6c6SZAjxEmCOT16g5uPe4OyhT5qh/nw80kHqVnqvlqBHZSFXS+N+Ls LyMsv34RgliOdX1qx41aSOgT/Y07nMoJsUqY12PFPCzuwR9RqfxDJIlnNv1CikvT TTQXglA+GwSfGFXRXICJ8EAV1KyvDrOwpSJBiZmJsOlqT5HegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqTKiWrnZHJzMIhyEN+mDstCLVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYwMmYwN2MtNzEwNi0z OTBkLTlkMjMtZmFiYWFhMjJmMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGYEcjip4ydmpU+/LutGOEfbV+wegxLqoptx3pQmWLvHjD46FkUU2f3 PXbonvL4hchTZQPCsSTKCh6lQUhWDKlSLnInTDqhuZ1fI2Ce3g8TGYvY36/WrJNc bK83SNU70RGtFslHzrQxMMhkCB06rGvYzBIZs+Vbh68JflmVFY/W1xYnzaNgbcFm c8+kl9C+fNSZAcuOv3Kzzol0j4Gl3MI0fC1Xoqjo66/MC55dzyWy2u41GbUhotO0 e4YiO2PEDxK+eOVKS/yy/UZVGDIliChBWE2yedbvk43H2BNU9MD80NILvmzPqFWc r+JGKzPL7D/IpwVlp5XHe43hk4zEtqY= -----END CERTIFICATE-----Generated at Fri Jan 30 19:20:22 2026 by rpki-client