This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa File: 0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa (raw, json) Hash identifier: IYAhd4jS+WCUQHhWlLZwd5DGWPQ6ZPOhhFNN+wQDRWc= Subject key identifier: 01:06:70:2C:8B:72:BA:B6:34:53:14:6C:CD:6A:E0:31:56:EE:54:46 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584C321BA4E3EB7E0DB179C2BC20 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa Signing time: Mon 15 Dec 2025 14:00:38 +0000 ROA not before: Mon 15 Dec 2025 14:00:38 +0000 ROA not after: Sun 15 Mar 2026 13:00:38 +0000 asID: 30058 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:1b:a4:e3:eb:7e:0d:b1:79:c2:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 15 14:00:38 2025 GMT Not After : Mar 15 13:00:38 2026 GMT Subject: CN=e8c91169-5f60-4a45-9f96-5e814b3941aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:a9:1b:fa:08:6c:9e:59:7b:43:69:f5:da: 5c:bd:9b:59:9f:67:4f:c4:7f:77:9b:92:d7:93:cc: e1:d6:8c:b5:cc:6e:79:e6:92:fb:a7:6a:4e:e3:fd: 6e:d1:96:ba:b4:3b:63:62:82:02:e1:2d:78:a7:96: d5:55:af:04:75:ef:a0:9c:84:b3:c1:c9:c5:b2:83: 10:0b:19:7e:24:b4:76:fa:a3:e0:60:06:7a:16:4a: b1:db:61:89:95:dd:b9:de:6e:65:65:9d:50:80:51: 3c:de:1c:47:d6:8a:d9:3a:6e:ff:7f:66:91:97:1a: 08:14:7f:f3:0a:33:ee:9f:7d:9c:00:fc:85:5a:2d: a4:32:15:0d:ae:9e:66:25:e5:1b:72:e3:c6:4a:d0: 41:7f:74:53:5f:cb:8c:51:49:a7:a9:25:84:3d:35: 55:37:7c:89:83:5f:34:e4:0a:65:9a:15:38:c3:6f: df:2d:9f:7c:0a:8c:1a:8d:c8:fc:7f:f2:d6:fa:98: c3:ed:41:46:a6:c6:a0:be:40:88:f4:16:ca:e3:d4: c9:dd:e0:3d:10:ca:d1:c0:87:33:ef:6b:da:58:48: c0:aa:0b:80:91:8f:f9:03:63:f8:d8:dd:d1:19:24: e9:d3:df:05:67:46:9f:46:0d:b6:8e:cf:28:3a:03: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:70:2C:8B:72:BA:B6:34:53:14:6C:CD:6A:E0:31:56:EE:54:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d0:bc:b2:46:83:46:d3:79:fe:2e:01:08:1d:c8:90:e4:27: 9b:29:b9:c0:fe:ee:d6:4a:58:5a:2d:fa:71:a4:78:92:5a:c1: e5:75:5c:bb:c1:e0:9d:24:f7:98:32:f3:77:67:24:0d:18:b1: eb:e3:b5:df:0f:55:1e:3c:13:0a:0b:52:7e:ba:dd:ed:13:98: 20:62:ed:22:1a:7c:28:58:c5:89:57:d1:4b:46:14:93:59:ca: 92:33:b6:7a:8b:58:5d:0b:83:62:a8:80:bd:6e:c7:28:31:b0: 64:14:88:81:87:84:6d:f2:aa:77:52:45:7b:7d:23:16:ab:8c: aa:4e:12:41:fc:35:e0:b2:36:93:e7:6b:cd:a7:b1:42:53:74: 62:23:bf:ff:ec:da:f6:1c:a4:9b:83:48:b7:85:b8:ac:da:34: 41:e8:14:0c:b9:7e:f5:0a:b5:46:90:48:76:47:ec:cd:58:6f: 20:c5:d8:46:99:32:ea:7a:a0:4a:6d:3e:59:33:22:2f:ff:e3: 19:f2:ac:2a:cf:84:8d:45:1e:59:21:72:85:56:5b:1f:84:c9: c0:0b:37:eb:a8:86:32:e5:98:0e:a7:41:4c:de:f6:2e:af:73: aa:d1:4a:43:aa:4d:56:ff:75:57:98:d1:84:f6:19:25:22:07: 6e:58:73:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwyG6Tj634NsXnCvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTIxNTE0MDAzOFoXDTI2MDMxNTEzMDAzOFowLzEtMCsGA1UEAxMk ZThjOTExNjktNWY2MC00YTQ1LTlmOTYtNWU4MTRiMzk0MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutKpG/oIbJ5Ze0Np9dpcvZtZn2dPxH93m5LX k8zh1oy1zG555pL7p2pO4/1u0Za6tDtjYoIC4S14p5bVVa8Ede+gnISzwcnFsoMQ Cxl+JLR2+qPgYAZ6Fkqx22GJld253m5lZZ1QgFE83hxH1orZOm7/f2aRlxoIFH/z CjPun32cAPyFWi2kMhUNrp5mJeUbcuPGStBBf3RTX8uMUUmnqSWEPTVVN3yJg180 5AplmhU4w2/fLZ98Cowajcj8f/LW+pjD7UFGpsagvkCI9BbK49TJ3eA9EMrRwIcz 72vaWEjAqguAkY/5A2P42N3RGSTp098FZ0afRg22js8oOgPKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEGcCyLcrq2NFMUbM1q4DFW7lRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGFmZjc4YWUtN2Y3OC0z YmY0LWIwNzktYmQxY2IzN2RhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfQvLJGg0bTef4uAQgdyJDkJ5spucD+7tZKWFot+nGkeJJaweV1XLvB 4J0k95gy83dnJA0Ysevjtd8PVR48EwoLUn663e0TmCBi7SIafChYxYlX0UtGFJNZ ypIztnqLWF0Lg2KogL1uxygxsGQUiIGHhG3yqndSRXt9IxarjKpOEkH8NeCyNpPn a82nsUJTdGIjv//s2vYcpJuDSLeFuKzaNEHoFAy5fvUKtUaQSHZH7M1YbyDF2EaZ Mup6oEptPlkzIi//4xnyrCrPhI1FHlkhcoVWWx+EycALN+uohjLlmA6nQUze9i6v c6rRSkOqTVb/dVeY0YT2GSUiB25Yc08= -----END CERTIFICATE-----Generated at Wed Dec 24 10:09:24 2025 by rpki-client