This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f9b245-6207-3ad6-b822-bd1003b05899.roa File: c0f9b245-6207-3ad6-b822-bd1003b05899.roa (raw, json) Hash identifier: 8SjIUWiKlnyUo/BqtFbklmZ9IDgVFAJ/WgspEq+aKqc= Subject key identifier: AE:ED:AB:79:C3:46:0C:B4:60:97:F6:92:03:0F:B2:30:4B:3B:29:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E911CB6788E301878DBBF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f9b245-6207-3ad6-b822-bd1003b05899.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 22909 IP address blocks: 98.40.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:91:1c:b6:78:8e:30:18:78:db:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=2a240066-7a5b-4ed1-ac5f-393c5005e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:ba:30:b9:79:51:a4:6f:f3:45:9c:ad:ab: 40:58:25:c8:9c:0a:85:09:62:d2:3b:8f:99:b7:2b: 3e:ef:6e:4f:61:b6:34:e1:4c:8c:68:21:10:18:72: 1c:bb:8a:e7:7b:6b:9b:3a:f5:30:cf:38:01:72:26: 6a:d4:64:26:b4:e2:f8:67:6a:64:21:68:16:40:6d: 08:09:a5:0e:72:ce:c1:99:06:fa:07:7d:27:5e:c1: c7:ed:f7:f0:65:4a:a6:65:d4:d3:41:0e:c7:db:a6: 6e:29:ce:8b:69:e5:7f:ab:6f:aa:b1:7d:e1:2a:cd: 0f:b3:39:65:e4:b4:91:0b:a4:fc:3e:8c:59:b7:1e: 4c:0e:3b:8a:5a:cb:d8:fc:b2:bd:2b:e9:9f:87:7a: 8d:2f:83:9b:63:57:1a:5e:43:52:11:8b:d8:db:f2: 2c:8e:43:58:bb:6c:fc:ac:8d:db:48:9a:15:d7:24: e0:56:5b:e6:22:19:a5:24:95:28:de:23:73:11:36: d9:1e:2a:b3:c1:cd:a5:32:3d:c4:36:b7:a1:66:81: c1:78:a9:88:cf:3e:48:25:8a:98:a1:ab:21:32:de: 33:44:64:37:7d:94:8f:d7:9f:58:fc:0d:97:d1:03: af:cc:33:bf:11:93:f6:4f:c9:b1:3a:2f:e7:59:b5: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:ED:AB:79:C3:46:0C:B4:60:97:F6:92:03:0F:B2:30:4B:3B:29:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f9b245-6207-3ad6-b822-bd1003b05899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b9:c6:90:7a:f2:b5:d3:67:54:95:18:90:36:76:64:ca:8a: 13:d1:1a:79:a1:fd:ee:d4:da:0f:84:54:66:bb:a8:01:1e:99: e4:a2:f4:da:b9:88:4f:01:b2:cb:ad:59:0b:0e:23:2c:19:11: 04:d3:66:5e:d5:40:d7:86:9b:7c:da:c2:f1:76:b7:47:bb:69: 5b:ab:74:2b:ee:de:6d:69:37:d8:9f:8c:96:f7:55:87:99:15: cb:ec:67:9d:27:9a:bc:e2:1f:02:db:0d:e3:56:59:1d:fc:08: 79:43:c6:9a:f8:87:e3:40:d2:36:3d:65:2f:4a:b4:52:3d:58: 74:ad:5f:ff:0a:a6:10:35:ba:fe:1c:34:76:b4:49:9b:b4:a1: 65:e9:f6:19:3f:20:a7:76:f1:69:f6:ac:22:94:d6:0b:17:a0: 1e:1d:f7:6e:93:a8:23:01:d8:16:7c:b1:ed:c6:a3:9f:88:73: d9:9f:6b:64:1f:7a:d9:e4:89:2e:3b:01:82:41:df:da:3b:db: 47:e0:fc:9e:e9:cc:d3:4a:03:bd:02:cb:ad:ee:58:25:a9:1e: 5f:69:19:1d:3e:80:cb:bd:4a:b5:f9:00:e9:01:f5:01:01:aa: e8:aa:4a:c0:65:36:56:5c:89:d2:4c:2b:64:c3:4c:f8:ed:8d: 13:9c:a6:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekRy2eI4wGHjbv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk MmEyNDAwNjYtN2E1Yi00ZWQxLWFjNWYtMzkzYzUwMDVlNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUq6MLl5UaRv80WcratAWCXInAqFCWLSO4+Z tys+725PYbY04UyMaCEQGHIcu4rne2ubOvUwzzgBciZq1GQmtOL4Z2pkIWgWQG0I CaUOcs7BmQb6B30nXsHH7ffwZUqmZdTTQQ7H26ZuKc6LaeV/q2+qsX3hKs0Pszll 5LSRC6T8PoxZtx5MDjuKWsvY/LK9K+mfh3qNL4ObY1caXkNSEYvY2/IsjkNYu2z8 rI3bSJoV1yTgVlvmIhmlJJUo3iNzETbZHiqzwc2lMj3ENrehZoHBeKmIzz5IJYqY oashMt4zRGQ3fZSP159Y/A2X0QOvzDO/EZP2T8mxOi/nWbUs4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7tq3nDRgy0YJf2kgMPsjBLOykfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzBmOWIyNDUtNjIwNy0z YWQ2LWI4MjItYmQxMDAzYjA1ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYihEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy5xpB68rXTZ1SVGJA2dmTKihPRGnmh/e7U2g+EVGa7qAEemeSi9Nq5 iE8BssutWQsOIywZEQTTZl7VQNeGm3zawvF2t0e7aVurdCvu3m1pN9ifjJb3VYeZ FcvsZ50nmrziHwLbDeNWWR38CHlDxpr4h+NA0jY9ZS9KtFI9WHStX/8KphA1uv4c NHa0SZu0oWXp9hk/IKd28Wn2rCKU1gsXoB4d926TqCMB2BZ8se3Go5+Ic9mfa2Qf etnkiS47AYJB39o720fg/J7pzNNKA70Cy63uWCWpHl9pGR0+gMu9SrX5AOkB9QEB quiqSsBlNlZcidJMK2TDTPjtjROcptM= -----END CERTIFICATE-----Generated at Sat Dec 20 03:18:56 2025 by rpki-client