This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa File: 28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa (raw, json) Hash identifier: 9d7NHyYJ3v9TpBH0d43tLYXPIDcugdZJTb2thVGSFHY= Subject key identifier: DE:C6:C2:30:F0:D9:E1:72:E7:8F:C6:50:2E:26:2F:9A:B2:0A:72:71 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584BCAD05136AFD741FE1C29C760 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 4213 IP address blocks: 98.126.166.0/24 maxlen: 24 98.126.213.0/24 maxlen: 24 98.126.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:51:36:af:d7:41:fe:1c:29:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=70af67ca-4c56-4868-9024-683f33028a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:63:92:28:c7:a0:95:dd:88:af:9c:1b:68: c9:fb:65:82:84:97:eb:95:57:bc:8e:ae:18:7f:a7: 92:12:49:cb:c9:a9:56:8f:1d:79:d0:6e:7d:f3:0c: 55:b0:0e:72:08:9f:ff:dd:a2:27:6e:b9:05:a1:2d: 96:f8:ae:3e:b1:fb:3a:f3:aa:4d:2a:5b:0c:d7:4f: e9:d3:32:3f:17:b8:b5:3e:73:ce:f6:18:2d:29:7a: e4:14:b7:9b:f1:61:65:5c:dc:3d:0f:d0:6b:da:cd: 25:c5:8c:84:59:2c:e2:c4:22:3e:ff:43:27:14:0a: 19:26:20:9a:55:f7:a9:bf:b7:4c:fc:aa:c7:0b:16: f3:36:0c:c3:5d:03:43:70:d3:92:1e:5e:c7:66:30: 43:b0:42:27:38:c9:9e:dd:35:20:9e:7b:3e:f8:ff: c6:b7:23:15:42:08:ce:33:ef:a0:63:65:1f:87:96: 59:5b:db:3a:c1:06:de:14:88:b4:a9:7b:76:54:6c: 42:9f:84:00:34:bb:79:94:ca:a9:42:15:7d:e4:b2: 1a:3a:05:2f:05:c8:aa:a7:fb:e3:3e:86:f3:b9:96: d6:ed:a5:16:ad:9d:33:76:8e:ab:2f:7d:5b:35:ff: 50:3b:c5:4a:a8:c0:0c:66:7f:73:f8:ee:06:0c:c0: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C6:C2:30:F0:D9:E1:72:E7:8F:C6:50:2E:26:2F:9A:B2:0A:72:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.166.0/24 98.126.213.0-98.126.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1a:ed:03:4c:cd:4d:84:2f:ae:f9:d2:ce:89:46:25:b4:e5: c7:d6:31:5b:ac:97:9b:08:a4:d1:21:24:b9:cb:05:c5:42:a8: 96:c3:76:2a:fb:78:f9:93:ab:c2:95:55:cf:3a:03:f5:d7:3e: 09:d7:0b:34:cd:9a:12:31:ae:a1:e4:67:71:d8:bb:19:5f:f4: 72:a8:59:a5:de:ee:d9:5d:c6:df:f7:3b:d4:78:40:44:28:c8: 4e:e1:29:9b:1f:88:df:7d:80:a4:92:4e:7b:b3:b7:06:fb:76: d6:96:a1:40:ea:5d:d6:60:02:a3:06:64:a2:18:ad:6a:ac:28: 79:2a:bb:ec:37:d5:98:0c:be:c8:d3:bb:db:f3:08:43:6c:5a: be:95:9f:6f:13:67:e4:97:5c:ad:d3:b2:a1:0d:b1:e9:3e:20: a2:2b:ed:20:7a:89:14:49:fb:8e:95:3a:ff:2e:77:94:a4:d7: ae:d2:12:0e:d9:6a:ba:08:ec:6f:e1:40:e9:8c:41:c6:da:35: c7:c9:7e:aa:90:09:b1:bf:d3:bb:2f:9a:a5:e2:79:01:7e:8a: 57:6a:d2:b8:78:98:db:dc:a8:f2:10:b9:8c:be:36:9e:6d:e1: c8:69:a0:00:4a:1a:e9:2e:06:64:c1:5f:ac:10:52:92:6a:dd: d7:29:da:3f -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEvK0FE2r9dB/hwpx2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk NzBhZjY3Y2EtNGM1Ni00ODY4LTkwMjQtNjgzZjMzMDI4YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0djkijHoJXdiK+cG2jJ+2WChJfrlVe8jq4Y f6eSEknLyalWjx150G598wxVsA5yCJ//3aInbrkFoS2W+K4+sfs686pNKlsM10/p 0zI/F7i1PnPO9hgtKXrkFLeb8WFlXNw9D9Br2s0lxYyEWSzixCI+/0MnFAoZJiCa Vfepv7dM/KrHCxbzNgzDXQNDcNOSHl7HZjBDsEInOMme3TUgnns++P/GtyMVQgjO M++gY2Ufh5ZZW9s6wQbeFIi0qXt2VGxCn4QANLt5lMqpQhV95LIaOgUvBciqp/vj PobzuZbW7aUWrZ0zdo6rL31bNf9QO8VKqMAMZn9z+O4GDMA9IwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFN7GwjDw2eFy54/GUC4mL5qyCnJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjhlMWFhNWMtNmZjYi0z MzQyLThhZjEtODk4YzhiNjUzZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAYn6mMAwD BABiftUDBANiftAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAVxrtA0zNTYQvrvnSzolGJbTlx9YxW6yXmwik 0SEkucsFxUKolsN2Kvt4+ZOrwpVVzzoD9dc+CdcLNM2aEjGuoeRncdi7GV/0cqhZ pd7u2V3G3/c71HhARCjITuEpmx+I332ApJJOe7O3Bvt21pahQOpd1mACowZkohit aqwoeSq77DfVmAy+yNO72/MIQ2xavpWfbxNn5JdcrdOyoQ2x6T4goivtIHqJFEn7 jpU6/y53lKTXrtISDtlqugjsb+FA6YxBxto1x8l+qpAJsb/Tuy+apeJ5AX6KV2rS uHiY29yo8hC5jL42nm3hyGmgAEoa6S4GZMFfrBBSkmrd1ynaPw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:11 2025 by rpki-client