This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa File: d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json) Hash identifier: 7h6Iw3BLRFPvvmt/w8o17hGNLhdFLHaA0kVeYJi07G0= Subject key identifier: CF:B1:19:10:AA:D2:17:1B:67:E7:A8:E5:18:1F:12:AD:71:74:67:B3 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584BE125D493643EC939ABF8B000 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 46261 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:25:d4:93:64:3e:c9:39:ab:f8:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=3c7e1edc-3bae-4574-93a9-e06ab66de886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:66:4a:ea:1f:6f:48:4d:83:a9:4e:71:a4: 88:d6:57:72:6f:f8:c5:36:2b:4a:30:89:5e:69:d5: 0d:07:51:e0:85:24:52:5a:c4:1c:f6:ad:73:e5:41: 69:61:b9:a1:0e:9f:82:9c:99:fa:6e:23:ec:7b:f5: f1:89:29:17:23:3a:84:3f:a2:52:c8:ff:bf:c6:de: 7a:a5:6c:b7:69:4d:d9:6f:0d:07:f5:93:f1:77:62: f9:26:c9:f1:ff:fe:73:fc:a3:54:34:e0:4a:4f:64: 95:40:3e:f2:02:90:6f:03:62:02:ba:db:bd:7b:e6: da:e8:56:a6:40:b3:58:41:10:a3:2d:de:fb:cb:8a: 1e:81:e6:1a:8b:9c:0e:dd:53:92:96:e9:98:22:dd: 6d:f5:ad:0d:ed:99:46:75:a8:c5:d4:b6:e6:34:dc: 53:27:a7:51:59:93:dd:3a:c5:6e:a1:a8:81:a2:e5: ee:a0:20:86:e2:fc:03:13:06:4b:ea:31:a5:b0:0e: aa:5e:3a:b2:cb:78:95:c7:d4:59:71:ac:96:70:13: 0b:5d:f3:b3:cf:ae:24:72:29:f5:3c:35:46:df:b3: 08:f9:2a:3a:df:4c:a7:f9:a7:9e:cc:3e:de:42:e6: 94:c6:c1:29:26:41:bc:3d:11:5a:c0:1e:bf:79:5d: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:19:10:AA:D2:17:1B:67:E7:A8:E5:18:1F:12:AD:71:74:67:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8b:52:5a:72:2d:c8:c4:ca:78:a7:64:a9:e7:16:6f:3b:2b: 77:7b:ef:16:f2:03:62:fc:c7:97:f4:af:ae:65:85:a5:f1:3b: 69:63:e3:99:7f:46:1e:30:b7:f8:6f:89:30:c6:88:d8:aa:3e: b9:d4:8d:42:90:d3:7c:b2:ad:fb:c5:16:33:48:82:95:1f:13: 5c:94:24:65:3b:50:70:57:42:87:8d:a3:3f:d8:51:c3:0b:be: b2:f0:87:74:13:a1:f3:51:6c:37:94:71:7d:ea:73:cf:d3:e2: 15:74:c9:d7:c5:c4:fd:51:86:8c:f2:74:c5:4e:ba:03:65:ae: fe:02:d2:a1:af:8f:30:7a:af:5d:9a:8d:be:46:fa:12:d7:4c: 26:f0:11:62:45:a0:a4:cc:01:87:86:83:6b:3a:d2:e7:1f:3b: 26:75:03:dd:39:ba:7f:a2:0c:12:ee:ac:cd:d3:26:db:87:01: 5c:b8:f5:d6:44:51:3b:29:28:e0:af:7e:44:4d:65:68:3c:96: 61:32:0a:8d:74:e9:bf:c3:4e:c0:6b:7c:cf:32:f5:1c:84:6d: d9:ff:8f:52:68:a1:da:a6:a1:7d:b0:96:fb:b0:23:d0:a2:b2: 0b:80:b2:ba:18:4d:6c:44:35:73:6e:59:18:0e:60:31:9e:9a: 58:47:ea:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJdSTZD7JOav4sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk M2M3ZTFlZGMtM2JhZS00NTc0LTkzYTktZTA2YWI2NmRlODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TdmSuofb0hNg6lOcaSI1ldyb/jFNitKMIle adUNB1HghSRSWsQc9q1z5UFpYbmhDp+CnJn6biPse/XxiSkXIzqEP6JSyP+/xt56 pWy3aU3Zbw0H9ZPxd2L5Jsnx//5z/KNUNOBKT2SVQD7yApBvA2ICutu9e+ba6Fam QLNYQRCjLd77y4oegeYai5wO3VOSlumYIt1t9a0N7ZlGdajF1LbmNNxTJ6dRWZPd OsVuoaiBouXuoCCG4vwDEwZL6jGlsA6qXjqyy3iVx9RZcayWcBMLXfOzz64kcin1 PDVG37MI+So630yn+aeezD7eQuaUxsEpJkG8PRFawB6/eV3YtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+xGRCq0hcbZ+eo5RgfEq1xdGezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDM0ZjNmZGUtY2M5My0z N2ZmLThjNDEtMGQyMGFkZTZmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKLUlpyLcjEyninZKnnFm87K3d77xbyA2L8x5f0r65lhaXxO2lj45l/ Rh4wt/hviTDGiNiqPrnUjUKQ03yyrfvFFjNIgpUfE1yUJGU7UHBXQoeNoz/YUcML vrLwh3QTofNRbDeUcX3qc8/T4hV0ydfFxP1RhozydMVOugNlrv4C0qGvjzB6r12a jb5G+hLXTCbwEWJFoKTMAYeGg2s60ucfOyZ1A905un+iDBLurM3TJtuHAVy49dZE UTspKOCvfkRNZWg8lmEyCo106b/DTsBrfM8y9RyEbdn/j1JoodqmoX2wlvuwI9Ci sguAsroYTWxENXNuWRgOYDGemlhH6o4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:30 2025 by rpki-client