This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json) Hash identifier: 8UPRGw1GK77mQhmuRWjDKaZ5W9qYaXYTmyBPk04Pw50= Subject key identifier: CC:FC:81:10:BC:3C:7C:36:27:F7:EC:EB:9D:36:01:90:A8:79:1C:A8 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584BEC509652C22DE36DA32761E0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:96:52:c2:2d:e3:6d:a3:27:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=d16b4a54-dbe2-4ba9-b9e4-b0386d8c8b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:b1:00:6f:70:f6:03:b9:6a:c4:b5:8e:13: a0:1f:97:46:b5:62:4d:ea:62:43:ea:44:cf:3f:41: 53:ad:c2:31:51:8d:fd:ab:cf:d5:44:f3:47:ad:cf: d2:4e:f8:9b:72:ea:e7:79:dc:69:fc:4e:ac:a0:0f: 4d:2c:37:68:29:f4:4a:83:76:f4:db:2d:9e:81:63: 0c:56:ff:9e:44:4b:f6:a3:21:8c:6a:6a:fe:16:79: 77:79:f0:45:ef:6d:34:8a:79:93:39:93:8c:93:8e: 2c:9f:82:98:a9:cf:8f:e4:39:69:77:61:90:65:7b: 39:93:bb:b7:14:27:9d:24:87:36:5c:64:a8:93:83: 0f:97:dc:ed:0d:9f:a8:89:af:78:02:fb:46:66:29: 02:be:ec:70:a3:59:02:d6:15:69:30:59:99:2a:5d: 25:d5:f5:8c:df:97:64:cf:94:e0:bd:da:f3:5a:59: 17:06:db:03:49:b0:2d:52:a4:c3:f1:db:2d:b9:f8: 0d:98:f4:67:1d:46:9c:e8:12:bf:b4:f7:96:84:0a: e5:e3:2f:d6:03:a2:e5:ab:5d:5d:8b:53:b4:49:64: 40:fc:8f:18:3b:54:21:9b:85:d2:aa:fd:ed:bc:82: 5e:1d:41:2d:3a:32:5e:04:11:5b:33:db:33:99:ea: 6d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FC:81:10:BC:3C:7C:36:27:F7:EC:EB:9D:36:01:90:A8:79:1C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0a:09:cc:21:29:60:74:cf:43:34:95:44:b1:4a:5f:e1:7e: 2e:72:a5:2c:6f:7e:2d:d4:56:58:1a:a9:90:00:0a:d8:71:95: 19:4f:6a:1e:98:d7:aa:3a:16:1e:66:47:99:52:51:7a:25:37: 7e:51:60:52:9d:c6:d4:0f:a4:2e:99:a2:55:c6:29:85:1c:32: c5:03:74:49:fe:ee:79:76:eb:98:20:32:90:b1:fe:33:3b:3d: 68:3a:b4:32:1d:50:ff:8f:d2:56:28:c9:c5:9d:d7:81:ec:a4: 3f:97:65:ee:02:e9:dc:a4:1e:44:1d:f7:26:9c:58:72:08:2e: 7e:a8:40:15:1f:b3:02:98:e6:22:8c:a7:3d:ee:74:0a:b5:ad: 9f:9a:84:49:ca:b7:d3:86:38:2e:d3:92:e4:f5:57:2d:50:91: 30:b4:4b:d1:c8:eb:eb:59:2d:c0:df:32:75:4a:46:b6:11:af: f9:ea:2d:44:d4:5a:35:50:bc:1e:a7:5f:75:0e:f7:fc:3c:f3: 18:51:68:e5:b7:08:cf:51:fb:ba:a2:fe:a0:78:25:06:a6:dc: 21:2f:fb:40:7c:ea:56:77:e2:75:4f:73:0a:bc:9d:c4:fc:d9: 93:bb:54:3f:36:54:6d:f6:8a:29:20:59:7a:bc:09:49:ef:d9: 68:a2:bf:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUJZSwi3jbaMnYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk ZDE2YjRhNTQtZGJlMi00YmE5LWI5ZTQtYjAzODZkOGM4YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSixAG9w9gO5asS1jhOgH5dGtWJN6mJD6kTP P0FTrcIxUY39q8/VRPNHrc/STvibcurnedxp/E6soA9NLDdoKfRKg3b02y2egWMM Vv+eREv2oyGMamr+Fnl3efBF7200inmTOZOMk44sn4KYqc+P5Dlpd2GQZXs5k7u3 FCedJIc2XGSok4MPl9ztDZ+oia94AvtGZikCvuxwo1kC1hVpMFmZKl0l1fWM35dk z5TgvdrzWlkXBtsDSbAtUqTD8dstufgNmPRnHUac6BK/tPeWhArl4y/WA6Llq11d i1O0SWRA/I8YO1Qhm4XSqv3tvIJeHUEtOjJeBBFbM9szmeptGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz8gRC8PHw2J/fs6502AZCoeRyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOThkNGRjZDEtNzA0OC0z NTFlLTg2ODUtNGViMjBkZGEzOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoKCcwhKWB0z0M0lUSxSl/hfi5ypSxvfi3UVlgaqZAACthxlRlPah6Y 16o6Fh5mR5lSUXolN35RYFKdxtQPpC6ZolXGKYUcMsUDdEn+7nl265ggMpCx/jM7 PWg6tDIdUP+P0lYoycWd14HspD+XZe4C6dykHkQd9yacWHIILn6oQBUfswKY5iKM pz3udAq1rZ+ahEnKt9OGOC7TkuT1Vy1QkTC0S9HI6+tZLcDfMnVKRrYRr/nqLUTU WjVQvB6nX3UO9/w88xhRaOW3CM9R+7qi/qB4JQam3CEv+0B86lZ34nVPcwq8ncT8 2ZO7VD82VG32iikgWXq8CUnv2Wiiv+g= -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:37 2025 by rpki-client