This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa File: b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa (raw, json) Hash identifier: +lf7/Ms0ppUQInXNRNr+kWrbYDt2zYrbwZeJXifMZOU= Subject key identifier: 70:3E:07:75:26:C8:3D:62:BE:0A:66:AE:E1:AD:EF:4F:42:EB:1E:98 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584BF4B095BB1E0F7776EA970040 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 14618 IP address blocks: 208.95.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:95:bb:1e:0f:77:76:ea:97:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=30ad6356-7649-48c9-8a05-729d1074cc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:05:c2:1d:57:75:5f:5e:d2:61:cd:27:1a: 40:2b:8a:5b:61:24:ba:4f:92:8f:e4:9a:3c:7f:9c: 58:30:90:71:d2:95:98:57:90:a5:cb:0b:19:18:e3: ae:19:e5:3b:fa:3f:de:0d:9b:74:91:ab:3b:44:36: 35:2a:18:0e:12:1d:67:ce:44:0f:90:d0:95:fb:64: a1:79:1a:69:ba:d6:cf:87:27:3b:a3:77:b7:40:e2: 13:5e:60:b5:c2:5c:6f:a7:f1:02:1b:45:51:04:51: e4:3e:6c:6d:37:df:56:99:da:83:24:c6:7d:eb:7f: 73:3c:d2:03:f5:20:ca:4b:67:56:eb:fd:85:d0:53: 4a:71:9e:ae:d7:0f:97:df:bd:b6:28:34:a2:e7:91: 4a:84:4e:73:54:8b:f2:22:fa:8b:2b:12:7d:75:a0: 42:1e:c1:ec:6b:b3:78:ae:65:18:4a:7e:78:05:16: ac:eb:63:7b:92:e4:44:c1:8f:26:05:76:f4:ab:35: cb:30:b6:ba:cc:54:f1:85:8e:0a:d8:ce:6a:21:2d: c7:67:c2:1d:5a:23:d1:d1:d5:28:49:94:13:09:a4: d1:55:b8:ea:f1:b8:40:8b:1a:3e:38:f6:81:50:55: 3f:1a:ad:e0:a4:3e:fc:bf:bc:a8:cd:6b:d1:b3:de: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3E:07:75:26:C8:3D:62:BE:0A:66:AE:E1:AD:EF:4F:42:EB:1E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:15:12:a4:43:19:d3:46:4a:36:42:17:ff:56:d9:8d:e6:05: 5b:1c:69:79:28:64:3f:be:d5:c0:bb:d5:81:aa:af:70:11:94: 96:22:97:0c:65:62:cd:79:82:d7:83:45:e2:c0:b7:32:97:1c: c2:30:a5:9a:93:3b:b7:d6:77:b0:f0:89:e7:23:51:bd:45:2f: b7:3a:dc:e1:11:52:51:f8:e7:4e:22:4f:cb:ce:ae:bb:7d:3f: 4f:03:d3:07:ba:fa:41:54:b3:8a:a5:f9:63:a6:73:83:25:2a: 4e:03:8f:11:5f:b2:ec:d2:a4:61:78:66:ba:33:3b:1e:77:d8: 77:90:5d:42:d0:c7:d4:9a:83:71:3a:3b:fb:09:89:a0:dd:7f: 52:08:e0:47:db:09:05:99:c7:fd:66:83:24:52:11:5f:e4:31: 54:5d:3a:03:5a:b2:83:44:fc:bb:bd:0d:94:55:b0:02:a6:97: b2:55:3e:0c:53:9d:13:6b:2f:3a:5f:20:f9:43:ac:c3:15:50: 52:ac:06:b9:f8:79:07:62:3e:d5:63:15:d7:d2:bb:70:e4:90: a5:b3:6a:1a:90:15:76:bd:df:e6:36:59:ea:29:86:9b:e4:87: 25:a9:58:16:dc:9c:f3:58:a8:1d:a0:24:e3:67:a1:71:f7:40: a8:52:52:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sJW7Hg93duqXAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzBhZDYzNTYtNzY0OS00OGM5LThhMDUtNzI5ZDEwNzRjYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR8Fwh1XdV9e0mHNJxpAK4pbYSS6T5KP5Jo8 f5xYMJBx0pWYV5ClywsZGOOuGeU7+j/eDZt0kas7RDY1KhgOEh1nzkQPkNCV+2Sh eRpputbPhyc7o3e3QOITXmC1wlxvp/ECG0VRBFHkPmxtN99WmdqDJMZ9639zPNID 9SDKS2dW6/2F0FNKcZ6u1w+X3722KDSi55FKhE5zVIvyIvqLKxJ9daBCHsHsa7N4 rmUYSn54BRas62N7kuREwY8mBXb0qzXLMLa6zFTxhY4K2M5qIS3HZ8IdWiPR0dUo SZQTCaTRVbjq8bhAixo+OPaBUFU/Gq3gpD78v7yozWvRs97jTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA+B3UmyD1ivgpmruGt709C6x6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjY3NGUyZjYtYzhkYy0z N2QyLTkyNGUtMzZjZjExNGY1MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUVEqRDGdNGSjZCF/9W2Y3mBVscaXkoZD++1cC71YGqr3ARlJYilwxl Ys15gteDReLAtzKXHMIwpZqTO7fWd7DwiecjUb1FL7c63OERUlH4504iT8vOrrt9 P08D0we6+kFUs4ql+WOmc4MlKk4DjxFfsuzSpGF4ZrozOx532HeQXULQx9Sag3E6 O/sJiaDdf1II4EfbCQWZx/1mgyRSEV/kMVRdOgNasoNE/Lu9DZRVsAKml7JVPgxT nRNrLzpfIPlDrMMVUFKsBrn4eQdiPtVjFdfSu3DkkKWzahqQFXa93+Y2Weophpvk hyWpWBbcnPNYqB2gJONnoXH3QKhSUlA= -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:35 2025 by rpki-client