This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e364a90-5f5a-37f2-90e7-e46a82ff84e3.roa File: 7e364a90-5f5a-37f2-90e7-e46a82ff84e3.roa (raw, json) Hash identifier: Dz/tuHtZP3eVYRnSddkVioWBErCOOTBy2sb59vUt/Uo= Subject key identifier: 01:BD:47:F5:18:95:B6:96:7E:F0:3D:15:FE:03:8B:CE:1D:BE:C3:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C33813C6A1E371C0F802D9500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e364a90-5f5a-37f2-90e7-e46a82ff84e3.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 33491 IP address blocks: 98.220.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:3c:6a:1e:37:1c:0f:80:2d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=9088d853-7868-4dbd-a5de-b75012f1e1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:99:10:e2:62:b5:f3:9d:f5:d4:f3:c1:db: 9b:e1:c6:4f:44:94:cd:00:6d:bc:73:40:a1:5c:1a: 88:fc:95:04:b3:b1:5a:4a:92:cb:16:1a:df:27:d0: 66:b4:f2:f7:59:a0:fd:ea:e0:42:c6:12:fe:49:8e: 7c:ac:ab:3c:82:22:03:8e:a2:9d:a9:be:34:ae:d9: 67:4f:34:35:68:8b:20:75:fd:6b:d7:b1:7c:bd:c7: db:6b:80:6c:a9:a4:2e:54:88:50:01:04:c2:21:de: 06:da:9b:5f:87:1b:62:de:42:dc:cc:2f:bc:ff:15: 40:a9:ed:9c:b8:36:b1:31:f4:15:b4:97:97:5c:73: b1:0d:0a:9f:39:09:ce:f4:a6:4e:51:c3:59:4f:05: 9e:5b:44:01:08:4f:49:de:a3:d6:2c:72:7d:a1:ac: 55:9b:72:47:cd:c0:38:69:7f:dd:df:3f:98:9c:3b: 87:70:02:bf:36:f3:e7:30:f8:49:ac:74:2f:2e:62: f6:c0:3c:10:89:1c:26:7d:00:68:be:97:80:27:88: 64:12:69:f3:4f:10:b7:fb:90:da:ae:72:e4:4b:0e: e3:70:e7:db:1d:a5:ca:a0:c6:3c:3e:c0:64:c7:c6: 5b:80:24:ae:f7:ed:1d:d9:6d:f0:ae:52:9d:27:0a: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:47:F5:18:95:B6:96:7E:F0:3D:15:FE:03:8B:CE:1D:BE:C3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e364a90-5f5a-37f2-90e7-e46a82ff84e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:64:a0:36:c2:c2:f4:e7:e5:87:ae:ea:b8:0e:08:d6:c6:c2: 11:e3:8e:e6:d1:e8:35:5a:db:4c:6d:22:b9:e2:d4:31:8c:33: 69:b1:fb:27:73:d5:32:0f:ad:aa:8d:7a:50:dc:01:cb:1d:da: bb:49:1e:08:80:f3:b2:90:e3:2a:c0:a3:d7:40:5d:b7:b8:86: 8c:33:5f:c2:7b:57:f8:72:bd:e8:e6:d2:02:23:88:51:78:1b: b8:20:83:d3:8d:09:ef:a9:9a:84:93:e6:e6:e3:98:59:06:39: 30:34:94:12:2c:a5:f7:81:50:b0:a5:51:bf:00:a5:a8:90:c8: 66:dc:2c:9f:e6:fd:7d:ba:d0:0a:a5:c9:af:43:08:4c:a1:d0: 1c:14:b4:04:5f:95:2f:2f:9a:41:7d:05:07:ca:4a:cb:db:9e: cf:7b:d6:4b:d9:17:5f:38:73:a0:c5:63:4d:2b:e3:fb:e1:17: e9:dd:ea:f3:bb:9c:17:62:a0:c9:9d:4a:50:45:bc:4a:a6:96: bf:2b:c1:98:aa:fc:a1:ce:80:4e:ce:c9:b0:1f:70:28:7c:c2: 83:89:8e:ba:72:c6:ac:d1:25:a2:64:7c:40:23:68:88:52:ac: c5:dd:f1:3f:e1:2e:15:3e:47:75:15:a6:26:80:82:92:fe:f9: a0:0f:72:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgTxqHjccD4AtlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk OTA4OGQ4NTMtNzg2OC00ZGJkLWE1ZGUtYjc1MDEyZjFlMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEGZEOJitfOd9dTzwdub4cZPRJTNAG28c0Ch XBqI/JUEs7FaSpLLFhrfJ9BmtPL3WaD96uBCxhL+SY58rKs8giIDjqKdqb40rtln TzQ1aIsgdf1r17F8vcfba4BsqaQuVIhQAQTCId4G2ptfhxti3kLczC+8/xVAqe2c uDaxMfQVtJeXXHOxDQqfOQnO9KZOUcNZTwWeW0QBCE9J3qPWLHJ9oaxVm3JHzcA4 aX/d3z+YnDuHcAK/NvPnMPhJrHQvLmL2wDwQiRwmfQBovpeAJ4hkEmnzTxC3+5Da rnLkSw7jcOfbHaXKoMY8PsBkx8ZbgCSu9+0d2W3wrlKdJwp/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG9R/UYlbaWfvA9Ff4Di84dvsPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2UzNjRhOTAtNWY1YS0z N2YyLTkwZTctZTQ2YTgyZmY4NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1koDbCwvTn5Yeu6rgOCNbGwhHjjubR6DVa20xtIrni1DGMM2mx+ydz 1TIPraqNelDcAcsd2rtJHgiA87KQ4yrAo9dAXbe4howzX8J7V/hyvejm0gIjiFF4 G7ggg9ONCe+pmoST5ubjmFkGOTA0lBIspfeBULClUb8ApaiQyGbcLJ/m/X260Aql ya9DCEyh0BwUtARflS8vmkF9BQfKSsvbns971kvZF184c6DFY00r4/vhF+nd6vO7 nBdioMmdSlBFvEqmlr8rwZiq/KHOgE7OybAfcCh8woOJjrpyxqzRJaJkfEAjaIhS rMXd8T/hLhU+R3UVpiaAgpL++aAPcv0= -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:35 2025 by rpki-client