This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa File: 201ed9e3-3421-33e7-a197-03e4de489db0.roa (raw, json) Hash identifier: g1P6gnBMFPR6w/EJhlAaOb2UyArMZoT/W+N0KjmYJQk= Subject key identifier: 96:0A:C1:BF:F6:95:AC:D6:50:E1:02:E9:E9:AA:4D:97:83:75:0B:3C Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584C02A5F75EAB333B70F5885AA0 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 8796 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a5:f7:5e:ab:33:3b:70:f5:88:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=385f0282-3dba-46ca-a539-f1d7df733b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:ee:44:75:f5:f1:14:0c:e6:cd:af:c1:66: ea:39:da:41:21:9d:98:d0:06:0f:05:5a:67:1f:75: 6f:7a:00:c7:89:a4:ef:cc:ce:86:92:c2:1e:cf:6f: f5:f9:f9:14:3f:85:c0:cd:2c:ae:f3:98:41:ff:4a: e7:4d:9a:a2:15:01:db:30:e0:5d:df:b7:26:9c:46: 13:a5:74:74:4e:64:fe:0e:1a:63:6c:3a:6c:4b:7a: 30:0f:6a:4a:d8:12:a7:e1:10:a1:23:f4:2f:59:f7: 4e:4b:20:64:5d:34:a2:e4:68:3e:e3:f6:9b:6d:ef: 43:6e:a0:bf:47:a1:ab:be:22:09:38:92:2d:49:09: b0:83:a8:e0:f9:5e:64:c0:26:ef:a1:4f:70:ae:0f: f2:86:de:51:67:f4:c9:aa:d5:38:56:db:97:ce:68: a7:17:8f:d8:de:ac:cb:87:e9:c8:6f:92:71:74:5e: 15:9b:61:58:24:4c:20:1a:e9:85:b7:d2:41:95:91: 28:ac:1f:46:24:9f:00:b5:c5:c6:cf:ab:0c:b0:32: 7b:c9:31:a0:65:fe:f5:8e:99:29:91:8e:35:b5:04: 19:bc:02:2c:23:61:7f:74:42:b1:3b:e1:99:74:aa: 85:7c:3a:63:f0:91:03:6f:28:b7:bc:b5:15:53:f9: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:C1:BF:F6:95:AC:D6:50:E1:02:E9:E9:AA:4D:97:83:75:0B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e8:2c:75:89:cf:c0:68:bc:8b:65:8d:9f:6e:ac:c3:e6:48: 09:38:7d:24:6f:51:83:b3:d5:f9:d5:74:0d:03:b3:13:e3:97: b8:0d:6e:92:bc:53:0c:c3:fc:ca:8e:9f:f6:5f:0e:9c:69:e4: ca:6c:6e:d0:65:1a:9e:94:66:6d:9a:5a:34:bb:55:0a:ef:8d: 99:5b:c5:94:ad:2c:1b:60:a6:68:e4:a3:46:7f:9d:8e:ef:62: 04:c3:23:16:4a:b6:f9:d4:f9:0f:51:75:9a:73:a1:29:ea:af: 00:8e:bd:09:d1:70:da:2d:2f:2e:0b:a9:67:65:d5:5f:b6:5a: c7:36:ee:8a:9c:e6:64:4f:4d:4c:62:8a:39:7a:61:c6:e0:0b: 03:e7:ce:fe:6e:33:0a:90:b8:02:06:f5:0e:62:5b:b7:19:85: 89:aa:43:5b:bd:41:4b:41:57:9b:de:86:ae:bf:5a:cc:0f:50: 89:c9:9a:b5:97:ed:9d:14:d1:77:5e:76:65:66:63:49:12:8e: bf:5c:1f:3b:3c:d7:10:1b:57:2b:cf:a9:7e:8f:84:43:56:0b: 9c:ef:15:54:c1:64:50:5b:d6:18:3d:71:a5:6d:95:0a:e8:82: f4:2f:b5:85:db:91:6f:b9:fe:cb:d8:3d:4e:6e:11:dd:65:34: d9:a9:f2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwCpfdeqzM7cPWIWqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk Mzg1ZjAyODItM2RiYS00NmNhLWE1MzktZjFkN2RmNzMzYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXbuRHX18RQM5s2vwWbqOdpBIZ2Y0AYPBVpn H3VvegDHiaTvzM6GksIez2/1+fkUP4XAzSyu85hB/0rnTZqiFQHbMOBd37cmnEYT pXR0TmT+DhpjbDpsS3owD2pK2BKn4RChI/QvWfdOSyBkXTSi5Gg+4/abbe9DbqC/ R6GrviIJOJItSQmwg6jg+V5kwCbvoU9wrg/yht5RZ/TJqtU4VtuXzminF4/Y3qzL h+nIb5JxdF4Vm2FYJEwgGumFt9JBlZEorB9GJJ8AtcXGz6sMsDJ7yTGgZf71jpkp kY41tQQZvAIsI2F/dEKxO+GZdKqFfDpj8JEDbyi3vLUVU/kpxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYKwb/2lazWUOEC6emqTZeDdQs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjAxZWQ5ZTMtMzQyMS0z M2U3LWExOTctMDNlNGRlNDg5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABToLHWJz8BovItljZ9urMPmSAk4fSRvUYOz1fnVdA0DsxPjl7gNbpK8 UwzD/MqOn/ZfDpxp5MpsbtBlGp6UZm2aWjS7VQrvjZlbxZStLBtgpmjko0Z/nY7v YgTDIxZKtvnU+Q9RdZpzoSnqrwCOvQnRcNotLy4LqWdl1V+2Wsc27oqc5mRPTUxi ijl6YcbgCwPnzv5uMwqQuAIG9Q5iW7cZhYmqQ1u9QUtBV5vehq6/WswPUInJmrWX 7Z0U0XdedmVmY0kSjr9cHzs81xAbVyvPqX6PhENWC5zvFVTBZFBb1hg9caVtlQro gvQvtYXbkW+5/svYPU5uEd1lNNmp8kQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:54 2025 by rpki-client