This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa File: 3c625f84-b529-345d-8f4a-aca2b3d15d50.roa (raw, json) Hash identifier: h5Axe/6lNZBwmxEa4d0yRZYOiUXttzqvoEZdDjxlcdY= Subject key identifier: B3:9B:FA:E8:E0:3E:09:0E:E9:EE:30:DC:89:6C:0D:22:1D:61:B1:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BCD9F1DE6CF1D9FCA8DEBC880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 33651 IP address blocks: 98.47.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:1d:e6:cf:1d:9f:ca:8d:eb:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=e94ca428-a45e-4b38-a286-1126453643ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:62:99:e4:e6:ed:66:42:28:b4:7c:b9:f4: 72:fa:59:cf:83:15:81:4f:56:7e:60:fb:a2:c3:19: b9:b3:46:8e:44:bf:96:a8:a3:46:ac:20:97:be:0c: 76:f3:e0:5c:23:7b:16:9e:27:95:44:70:46:3a:e8: 2c:91:f9:04:04:ca:ca:90:b3:0e:fe:8c:37:cd:b4: b3:83:4d:90:cc:81:b7:c8:25:1e:11:36:d8:05:08: 10:53:40:a1:0c:95:7a:1f:d0:eb:6d:39:78:a4:17: 5e:5c:71:c4:25:47:7c:4a:72:49:3a:a2:ed:9f:12: 70:00:ce:07:c1:1f:23:3a:db:42:63:88:14:3d:c7: 69:29:2a:98:99:70:9c:6f:50:08:3a:7d:2f:c0:8e: 84:fc:c2:33:8e:2e:5e:99:02:5b:ce:72:a2:33:87: 27:fa:0d:03:44:a7:bc:63:5c:d3:1d:78:2b:7f:77: 4b:a8:99:11:4d:d5:9f:ec:12:18:79:02:6b:70:4f: 0f:5d:47:f3:7e:e8:1e:6a:1b:05:35:50:a6:92:d6: 8f:6b:10:a0:a9:40:46:92:4e:57:f4:23:1d:f9:61: 61:b1:81:b3:66:41:ea:6d:06:27:30:85:09:6d:ad: 09:40:97:6e:28:80:48:58:a3:49:96:7a:57:23:ed: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:FA:E8:E0:3E:09:0E:E9:EE:30:DC:89:6C:0D:22:1D:61:B1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:34:29:90:f6:bf:f8:df:03:c9:3b:ad:84:17:6c:1a:12:95: 57:73:bc:74:15:b0:4a:5e:42:94:74:60:4d:38:4a:c3:0a:9c: cb:99:b8:20:58:2b:2e:06:16:e3:40:3e:87:0a:05:c5:c4:b2: 09:7e:ed:6a:ce:01:44:1c:a8:cc:ac:87:68:ac:02:8c:9b:7f: 86:87:b4:0f:58:fa:ba:e3:c6:ac:a4:9e:ca:35:f6:5e:e6:10: 3b:1b:c2:4b:65:27:13:6c:42:4a:94:a7:3d:f7:fa:c6:ec:57: 0b:e8:44:7a:a0:d0:e1:da:fe:85:77:22:4f:83:e3:90:1e:e9: 3f:c0:7a:e7:6c:32:c1:72:c3:12:51:0f:7e:19:0b:3a:65:7e: ff:f1:d2:d8:17:2f:01:78:23:dc:14:df:f1:e3:0a:04:7a:6f: 11:a4:60:a3:cd:e3:98:b7:c6:be:08:fa:b5:23:a5:a8:37:98: 77:5c:ff:9e:e7:95:c0:4d:c2:4f:fa:51:ca:b2:fc:1d:93:d6: a1:00:4b:79:ca:7c:15:e5:7b:63:28:4a:c1:a2:0f:fb:d6:68: 22:4e:95:6b:ac:d0:1b:c5:52:b5:b9:f3:2f:86:c7:ba:48:02: 01:f9:90:44:59:ec:eb:f7:bc:c7:4b:36:23:08:d7:b2:5d:af: 2e:23:c3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNnx3mzx2fyo3ryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTk0Y2E0MjgtYTQ1ZS00YjM4LWEyODYtMTEyNjQ1MzY0M2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC5imeTm7WZCKLR8ufRy+lnPgxWBT1Z+YPui wxm5s0aORL+WqKNGrCCXvgx28+BcI3sWnieVRHBGOugskfkEBMrKkLMO/ow3zbSz g02QzIG3yCUeETbYBQgQU0ChDJV6H9DrbTl4pBdeXHHEJUd8SnJJOqLtnxJwAM4H wR8jOttCY4gUPcdpKSqYmXCcb1AIOn0vwI6E/MIzji5emQJbznKiM4cn+g0DRKe8 Y1zTHXgrf3dLqJkRTdWf7BIYeQJrcE8PXUfzfugeahsFNVCmktaPaxCgqUBGkk5X 9CMd+WFhsYGzZkHqbQYnMIUJba0JQJduKIBIWKNJlnpXI+3UiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOb+ujgPgkO6e4w3IlsDSIdYbG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M2MjVmODQtYjUyOS0z NDVkLThmNGEtYWNhMmIzZDE1ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYi+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE0KZD2v/jfA8k7rYQXbBoSlVdzvHQVsEpeQpR0YE04SsMKnMuZuCBY Ky4GFuNAPocKBcXEsgl+7WrOAUQcqMysh2isAoybf4aHtA9Y+rrjxqyknso19l7m EDsbwktlJxNsQkqUpz33+sbsVwvoRHqg0OHa/oV3Ik+D45Ae6T/AeudsMsFywxJR D34ZCzplfv/x0tgXLwF4I9wU3/HjCgR6bxGkYKPN45i3xr4I+rUjpag3mHdc/57n lcBNwk/6Ucqy/B2T1qEAS3nKfBXle2MoSsGiD/vWaCJOlWus0BvFUrW58y+Gx7pI AgH5kERZ7Ov3vMdLNiMI17Jdry4jw3U= -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:50 2025 by rpki-client