This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa File: aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa (raw, json) Hash identifier: q09rkCiSjBMTuop5ycBXvr1axMzUotKumFDjVm2PJZE= Subject key identifier: 88:E7:3B:8E:98:FF:2C:35:DC:67:B3:A7:0F:35:05:AC:4C:BC:97:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C3380E9F658A26D7427CCF600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 33651 IP address blocks: 98.35.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:80:e9:f6:58:a2:6d:74:27:cc:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=760e3186-c18c-4b70-ab22-ef856c1c46d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:99:eb:fc:a4:de:ca:95:5e:3b:57:7b:b2:9f: dd:64:33:bf:19:b0:7d:80:3e:3c:8b:67:16:15:02: 32:5f:17:cb:3b:dc:b0:81:d2:0f:21:bd:0a:11:f6: 36:3b:7a:0b:f6:e3:0f:89:c4:e9:84:83:f5:b0:01: 94:b2:a8:0b:a5:6f:ec:a1:29:eb:53:9c:35:d7:eb: 03:29:2c:83:c2:c8:4d:b3:39:26:6f:0e:c2:89:d8: 50:e4:84:3f:e2:a9:d4:20:21:ff:91:f6:53:36:f3: 46:7c:d3:11:b3:5a:ac:8c:9f:32:c4:76:46:fb:9b: d0:38:0a:00:d8:eb:d2:10:44:24:fd:6a:3c:23:03: 2c:9b:31:73:b2:94:1c:66:35:7b:e1:9d:4c:d6:84: 39:63:3d:08:a6:76:83:66:05:1a:4e:70:6c:ae:37: 43:bc:5b:e3:d6:10:6f:a4:a3:74:1c:34:a9:25:d9: fb:94:fb:f6:4e:c6:13:1e:88:65:f6:43:1a:7d:7a: 31:a6:df:f5:17:e6:9e:06:0e:4d:83:42:1c:c1:c0: c2:29:ba:bb:bd:8d:b9:41:34:a7:17:c7:d8:5e:7c: 11:5f:7f:b7:2e:aa:76:26:2c:4e:72:98:43:f9:c4: 53:b5:a4:2d:73:f8:26:45:f8:6f:ea:09:0f:00:25: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E7:3B:8E:98:FF:2C:35:DC:67:B3:A7:0F:35:05:AC:4C:BC:97:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:cb:bf:57:86:2c:a0:3c:42:23:96:39:fc:e0:41:f3:b6:72: 49:82:47:a7:1d:b2:01:3b:13:73:da:b0:d6:25:ea:59:84:51: 81:4b:ec:e8:a9:51:e0:b6:fb:53:c8:b5:12:f9:29:b1:45:e3: 90:b7:db:68:2c:44:33:29:83:d3:d7:31:f2:23:17:3f:79:3b: 08:d8:91:1d:10:3f:55:2d:37:2a:bf:f0:69:52:18:57:ca:9d: fe:b1:13:ca:9e:28:48:0e:01:14:01:4a:4e:8d:9d:8e:4b:27: 8b:a2:90:e0:60:c0:33:14:70:d1:0c:49:55:51:6b:d5:44:f3: b0:48:56:ff:c3:ec:1d:2e:79:a0:b6:6f:ee:0f:fc:00:25:c5: 54:df:3b:e2:8b:82:a7:bc:a9:eb:56:09:73:f0:a3:ee:d5:7a: 79:5c:9d:2a:80:92:c5:cb:0b:02:cc:e4:a7:16:b3:1c:a6:17: 2e:29:2e:2e:7a:6f:53:40:68:da:49:04:11:16:99:05:76:fa: 7f:f0:19:99:4b:16:ad:4d:a4:76:df:45:d9:5d:79:a1:1b:e6: 4b:94:1d:7f:fc:dd:67:92:81:8e:ab:18:7b:8c:96:9d:0d:93: 03:f7:e2:d8:4d:11:0e:3f:ab:0c:84:78:36:07:26:6b:8b:90: 09:a5:e3:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgOn2WKJtdCfM9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk NzYwZTMxODYtYzE4Yy00YjcwLWFiMjItZWY4NTZjMWM0NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Jnr/KTeypVeO1d7sp/dZDO/GbB9gD48i2cW FQIyXxfLO9ywgdIPIb0KEfY2O3oL9uMPicTphIP1sAGUsqgLpW/soSnrU5w11+sD KSyDwshNszkmbw7CidhQ5IQ/4qnUICH/kfZTNvNGfNMRs1qsjJ8yxHZG+5vQOAoA 2OvSEEQk/Wo8IwMsmzFzspQcZjV74Z1M1oQ5Yz0IpnaDZgUaTnBsrjdDvFvj1hBv pKN0HDSpJdn7lPv2TsYTHohl9kMafXoxpt/1F+aeBg5Ng0IcwcDCKbq7vY25QTSn F8fYXnwRX3+3Lqp2JixOcphD+cRTtaQtc/gmRfhv6gkPACUwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjnO46Y/yw13Gezpw81BaxMvJfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFhNWRjZGItMGQ5Zi0z ZGFkLTg5MTAtZWFmMmMyZTdlMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLLv1eGLKA8QiOWOfzgQfO2ckmCR6cdsgE7E3PasNYl6lmEUYFL7Oip UeC2+1PItRL5KbFF45C322gsRDMpg9PXMfIjFz95OwjYkR0QP1UtNyq/8GlSGFfK nf6xE8qeKEgOARQBSk6NnY5LJ4uikOBgwDMUcNEMSVVRa9VE87BIVv/D7B0ueaC2 b+4P/AAlxVTfO+KLgqe8qetWCXPwo+7VenlcnSqAksXLCwLM5KcWsxymFy4pLi56 b1NAaNpJBBEWmQV2+n/wGZlLFq1NpHbfRdldeaEb5kuUHX/83WeSgY6rGHuMlp0N kwP34thNEQ4/qwyEeDYHJmuLkAml4zw= -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:07 2025 by rpki-client