This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa File: 8935d049-ac61-3720-adee-5caafdfdacfa.roa (raw, json) Hash identifier: 8zGAAyILY5+Xvz+qDLI2w02ICOOXqvj+C+dDtim34Qk= Subject key identifier: B0:AA:F6:80:75:32:51:F2:58:DD:15:E6:08:34:08:6F:44:2F:F1:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C401132C25666989436A3CDC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.20.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:32:c2:56:66:98:94:36:a3:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=98bfbcca-d3eb-4add-a4a7-3fd653ae59fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:2d:80:24:b2:9c:63:97:d4:fd:0b:ae:b2: c2:f1:9f:38:43:b2:be:85:2d:b4:ca:90:d8:84:0a: 18:ff:9a:21:a1:0c:d6:b8:97:b5:59:e1:68:28:4a: 15:55:ce:f6:2c:43:c1:c0:5b:b7:93:a1:af:6f:ac: cf:d7:18:95:ee:4c:89:79:ec:c3:37:61:9f:2b:de: f2:63:69:0a:b5:c7:02:2b:2a:a0:3b:8d:2f:a2:55: df:1f:96:4c:8b:e0:44:b8:0d:7d:00:90:df:6c:55: a0:46:42:c0:9e:b4:ca:82:5c:aa:c4:4f:da:4d:af: 71:66:f2:18:50:ab:73:8d:5b:ff:aa:46:92:27:27: 4f:08:53:39:ed:cd:e0:78:21:29:6a:76:c9:4d:df: de:fc:0f:af:87:79:46:a1:8e:9c:1d:1c:16:d5:ba: 38:40:de:c1:09:f5:31:bb:20:d9:4b:c3:63:d8:d0: 1e:42:45:ed:fb:85:fb:3e:e7:10:7a:cd:32:fd:60: fa:fa:81:7f:f6:b4:7f:5a:f8:27:0d:56:b5:26:2f: 0d:aa:32:69:c9:7b:c0:3f:66:3f:d0:00:23:f4:3d: dd:f2:b3:a2:b5:cc:26:26:38:1c:b3:72:46:8f:fa: e4:3d:61:39:ba:27:f4:1b:ac:f3:93:ba:1e:a1:0f: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AA:F6:80:75:32:51:F2:58:DD:15:E6:08:34:08:6F:44:2F:F1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b1:b1:99:a9:aa:5f:8c:12:56:6d:bd:c5:b8:5f:b9:8f:43: 3f:b2:46:48:f0:82:1f:ae:3a:5f:c2:1d:34:36:65:90:ce:c2: 46:38:19:8f:70:de:30:bf:26:67:79:4b:ff:f2:5b:75:de:fd: dd:04:78:d9:49:b7:70:e2:26:60:a2:cc:2e:9d:89:e0:bf:20: 5c:4f:46:cf:52:ca:0f:0e:76:de:c2:7b:ea:96:0e:cc:75:73: f0:30:83:e3:ac:17:41:d0:f6:46:de:4f:95:f4:74:ae:5e:91: 19:68:74:bb:f0:cd:9d:bd:12:76:64:36:c1:3d:1e:ed:7a:ea: 7c:bd:03:af:bb:2c:7c:91:2d:f7:22:6b:37:2d:76:c8:21:44: f7:b9:b4:da:d9:82:80:c4:6c:af:e6:47:97:f2:ab:4e:25:41: e3:d0:66:fb:b8:61:e1:91:5c:2a:ce:36:47:ca:b1:2e:f7:3d: 03:9d:9f:0f:f6:45:dd:42:7a:58:18:72:32:20:51:23:37:ab: db:75:ef:93:c0:bf:14:5d:b4:d6:c7:96:91:16:b4:7a:50:b4: 47:3b:38:32:d3:b5:ad:11:1c:ed:a9:6d:56:6b:e9:a3:e5:8b: be:72:7f:fa:c6:dc:e0:dd:e5:d6:a8:c8:61:24:1d:b3:6d:26: 47:76:36:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAETLCVmaYlDajzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk OThiZmJjY2EtZDNlYi00YWRkLWE0YTctM2ZkNjUzYWU1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBstgCSynGOX1P0LrrLC8Z84Q7K+hS20ypDY hAoY/5ohoQzWuJe1WeFoKEoVVc72LEPBwFu3k6Gvb6zP1xiV7kyJeezDN2GfK97y Y2kKtccCKyqgO40volXfH5ZMi+BEuA19AJDfbFWgRkLAnrTKglyqxE/aTa9xZvIY UKtzjVv/qkaSJydPCFM57c3geCEpanbJTd/e/A+vh3lGoY6cHRwW1bo4QN7BCfUx uyDZS8Nj2NAeQkXt+4X7PucQes0y/WD6+oF/9rR/WvgnDVa1Ji8NqjJpyXvAP2Y/ 0AAj9D3d8rOitcwmJjgcs3JGj/rkPWE5uif0G6zzk7oeoQ+zYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCq9oB1MlHyWN0V5gg0CG9EL/EZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODkzNWQwNDktYWM2MS0z NzIwLWFkZWUtNWNhYWZkZmRhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGxsZmpql+MElZtvcW4X7mPQz+yRkjwgh+uOl/CHTQ2ZZDOwkY4GY9w 3jC/Jmd5S//yW3Xe/d0EeNlJt3DiJmCizC6dieC/IFxPRs9Syg8Odt7Ce+qWDsx1 c/Awg+OsF0HQ9kbeT5X0dK5ekRlodLvwzZ29EnZkNsE9Hu166ny9A6+7LHyRLfci azctdsghRPe5tNrZgoDEbK/mR5fyq04lQePQZvu4YeGRXCrONkfKsS73PQOdnw/2 Rd1CelgYcjIgUSM3q9t175PAvxRdtNbHlpEWtHpQtEc7ODLTta0RHO2pbVZr6aPl i75yf/rG3ODd5daoyGEkHbNtJkd2Nlo= -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:56 2025 by rpki-client