This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/6a6fa473-b587-3ddf-a03e-95fcb379c266.roa File: 6a6fa473-b587-3ddf-a03e-95fcb379c266.roa (raw, json) Hash identifier: lI+IZTUPoKcKzDeu4666wtSadwiSzltlcbEpsG5BhUE= Subject key identifier: 2D:D0:6D:0A:04:A3:50:02:E6:7A:B9:CF:47:C0:80:24:55:F6:EB:F2 Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Certificate serial: 010D0C9F4328584BEF1B49772D109046C3F2B880 Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/6a6fa473-b587-3ddf-a03e-95fcb379c266.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 51601 IP address blocks: 98.158.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:49:77:2d:10:90:46:c3:f2:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=5c819870-1086-4ae4-8e55-022e87fdf0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:83:42:52:b8:66:52:51:69:56:c2:c0:95: b5:b4:18:bf:a7:f8:d4:f0:f2:5c:29:46:a4:97:77: 43:90:c7:0e:a9:b2:a9:b6:78:37:ad:38:21:11:18: 69:99:88:51:01:08:0e:a3:4b:fe:75:bc:f7:c3:d5: 3e:8f:24:b6:1a:4d:24:cc:84:2c:7b:07:7a:3e:18: 87:3c:ca:09:1b:63:3c:ac:bc:f0:73:26:89:88:fa: e0:b7:dc:c5:dc:09:31:9f:0e:0e:18:bc:ae:42:54: 9f:e3:64:c6:13:84:99:b7:32:3b:74:67:be:6d:09: f9:50:4d:1e:e1:65:0f:16:1f:28:06:25:13:ef:4b: de:46:72:f8:31:19:3a:54:f7:46:56:d0:8e:e8:d7: 59:45:c2:16:ce:4c:a9:77:2c:58:97:32:d2:84:c0: a4:82:95:90:ef:e4:3c:6a:ad:81:4f:d7:ef:6c:45: 8a:48:65:64:5a:06:1a:7e:0e:5d:96:bb:99:28:d3: c6:e8:e4:3f:7c:7e:16:a2:4b:db:b4:16:c9:31:d3: f5:35:1e:7d:b6:c2:92:35:f0:8e:02:0c:fd:f0:ed: f3:e0:7a:40:d3:17:ec:1e:16:df:70:e9:bc:84:89: 5e:a6:60:f9:51:93:ab:cc:7f:1a:b7:3a:e9:a2:85: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D0:6D:0A:04:A3:50:02:E6:7A:B9:CF:47:C0:80:24:55:F6:EB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/6a6fa473-b587-3ddf-a03e-95fcb379c266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl X509v3 Authority Key Identifier: keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer sbgp-ipAddrBlock: critical IPv4: 98.158.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:82:73:a7:04:84:75:f0:f2:e9:9d:f8:bf:34:df:76:91:8f: 37:22:8c:e6:43:af:f2:ef:28:7e:0b:db:32:21:67:31:b1:f5: 8c:c7:d9:99:b4:8f:55:a8:43:89:97:89:45:38:04:02:db:d7: 0f:ec:d7:ff:ec:f6:cd:10:bf:d7:e7:f6:bd:75:93:0b:cf:6e: f1:37:c2:8b:6c:98:64:23:9c:7f:6f:e6:c4:ca:bf:38:b6:ef: fb:d7:7a:2f:b4:8e:37:90:b9:58:9c:dd:e6:5e:2b:06:5b:d1: ad:b2:25:c0:ba:5b:9c:53:e4:9d:60:0a:85:13:28:0e:f5:e3: e2:4f:7b:3d:23:20:0f:28:8c:18:ab:b9:ce:f4:6a:1c:9d:59: 98:8b:c7:03:b9:57:aa:02:20:51:6f:13:70:da:5d:61:37:a5: 56:d2:ca:a5:1e:e2:47:35:0c:f6:1e:5d:42:fa:63:f9:7f:cc: f7:52:fd:d5:e9:25:fb:c1:f9:f1:90:44:20:cd:79:d9:65:a0: 21:05:9b:2a:a8:d8:25:e5:d1:c0:5f:6f:6c:2c:3a:8e:e7:10: 1d:7d:83:59:18:74:de:aa:c1:35:d6:ac:b4:83:2d:61:f6:35: b0:bd:df:aa:08:97:1e:bb:ed:47:97:7a:a8:54:94:8e:45:3d: e0:62:f4:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0l3LRCQRsPyuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy ZTVlMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk NWM4MTk4NzAtMTA4Ni00YWU0LThlNTUtMDIyZTg3ZmRmMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6qDQlK4ZlJRaVbCwJW1tBi/p/jU8PJcKUak l3dDkMcOqbKptng3rTghERhpmYhRAQgOo0v+dbz3w9U+jyS2Gk0kzIQsewd6PhiH PMoJG2M8rLzwcyaJiPrgt9zF3Akxnw4OGLyuQlSf42TGE4SZtzI7dGe+bQn5UE0e 4WUPFh8oBiUT70veRnL4MRk6VPdGVtCO6NdZRcIWzkypdyxYlzLShMCkgpWQ7+Q8 aq2BT9fvbEWKSGVkWgYafg5dlruZKNPG6OQ/fH4WokvbtBbJMdP1NR59tsKSNfCO Agz98O3z4HpA0xfsHhbfcOm8hIlepmD5UZOrzH8atzrpooVHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3QbQoEo1AC5nq5z0fAgCRV9uvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1 ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvNmE2ZmE0NzMtYjU4Ny0z ZGRmLWEwM2UtOTVmY2IzNzljMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0 M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0 MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw MWIwNDJlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp5uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSCc6cEhHXw8umd+L8033aRjzcijOZDr/LvKH4L2zIhZzGx9YzH2Zm0 j1WoQ4mXiUU4BALb1w/s1//s9s0Qv9fn9r11kwvPbvE3wotsmGQjnH9v5sTKvzi2 7/vXei+0jjeQuVic3eZeKwZb0a2yJcC6W5xT5J1gCoUTKA714+JPez0jIA8ojBir uc70ahydWZiLxwO5V6oCIFFvE3DaXWE3pVbSyqUe4kc1DPYeXUL6Y/l/zPdS/dXp JfvB+fGQRCDNedlloCEFmyqo2CXl0cBfb2wsOo7nEB19g1kYdN6qwTXWrLSDLWH2 NbC936oIlx677UeXeqhUlI5FPeBi9Dw= -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:52 2025 by rpki-client