This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: L7PB8F0N0ct1m/VbAkFdsTCL/oLQ8Blbtla4dFdes7Q= Subject key identifier: 15:AA:DC:EB:EF:8D:1C:DF:31:11:31:A7:84:05:A3:C8:28:23:9F:AA Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584BFD10ABE4E6CABD14214F9A00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:ab:e4:e6:ca:bd:14:21:4f:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=519194bb-e484-441c-bebb-8c06005590c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:91:84:c9:69:5e:92:7d:5a:78:18:5e:5f: 5c:5e:78:b3:b7:37:12:72:92:3f:1f:ec:5f:4f:fe: af:f3:77:75:29:fc:ae:4d:55:72:f1:dd:8c:75:47: d5:df:80:b1:36:aa:35:b6:2d:00:07:a1:e0:95:a4: bf:ac:12:a6:e0:8a:0f:96:a6:8a:78:04:44:39:e1: 09:81:e4:6e:e7:74:87:76:4e:02:d0:8e:d2:2c:da: 14:7d:67:6f:34:1d:73:b1:82:45:e2:c3:47:81:f2: 86:15:a8:6a:63:f1:dd:47:9c:fa:50:11:f7:e8:a1: f6:66:20:bc:e6:14:00:1f:fd:09:9c:75:5b:ce:a7: 5b:00:b5:7f:5c:80:9f:f1:af:63:01:4e:8b:75:33: 60:16:d3:1f:21:dc:37:6f:43:ee:38:50:ae:f5:44: b0:22:0d:a0:c9:5f:7f:9a:d4:7a:7e:f7:bc:80:a8: 10:87:bf:a0:09:68:87:95:be:c9:89:06:17:92:bb: 16:db:37:74:a5:29:53:c5:b5:50:86:d5:fd:c1:64: 37:c0:53:75:0f:28:a6:f2:bf:3b:68:ca:09:0a:2b: 3a:4c:dc:ce:a5:56:95:ce:1c:d0:54:a3:84:8e:e4: 34:c9:80:b5:77:0a:a3:14:a1:aa:ad:40:af:0f:14: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AA:DC:EB:EF:8D:1C:DF:31:11:31:A7:84:05:A3:C8:28:23:9F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:60:fd:ab:78:c0:f7:dd:55:cb:51:95:f0:f4:a9:06:4b:1c: 4b:f9:85:bd:cc:84:54:a5:be:ef:84:1c:6b:60:c5:ad:83:8b: 93:0e:a1:77:9f:7d:e0:8d:01:69:86:fb:d4:6a:8d:a1:90:72: a0:2b:7d:b3:ab:c8:3f:21:a4:80:fe:d9:c4:b2:70:12:05:7c: 14:87:a2:31:e4:00:c6:79:8f:5b:e8:3d:fd:08:e0:ee:e6:98: 58:84:2f:ca:23:30:95:80:96:dc:75:f8:7a:c7:40:50:1d:db: da:7c:7c:f3:77:a6:86:f2:26:c9:59:24:60:2d:07:d6:73:36: 92:77:7f:68:f3:de:64:74:97:2e:a1:c2:e4:65:35:0d:7a:1d: 37:dd:f0:9a:1c:71:fb:41:89:61:90:20:e0:f4:91:6d:f1:90: 5d:cb:ae:21:93:15:4c:39:1d:50:35:67:c4:62:14:da:b3:e5: 74:24:5f:b5:b6:3d:64:12:37:70:96:b9:39:df:c9:dc:e6:7b: 0d:84:2a:cf:2d:4d:cf:90:2a:9d:f4:4b:af:31:62:90:26:9a: e1:09:95:35:86:e7:29:f7:8c:39:73:91:5e:8b:c9:3d:6c:b9: 5e:03:99:fe:6c:44:d0:f6:99:9a:f4:a3:0b:d7:0b:9f:af:01: e1:ac:2a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EKvk5sq9FCFPmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk NTE5MTk0YmItZTQ4NC00NDFjLWJlYmItOGMwNjAwNTU5MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIKRhMlpXpJ9WngYXl9cXniztzcScpI/H+xf T/6v83d1KfyuTVVy8d2MdUfV34CxNqo1ti0AB6HglaS/rBKm4IoPlqaKeAREOeEJ geRu53SHdk4C0I7SLNoUfWdvNB1zsYJF4sNHgfKGFahqY/HdR5z6UBH36KH2ZiC8 5hQAH/0JnHVbzqdbALV/XICf8a9jAU6LdTNgFtMfIdw3b0PuOFCu9USwIg2gyV9/ mtR6fve8gKgQh7+gCWiHlb7JiQYXkrsW2zd0pSlTxbVQhtX9wWQ3wFN1Dyim8r87 aMoJCis6TNzOpVaVzhzQVKOEjuQ0yYC1dwqjFKGqrUCvDxQ1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWq3OvvjRzfMRExp4QFo8goI5+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxg/at4wPfdVctRlfD0qQZLHEv5hb3MhFSlvu+EHGtgxa2Di5MOoXef feCNAWmG+9RqjaGQcqArfbOryD8hpID+2cSycBIFfBSHojHkAMZ5j1voPf0I4O7m mFiEL8ojMJWAltx1+HrHQFAd29p8fPN3pobyJslZJGAtB9ZzNpJ3f2jz3mR0ly6h wuRlNQ16HTfd8JoccftBiWGQIOD0kW3xkF3LriGTFUw5HVA1Z8RiFNqz5XQkX7W2 PWQSN3CWuTnfydzmew2EKs8tTc+QKp30S68xYpAmmuEJlTWG5yn3jDlzkV6LyT1s uV4Dmf5sRND2mZr0owvXC5+vAeGsKg4= -----END CERTIFICATE-----Generated at Wed Dec 3 11:47:43 2025 by rpki-client