This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa File: 89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa (raw, json) Hash identifier: kZ9KYFXP0M0xDsypljvO7aS4rbWmhlUTtXcA8ctZzdQ= Subject key identifier: B2:71:FA:08:51:E3:87:70:DF:63:23:82:DE:02:21:9E:E1:C2:DF:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C1FF61CEAA638777A4CF89140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 98.17.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:1c:ea:a6:38:77:7a:4c:f8:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=5277e7f1-2e60-42f2-9da7-f33a25e228b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f1:f2:1b:31:cb:98:d8:bb:50:8e:07:f0:65: e4:ae:3b:cc:c2:9f:71:db:3e:aa:bd:b9:10:8f:fb: 45:79:4a:1c:c9:53:0b:09:87:ed:d4:c8:c7:65:76: 31:e6:9e:57:46:64:03:d9:e6:f7:d7:fd:f9:31:48: ff:69:5c:2f:5d:cc:1a:aa:66:a3:3f:69:c7:20:b6: 0e:09:e0:38:23:79:87:c9:eb:80:32:1a:16:f8:96: fd:26:79:ad:11:18:48:75:55:96:77:da:65:35:ea: 60:cd:84:0c:7b:68:03:be:35:32:cc:ec:92:58:d8: 0b:b5:8b:3b:d5:f0:37:a0:66:88:eb:fb:fa:98:cc: ae:1d:be:c6:ef:67:d9:b2:48:b5:da:ae:49:05:59: 6d:51:2f:97:94:bc:1b:f6:92:6c:ee:c9:21:4b:95: 1e:76:5d:f4:4c:d8:8a:f1:60:44:dc:ce:e6:e4:4b: 09:f7:7c:99:27:4f:23:52:d8:1b:2d:52:bb:35:92: 37:45:6d:4d:b2:ad:58:d7:cb:2d:95:6f:4e:aa:88: c6:07:7c:f8:56:db:44:dc:69:7b:c4:9c:df:3c:3a: c3:67:b3:20:26:93:14:73:2b:eb:98:02:8c:88:bf: 1a:92:3f:c8:39:93:f4:1e:cb:06:18:a5:49:9f:92: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:FA:08:51:E3:87:70:DF:63:23:82:DE:02:21:9E:E1:C2:DF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:00:b0:d2:ad:a9:4a:86:68:94:89:53:dc:67:fc:31:8d:27: 2e:48:11:eb:0a:8d:af:a9:8e:c2:53:01:53:b6:d3:36:1a:7f: 9e:3b:35:f5:88:5e:be:e9:4d:5a:23:3f:47:37:ae:d6:0a:44: 8b:06:f0:3c:53:31:3b:66:10:49:fd:b7:89:ad:cb:14:55:7a: 98:42:ac:79:b4:a9:eb:7b:77:26:e0:ac:8b:bd:d5:ef:ed:64: 79:04:ae:f9:66:8b:42:fc:b2:3d:71:56:78:b1:75:fd:50:f8: d8:10:69:89:b0:1b:95:96:52:ac:46:af:0d:05:47:ac:87:8b: f5:7a:33:5d:a2:2e:ce:fa:d1:88:cd:cb:9c:1c:4a:83:05:76: bf:c1:ae:67:41:70:86:92:fb:87:d2:58:e0:78:69:c5:59:99: d5:b9:c5:ad:76:9a:de:8b:49:b4:07:58:89:94:26:36:55:2d: b5:80:00:57:be:64:2d:58:92:da:98:3b:f5:a4:9e:5b:2b:de: 27:6f:f2:5f:84:2b:17:23:8e:03:2d:39:4b:87:be:03:6b:00: 70:f2:6c:fa:aa:d8:f6:d2:53:de:5b:91:dc:a2:16:e5:ee:23: 86:55:bc:fe:00:ca:a2:0c:5a:d2:e1:c3:73:71:c2:fb:2a:29: f2:21:11:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9hzqpjh3ekz4kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk NTI3N2U3ZjEtMmU2MC00MmYyLTlkYTctZjMzYTI1ZTIyOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfHyGzHLmNi7UI4H8GXkrjvMwp9x2z6qvbkQ j/tFeUocyVMLCYft1MjHZXYx5p5XRmQD2eb31/35MUj/aVwvXcwaqmajP2nHILYO CeA4I3mHyeuAMhoW+Jb9JnmtERhIdVWWd9plNepgzYQMe2gDvjUyzOySWNgLtYs7 1fA3oGaI6/v6mMyuHb7G72fZski12q5JBVltUS+XlLwb9pJs7skhS5Uedl30TNiK 8WBE3M7m5EsJ93yZJ08jUtgbLVK7NZI3RW1Nsq1Y18stlW9OqojGB3z4VttE3Gl7 xJzfPDrDZ7MgJpMUcyvrmAKMiL8akj/IOZP0HssGGKVJn5ISXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJx+ghR44dw32Mjgt4CIZ7hwt+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODliMmFmN2QtYjlmYi0z NDI4LTk3MWYtMzYwOWVlZDdlYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoAsNKtqUqGaJSJU9xn/DGNJy5IEesKja+pjsJTAVO20zYaf547NfWI Xr7pTVojP0c3rtYKRIsG8DxTMTtmEEn9t4mtyxRVephCrHm0qet7dybgrIu91e/t ZHkErvlmi0L8sj1xVnixdf1Q+NgQaYmwG5WWUqxGrw0FR6yHi/V6M12iLs760YjN y5wcSoMFdr/BrmdBcIaS+4fSWOB4acVZmdW5xa12mt6LSbQHWImUJjZVLbWAAFe+ ZC1YktqYO/Wknlsr3idv8l+EKxcjjgMtOUuHvgNrAHDybPqq2PbSU95bkdyiFuXu I4ZVvP4AyqIMWtLhw3NxwvsqKfIhEf8= -----END CERTIFICATE-----Generated at Sat Dec 20 18:05:56 2025 by rpki-client