This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/f5d70acb-490e-30d3-a50e-04955b8cdc82.roa File: f5d70acb-490e-30d3-a50e-04955b8cdc82.roa (raw, json) Hash identifier: gMCOnmaJdwiG5v9IPnan/oSNETg9YgJKqGNnCOAM8jY= Subject key identifier: 27:06:6B:9F:F7:CC:E0:31:D1:52:64:25:DA:CA:13:ED:76:3D:2F:F4 Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Certificate serial: 010D0C9F4328584BEF1B49676A8429F219342410 Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/f5d70acb-490e-30d3-a50e-04955b8cdc82.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 37740 IP address blocks: 98.158.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:49:67:6a:84:29:f2:19:34:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=f36b44d4-716c-47d6-8d5c-808f8426e0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:81:fd:dc:17:b5:6a:df:56:b3:23:33:46: 1f:8c:ae:5e:8e:9a:48:9d:96:6d:c9:ff:d7:c8:47: 05:d9:2a:17:fe:19:f1:c1:93:ca:3d:aa:bb:69:a9: 1b:10:fd:c6:2a:86:e0:a9:d2:ff:54:db:31:59:fe: f8:6a:2a:85:5b:da:47:0d:be:b0:ba:dd:78:0e:c7: 23:8d:dc:ed:31:89:41:9b:c1:e3:ab:06:78:b4:52: ef:d4:63:e0:80:65:8e:f5:88:a7:b3:72:30:0b:40: bd:7e:99:86:a1:0e:d8:59:af:5c:fb:f5:81:94:b6: 5d:8e:dc:bc:3e:3c:67:74:bd:b7:7b:2a:04:15:17: 74:a5:77:0c:68:fd:10:30:c9:e3:91:cd:99:86:4b: ee:9d:35:3d:73:6b:c4:8e:f3:1b:3f:e0:e5:bb:13: f7:48:ac:97:20:15:80:ab:33:89:a7:b2:16:6f:42: be:81:fa:d2:6a:d1:71:87:11:dd:50:c7:34:40:58: e4:17:82:3c:84:14:a0:83:92:31:c7:98:c5:fc:0b: c5:29:e2:6a:59:b1:93:3e:d4:5c:f5:59:72:41:24: c8:53:d2:eb:78:90:fd:cd:31:22:e1:e1:a6:3d:8d: 74:6d:20:19:0e:e5:54:1b:ce:a6:24:22:de:b0:5c: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:06:6B:9F:F7:CC:E0:31:D1:52:64:25:DA:CA:13:ED:76:3D:2F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/f5d70acb-490e-30d3-a50e-04955b8cdc82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl X509v3 Authority Key Identifier: keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer sbgp-ipAddrBlock: critical IPv4: 98.158.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a1:73:0d:20:2a:aa:a9:b3:a0:c0:07:87:da:b4:30:bd:31: 22:5a:31:59:32:d9:ef:6a:74:6f:a9:82:aa:1f:c7:ff:92:f0: 0a:33:84:68:43:53:5b:f9:09:d8:e9:ca:86:b7:33:14:50:4c: d3:6e:ad:95:fe:d8:e1:91:16:24:c6:94:ae:31:5b:b8:98:73: 9c:9f:4d:04:eb:b7:df:f3:30:54:4a:c1:30:47:f1:15:2a:62: 53:6a:64:24:e4:c2:e0:4b:39:06:9c:c8:96:6b:a3:58:b1:4f: 4c:8c:cb:44:40:d4:70:d8:81:65:bd:f3:16:18:22:7f:e3:10: 67:11:93:8e:96:6b:72:f5:25:00:d7:f3:d1:29:14:26:8a:27: 2b:bf:4a:c0:ea:8a:52:3c:9e:e0:17:da:f7:fa:2b:69:b5:71: c4:79:b5:20:ce:ba:36:72:02:0c:3a:d2:8d:de:fd:11:32:ed: f1:56:9d:25:b7:06:53:b7:68:8e:7c:fa:e5:8e:8b:3a:54:7f: 1a:ba:1e:7b:0a:29:6f:8b:d2:00:7f:9e:63:31:dd:0d:f8:0f: f5:c4:2e:5c:d6:c2:c9:bc:10:bb:f1:3f:93:4e:78:86:79:cf: 29:a7:87:01:73:ac:5d:4b:e0:5c:82:7d:3d:1e:ad:ad:13:fb: 1c:1a:99:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0lnaoQp8hk0JBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy ZTVlMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk ZjM2YjQ0ZDQtNzE2Yy00N2Q2LThkNWMtODA4Zjg0MjZlMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGB/dwXtWrfVrMjM0YfjK5ejppInZZtyf/X yEcF2SoX/hnxwZPKPaq7aakbEP3GKobgqdL/VNsxWf74aiqFW9pHDb6wut14Dscj jdztMYlBm8HjqwZ4tFLv1GPggGWO9Yins3IwC0C9fpmGoQ7YWa9c+/WBlLZdjty8 PjxndL23eyoEFRd0pXcMaP0QMMnjkc2ZhkvunTU9c2vEjvMbP+DluxP3SKyXIBWA qzOJp7IWb0K+gfrSatFxhxHdUMc0QFjkF4I8hBSgg5Ixx5jF/AvFKeJqWbGTPtRc 9VlyQSTIU9LreJD9zTEi4eGmPY10bSAZDuVUG86mJCLesFyU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcGa5/3zOAx0VJkJdrKE+12PS/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1 ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvZjVkNzBhY2ItNDkwZS0z MGQzLWE1MGUtMDQ5NTViOGNkYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0 M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0 MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw MWIwNDJlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp5uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALihcw0gKqqps6DAB4fatDC9MSJaMVky2e9qdG+pgqofx/+S8AozhGhD U1v5Cdjpyoa3MxRQTNNurZX+2OGRFiTGlK4xW7iYc5yfTQTrt9/zMFRKwTBH8RUq YlNqZCTkwuBLOQacyJZro1ixT0yMy0RA1HDYgWW98xYYIn/jEGcRk46Wa3L1JQDX 89EpFCaKJyu/SsDqilI8nuAX2vf6K2m1ccR5tSDOujZyAgw60o3e/REy7fFWnSW3 BlO3aI58+uWOizpUfxq6HnsKKW+L0gB/nmMx3Q34D/XELlzWwsm8ELvxP5NOeIZ5 zymnhwFzrF1L4FyCfT0era0T+xwamek= -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:35 2025 by rpki-client