This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa File: bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa (raw, json) Hash identifier: nGyMxN0ttsFxluDdeDpMXeuQzrhoLRMhLrEfUvg5nSM= Subject key identifier: E7:6F:BE:05:AB:2E:93:85:E4:91:22:F9:1A:23:71:9F:F0:5A:9B:C9 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584C02A5FCBDFDA653B259809180 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a5:fc:bd:fd:a6:53:b2:59:80:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=aaa63868-432c-4cff-9533-040f3e4f8891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:5b:ec:33:7b:3a:e2:a6:8a:5c:fe:01:ca: 8c:7b:17:64:2c:5b:df:5b:08:ea:bc:d2:25:5f:15: 0f:b9:88:ee:bc:5d:98:a7:2a:c4:06:4c:d2:60:fa: f0:2c:7b:5c:38:89:9e:fd:0b:18:b7:fe:5e:5c:08: 05:e9:d6:2a:47:88:09:01:76:d5:ce:90:28:91:b0: f2:da:73:9a:c1:aa:92:91:c5:1f:3e:f9:89:66:04: 4f:66:f6:16:92:2d:c0:ee:90:42:a8:0b:93:76:a4: 3f:09:1f:2a:0b:8b:b5:e9:0e:49:02:15:8a:f9:9e: 72:63:6f:85:84:48:b9:49:7e:17:c9:f1:21:72:aa: 5c:bc:ce:b4:48:ac:25:84:7e:33:21:95:73:fd:37: 89:78:57:6f:94:c2:46:a4:cd:76:d8:dd:6a:b6:49: 55:05:31:41:f6:1d:47:aa:61:17:27:27:92:e6:c4: e8:33:f2:e9:95:57:7e:10:de:fd:d5:db:79:3c:16: 05:7e:f7:b5:cd:31:cf:51:a1:b1:38:0e:6c:c7:ab: ae:cb:f1:6e:46:02:64:78:f2:20:f0:98:3c:51:ce: 33:19:ab:da:1a:94:67:93:c5:de:9e:65:a4:1a:70: 21:95:ef:7b:09:a0:7c:66:f4:63:e2:ba:01:93:d8: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6F:BE:05:AB:2E:93:85:E4:91:22:F9:1A:23:71:9F:F0:5A:9B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bf:9e:8f:0d:b9:f6:4a:6e:cf:67:76:81:45:04:8d:4b:53: c2:bf:fb:ea:9d:93:75:79:60:f4:72:e8:d9:14:d0:f3:df:03: 44:b8:8d:11:b6:b7:40:eb:49:ed:8b:b7:ad:ba:42:8a:ae:a1: 4b:f6:c4:d3:78:03:e7:f5:de:1a:3c:4b:c8:f4:d1:28:26:f4: f0:4f:0a:be:2e:59:97:85:27:8c:d7:bc:07:3b:be:2c:74:bb: c1:a1:45:78:5e:65:d1:fb:aa:23:f7:aa:2a:aa:d0:06:25:6b: d0:6c:7e:56:04:eb:fe:bd:3b:97:f1:73:e3:19:1d:95:41:27: 83:b4:41:db:6f:07:77:86:5e:17:a0:d4:9e:09:aa:86:97:e8: de:41:fe:be:32:1c:96:24:02:c1:6f:ce:5e:a2:54:6b:4f:ab: 3d:dc:ad:7b:55:82:a5:51:7b:ac:8e:a0:22:4f:ab:f3:c9:49: ae:92:1b:81:39:58:9d:42:38:bb:a6:d5:b8:42:fc:7e:4b:ca: fd:d0:c0:56:47:92:29:fa:5d:b0:6c:79:fb:a8:1b:96:7b:96: a7:05:e5:ca:dc:e1:2f:b3:9f:84:6f:d1:5a:5f:0a:f8:1b:fd: db:31:18:49:8e:0b:f4:95:23:65:b4:a8:e3:53:ad:54:21:ab: f2:27:9a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwCpfy9/aZTslmAkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk YWFhNjM4NjgtNDMyYy00Y2ZmLTk1MzMtMDQwZjNlNGY4ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuRb7DN7OuKmilz+AcqMexdkLFvfWwjqvNIl XxUPuYjuvF2YpyrEBkzSYPrwLHtcOIme/QsYt/5eXAgF6dYqR4gJAXbVzpAokbDy 2nOawaqSkcUfPvmJZgRPZvYWki3A7pBCqAuTdqQ/CR8qC4u16Q5JAhWK+Z5yY2+F hEi5SX4XyfEhcqpcvM60SKwlhH4zIZVz/TeJeFdvlMJGpM122N1qtklVBTFB9h1H qmEXJyeS5sToM/LplVd+EN791dt5PBYFfve1zTHPUaGxOA5sx6uuy/FuRgJkePIg 8Jg8Uc4zGavaGpRnk8XenmWkGnAhle97CaB8ZvRj4roBk9jPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdvvgWrLpOF5JEi+RojcZ/wWpvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYmZiN2JmZTUtNDA2Yi0z MmQ5LWExY2EtYTczMWFmNzZhOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6/no8NufZKbs9ndoFFBI1LU8K/++qdk3V5YPRy6NkU0PPfA0S4jRG2 t0DrSe2Lt626QoquoUv2xNN4A+f13ho8S8j00Sgm9PBPCr4uWZeFJ4zXvAc7vix0 u8GhRXheZdH7qiP3qiqq0AYla9BsflYE6/69O5fxc+MZHZVBJ4O0QdtvB3eGXheg 1J4JqoaX6N5B/r4yHJYkAsFvzl6iVGtPqz3crXtVgqVRe6yOoCJPq/PJSa6SG4E5 WJ1COLum1bhC/H5Lyv3QwFZHkin6XbBsefuoG5Z7lqcF5crc4S+zn4Rv0VpfCvgb /dsxGEmOC/SVI2W0qONTrVQhq/Inmiw= -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:48 2025 by rpki-client