This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa File: 970d366d-574a-33ac-a079-81733774db4c.roa (raw, json) Hash identifier: q4NaK9Et5Ibs+TB8pzLOyi3ysl6JrvLMSlOtEcULtL0= Subject key identifier: 4D:CA:9B:A3:16:D1:5B:52:C4:EB:D3:56:D6:01:C1:A2:1D:76:E4:DF Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584C02A61E32A3AFEFD9225DF100 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 395886 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:1e:32:a3:af:ef:d9:22:5d:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=3531e9f0-bceb-4168-b355-a91496036bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:38:9b:72:9e:f9:e6:ee:ab:d9:6e:bf:ff: c2:c9:98:10:fa:35:4e:ea:a4:18:6c:ca:f3:15:d2: a4:83:05:da:bb:70:70:7b:95:1f:24:77:46:01:1d: c6:e5:5f:0d:2b:3c:dc:57:13:31:b3:70:2c:4e:8b: d5:73:77:1d:6f:09:52:b1:10:01:bf:5b:8f:dd:fa: 6e:52:75:74:81:04:c1:59:3e:7e:63:00:cf:68:70: 59:ec:53:bf:31:96:19:30:f8:40:ac:f6:39:11:2a: ac:fe:d6:06:60:9b:cb:bb:10:c9:32:fe:a0:8b:e4: 6a:99:f6:69:e8:89:53:39:83:f3:c6:cc:98:43:18: e8:8e:a1:3e:7f:20:39:3d:4a:15:a9:99:38:1d:e7: a8:cf:22:fd:4e:aa:4c:4b:b6:48:fb:47:98:d9:f2: 8e:d3:87:aa:e7:89:27:1e:59:0f:68:66:e6:c8:2f: 5a:a1:ce:b0:0f:63:5a:dc:26:90:7d:b3:68:67:71: a8:65:a1:87:a1:1b:f0:57:4b:23:b7:a0:8c:6f:92: 8c:af:5b:d4:c3:7e:8f:3f:4b:32:b5:d7:ee:00:21: a2:4c:52:d9:1c:7a:17:d3:07:0a:c6:21:91:c8:c7: c6:6a:4a:05:98:e9:17:eb:6e:fc:8d:36:31:3b:b3: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:9B:A3:16:D1:5B:52:C4:EB:D3:56:D6:01:C1:A2:1D:76:E4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6c:fe:c4:46:1a:01:f7:e1:5f:9d:d5:77:c8:b0:25:08:51: 94:e7:db:af:15:02:db:a8:17:5e:cf:be:bd:cc:b8:49:be:42: 0c:b2:12:5d:65:35:dd:ba:a9:aa:47:d1:d2:ce:f1:1b:2d:89: ac:aa:9a:a8:f7:e5:92:4e:1a:ac:69:44:61:81:01:96:13:65: 12:9e:74:83:73:e2:8d:2b:cb:08:c3:1a:de:98:b2:a7:72:a7: 98:36:14:f5:d8:0c:10:07:8f:e8:fb:3a:01:1c:b3:73:33:53: fe:c0:06:35:51:a6:57:3d:1d:e3:74:da:03:98:28:3e:77:64: 61:f3:83:11:eb:de:86:82:b5:e0:e1:9e:e7:c9:8d:71:6c:d7: eb:eb:43:1b:6c:4c:97:2c:d9:bd:bb:16:ce:bf:c4:dd:92:d3: 63:9c:22:76:03:e3:ed:00:11:60:39:f6:de:02:fa:39:50:bc: 9f:be:8a:83:ad:32:9f:03:9e:a4:63:17:56:57:d0:b1:88:94: cf:20:bd:4d:e8:37:f2:66:b3:12:50:7e:51:9d:93:f9:73:d7: 07:81:a4:e2:1b:cc:3e:53:6b:43:11:41:b3:cd:8b:d8:77:c2: 58:6c:bb:14:d0:b8:47:54:11:a9:ee:79:fc:f7:fa:fb:9e:3a: db:e0:a7:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwCph4yo6/v2SJd8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk MzUzMWU5ZjAtYmNlYi00MTY4LWIzNTUtYTkxNDk2MDM2YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6U4m3Ke+ebuq9luv//CyZgQ+jVO6qQYbMrz FdKkgwXau3Bwe5UfJHdGAR3G5V8NKzzcVxMxs3AsTovVc3cdbwlSsRABv1uP3fpu UnV0gQTBWT5+YwDPaHBZ7FO/MZYZMPhArPY5ESqs/tYGYJvLuxDJMv6gi+RqmfZp 6IlTOYPzxsyYQxjojqE+fyA5PUoVqZk4HeeozyL9TqpMS7ZI+0eY2fKO04eq54kn HlkPaGbmyC9aoc6wD2Na3CaQfbNoZ3GoZaGHoRvwV0sjt6CMb5KMr1vUw36PP0sy tdfuACGiTFLZHHoX0wcKxiGRyMfGakoFmOkX6278jTYxO7NgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3Km6MW0VtSxOvTVtYBwaIdduTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvOTcwZDM2NmQtNTc0YS0z M2FjLWEwNzktODE3MzM3NzRkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9s/sRGGgH34V+d1XfIsCUIUZTn268VAtuoF17Pvr3MuEm+QgyyEl1l Nd26qapH0dLO8Rstiayqmqj35ZJOGqxpRGGBAZYTZRKedINz4o0rywjDGt6Ysqdy p5g2FPXYDBAHj+j7OgEcs3MzU/7ABjVRplc9HeN02gOYKD53ZGHzgxHr3oaCteDh nufJjXFs1+vrQxtsTJcs2b27Fs6/xN2S02OcInYD4+0AEWA59t4C+jlQvJ++ioOt Mp8DnqRjF1ZX0LGIlM8gvU3oN/JmsxJQflGdk/lz1weBpOIbzD5Ta0MRQbPNi9h3 wlhsuxTQuEdUEanuefz3+vueOtvgp3w= -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:27 2025 by rpki-client