This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa File: 0c00ee32-7cf1-3b20-9a9f-257687840587.roa (raw, json) Hash identifier: z4+PcMJVJnuDUpvZMpupZQ0QeBHnXj6ajFphEk2WvjM= Subject key identifier: 09:E2:72:AC:8D:03:10:83:33:F9:75:BE:92:EA:67:D3:8A:55:7C:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C1FF61D47E68A435E17685C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 98.21.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:1d:47:e6:8a:43:5e:17:68:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=74c982b2-a623-44c1-8963-d80872dd1302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:bb:2b:4d:c2:a6:4b:b7:de:85:51:85:56: c1:7e:5f:b7:b5:b8:35:37:1c:e2:bf:ba:50:c1:b4: 48:07:2a:34:c6:21:81:8a:0a:cb:45:8d:31:1e:91: 5b:f0:06:2d:57:4f:dd:13:98:0c:57:bc:9c:19:b1: ec:3a:a2:85:8d:0e:74:98:c7:41:23:29:a2:05:c2: 21:60:93:9f:df:2e:a8:48:6d:a0:2e:25:fb:68:a4: f8:ba:c3:a0:2b:84:7d:1a:d8:97:f5:20:f7:08:50: 59:41:d2:f8:7a:cf:ac:d8:e8:47:49:c9:35:16:8e: a5:0b:a5:70:ac:b7:93:e9:3a:f0:e4:17:d1:90:c1: 90:20:47:4f:67:84:b8:64:7a:17:24:62:f1:00:0d: a2:c6:e3:8e:b7:a3:10:ea:e1:9a:86:70:d6:dd:d4: 8f:c6:04:d1:be:4d:af:31:f5:77:80:6f:ba:42:15: a7:d0:1d:3e:50:3f:bb:fd:c0:67:34:5a:82:77:9f: 5c:7d:ad:b2:73:5d:ad:fc:ce:28:8e:cf:69:42:ef: 60:79:6b:92:4a:35:a8:cc:12:6e:38:6d:4d:30:f2: 2b:9d:42:68:da:09:9c:3e:0f:b6:7a:ac:94:05:bf: 81:a1:f1:26:29:92:5c:f1:47:9f:c9:31:20:79:9d: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E2:72:AC:8D:03:10:83:33:F9:75:BE:92:EA:67:D3:8A:55:7C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:16:58:36:62:c0:6e:30:2a:03:6c:a7:c3:86:31:97:19:ea: 41:21:45:27:02:60:07:ba:ed:95:9c:de:4d:42:9d:e4:53:78: bf:ed:f2:ff:4d:fe:52:ba:ee:12:ce:8e:46:f4:26:6c:d8:55: 38:40:dc:07:81:6d:24:78:60:36:6c:3c:09:f2:1b:cd:9a:6d: d1:af:5e:da:a7:45:28:1e:3b:7f:3b:be:35:85:8c:f6:61:c6: 65:78:52:3d:8e:b1:87:25:8f:19:20:84:6b:5f:1c:97:bb:44: 43:8b:a8:fb:ed:c1:15:27:32:97:9a:9c:dd:6d:69:1e:57:31: df:26:07:7a:11:24:be:00:82:f8:a8:5c:c1:1c:e7:4f:72:46: bc:f8:7c:34:43:90:e9:ce:ec:98:83:e5:5d:2e:66:bc:b2:85: c0:58:3a:57:e0:00:8e:46:53:25:5d:84:5c:14:dd:a3:83:d7: db:20:d0:23:bd:6a:cd:70:8b:c5:44:dc:0a:11:f3:ab:25:08: 8c:47:6d:07:0b:ee:f2:e7:cc:35:0a:7b:05:08:98:6c:b3:2e: 85:0e:2e:ee:92:10:53:53:fa:12:91:54:a2:dc:fa:f2:66:ba: dd:b4:1c:17:d0:53:82:ed:fd:fc:7c:71:5b:a4:cc:d6:9b:ce: 35:19:91:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9h1H5opDXhdoXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk NzRjOTgyYjItYTYyMy00NGMxLTg5NjMtZDgwODcyZGQxMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPe7K03Cpku33oVRhVbBfl+3tbg1Nxziv7pQ wbRIByo0xiGBigrLRY0xHpFb8AYtV0/dE5gMV7ycGbHsOqKFjQ50mMdBIymiBcIh YJOf3y6oSG2gLiX7aKT4usOgK4R9GtiX9SD3CFBZQdL4es+s2OhHSck1Fo6lC6Vw rLeT6Trw5BfRkMGQIEdPZ4S4ZHoXJGLxAA2ixuOOt6MQ6uGahnDW3dSPxgTRvk2v MfV3gG+6QhWn0B0+UD+7/cBnNFqCd59cfa2yc12t/M4ojs9pQu9geWuSSjWozBJu OG1NMPIrnUJo2gmcPg+2eqyUBb+BofEmKZJc8UefyTEgeZ1NmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnicqyNAxCDM/l1vpLqZ9OKVXxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGMwMGVlMzItN2NmMS0z YjIwLTlhOWYtMjU3Njg3ODQwNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwWWDZiwG4wKgNsp8OGMZcZ6kEhRScCYAe67ZWc3k1CneRTeL/t8v9N /lK67hLOjkb0JmzYVThA3AeBbSR4YDZsPAnyG82abdGvXtqnRSgeO387vjWFjPZh xmV4Uj2OsYcljxkghGtfHJe7REOLqPvtwRUnMpeanN1taR5XMd8mB3oRJL4Agvio XMEc509yRrz4fDRDkOnO7JiD5V0uZryyhcBYOlfgAI5GUyVdhFwU3aOD19sg0CO9 as1wi8VE3AoR86slCIxHbQcL7vLnzDUKewUImGyzLoUOLu6SEFNT+hKRVKLc+vJm ut20HBfQU4Lt/fx8cVukzNabzjUZkY8= -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:36 2025 by rpki-client