This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa File: d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa (raw, json) Hash identifier: XJYlWZ3Dkc4qYEYkQbxERLCw4VqY9KGA+i0EM87e1yY= Subject key identifier: D0:9C:70:10:75:C0:44:C2:2B:0F:F6:E6:F1:B3:CA:FD:C4:9F:7D:DB Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584BE555C21D63AE40ED1F75DD60 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 2495 IP address blocks: 198.248.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:c2:1d:63:ae:40:ed:1f:75:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=7a5b2d40-65f1-4789-9575-7170409d8a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:64:d0:3a:c9:77:94:2f:5f:e0:d3:f7:3b: ed:b0:01:ca:67:95:cb:69:fa:c5:22:aa:cc:ac:06: 55:9f:ec:1f:f3:a9:62:1a:4b:c4:10:6f:a8:e8:c4: 1a:07:3d:f7:d8:da:91:d9:83:77:80:bd:12:9b:c1: df:ab:28:ac:ee:f6:96:80:86:ad:3e:83:78:7a:12: 3f:5c:5e:24:bf:f3:7b:22:30:bb:c6:8d:cd:0e:92: 7d:59:dd:46:67:91:f3:48:66:6c:48:b3:ca:8c:1c: 28:2c:08:f9:8e:6a:05:9d:e9:bb:63:52:dc:f4:52: 92:c2:34:25:ee:9f:6e:8c:0f:d6:ef:5f:9b:1c:72: 16:ee:7e:fd:5f:b9:95:54:37:12:fb:b7:56:42:bc: 91:3a:2c:db:86:53:99:60:d6:ad:ee:a4:ea:0c:80: dd:4f:32:d2:bf:bc:14:35:54:51:ad:fe:57:e9:9a: 0e:71:e6:b6:7f:34:d7:3b:ef:39:15:ba:3f:42:f6: cc:f7:63:c2:0d:d9:bb:ab:49:73:70:ea:ae:f1:28: 4d:36:ca:eb:b7:89:e1:d8:03:36:7b:85:ea:4d:a5: ef:1a:0e:48:03:17:9b:2e:ea:96:5f:de:b0:d5:71: 51:b7:10:de:46:2f:e6:e5:c5:dc:5c:70:28:70:de: 8b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9C:70:10:75:C0:44:C2:2B:0F:F6:E6:F1:B3:CA:FD:C4:9F:7D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:dd:fa:a3:d7:f7:e5:0f:75:f7:cd:e8:f7:8b:a8:80:03:7a: b5:a4:df:21:58:23:fb:33:c6:03:43:c8:aa:12:aa:fa:76:94: 65:76:e5:a9:83:e7:00:c9:ca:64:e7:46:4a:10:bf:b8:9e:eb: 0d:ef:9b:1f:41:a9:dc:b1:7f:1d:ea:49:67:be:7a:00:c6:c1: 35:dc:07:b1:f4:90:3a:4e:0f:62:25:cd:b2:00:c6:60:e1:d4: 79:4e:dd:38:a5:53:f5:dd:64:d0:84:60:a8:11:21:d4:e9:f4: f8:a5:a8:ae:7b:87:bb:b5:ec:64:a5:b7:d9:b9:3d:6d:fb:7d: 6f:74:5e:ba:33:96:a1:e6:70:80:ff:89:56:59:99:43:48:e7: e5:57:88:4d:b6:f5:f8:ea:59:cf:aa:8c:b5:f7:ba:50:e0:6b: e0:6d:12:55:d3:27:54:6a:6e:5d:ef:65:11:64:7b:f2:e2:64: 18:97:2b:71:90:cd:f1:31:97:25:dc:8c:ec:8d:c4:45:5b:4b: 77:48:31:b7:3a:38:67:32:bc:51:1c:9b:d6:b7:95:39:a5:f3: aa:c8:c7:3b:47:c8:9c:2f:84:e7:a0:96:f9:17:24:d6:83:56: 4a:c1:36:a6:e3:43:e1:a6:9e:de:17:6f:03:0e:be:89:54:87: c9:35:6a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVcIdY65A7R913WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk N2E1YjJkNDAtNjVmMS00Nzg5LTk1NzUtNzE3MDQwOWQ4YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdJk0DrJd5QvX+DT9zvtsAHKZ5XLafrFIqrM rAZVn+wf86liGkvEEG+o6MQaBz332NqR2YN3gL0Sm8Hfqyis7vaWgIatPoN4ehI/ XF4kv/N7IjC7xo3NDpJ9Wd1GZ5HzSGZsSLPKjBwoLAj5jmoFnem7Y1Lc9FKSwjQl 7p9ujA/W71+bHHIW7n79X7mVVDcS+7dWQryROizbhlOZYNat7qTqDIDdTzLSv7wU NVRRrf5X6ZoOcea2fzTXO+85Fbo/QvbM92PCDdm7q0lzcOqu8ShNNsrrt4nh2AM2 e4XqTaXvGg5IAxebLuqWX96w1XFRtxDeRi/m5cXcXHAocN6LRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCccBB1wETCKw/25vGzyv3En33bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZDdlYTVkOGQtZGVjNy0z YmIzLWFmZGMtZDk3YTJlYjYxYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPd+qPX9+UPdffN6PeLqIADerWk3yFYI/szxgNDyKoSqvp2lGV25amD 5wDJymTnRkoQv7ie6w3vmx9Bqdyxfx3qSWe+egDGwTXcB7H0kDpOD2IlzbIAxmDh 1HlO3TilU/XdZNCEYKgRIdTp9PilqK57h7u17GSlt9m5PW37fW90XrozlqHmcID/ iVZZmUNI5+VXiE229fjqWc+qjLX3ulDga+BtElXTJ1Rqbl3vZRFke/LiZBiXK3GQ zfExlyXcjOyNxEVbS3dIMbc6OGcyvFEcm9a3lTml86rIxztHyJwvhOeglvkXJNaD VkrBNqbjQ+Gmnt4XbwMOvolUh8k1apk= -----END CERTIFICATE-----Generated at Sun Nov 23 23:52:12 2025 by rpki-client