This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa File: 98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa (raw, json) Hash identifier: 9/DhOZMcYHQL8CJkRPV9KApIt0MiM8YWeyYVZ72Ej9U= Subject key identifier: 39:24:EC:D5:2E:25:03:F5:98:07:38:EC:ED:79:76:C3:75:B6:1A:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C1FF62ABE08FBD09EF048C580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 75.89.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:2a:be:08:fb:d0:9e:f0:48:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=114ad236-f99c-49f2-9afe-def7a66c4ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:d2:ac:a3:70:10:a6:bc:6a:a2:7e:cd:f7: 9b:89:07:a2:1e:e9:6d:d9:4b:28:7c:fb:a4:cf:18: 26:c2:16:02:15:e5:f8:b8:f8:c0:72:d8:e8:73:1c: 48:88:a1:59:52:ed:6a:b3:58:6f:c9:a1:9a:43:a4: 83:81:00:db:1f:44:ac:d8:8b:53:93:95:26:54:79: 87:f9:13:6d:8c:88:59:3b:20:30:fd:d1:0b:2a:94: 5e:d6:75:83:96:a6:57:0e:4c:79:0a:a8:30:64:76: af:6e:fd:cd:ef:c4:e7:7c:71:7a:34:3d:c4:c7:61: f7:2c:75:51:9c:a0:07:1e:07:66:b4:8d:86:14:d2: 37:a8:d1:27:d1:50:e8:eb:96:5d:ab:f5:e0:c7:1d: 9b:5f:b7:3f:ca:ec:da:16:34:07:53:8c:3f:6e:2e: 67:cd:89:45:72:0b:f2:59:67:ba:33:db:23:cf:61: 18:1d:15:eb:fc:f1:8f:1a:9e:ad:a8:d8:6b:c6:f6: 40:1a:3c:9c:f4:a9:07:6d:4a:da:9a:42:3a:10:19: 49:01:95:7f:09:19:b0:cf:85:21:74:b0:5a:36:9b: a2:22:8c:43:00:48:a0:44:8b:b6:19:fa:de:97:3f: 54:f1:b8:4e:15:24:58:ec:cd:c9:24:7f:0f:28:6e: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:EC:D5:2E:25:03:F5:98:07:38:EC:ED:79:76:C3:75:B6:1A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:98:7d:7b:63:ed:5b:bd:34:a9:3b:8e:1d:fd:05:ec:93:80: e9:f2:0c:71:79:92:40:99:5b:c4:9d:c8:58:51:79:37:b8:f6: 8c:45:a5:2e:a5:65:de:cb:84:20:47:d3:9d:ff:a1:4c:74:fd: e0:aa:b9:8f:4e:1e:03:c5:aa:e8:0b:4f:ac:11:80:65:8f:58: d8:7e:c4:0b:c1:41:f2:b4:94:6b:cd:45:f1:81:3c:ae:bc:09: 0e:8f:1f:d2:5b:5e:5d:1a:06:48:72:85:f1:45:5e:81:46:3e: 7f:d7:24:e9:b1:25:c9:77:31:89:62:8d:5f:a8:5d:c0:4c:79: d2:da:db:82:e2:53:a7:6d:6e:7c:55:18:c4:d8:f5:d7:73:57: 42:76:80:cc:88:08:a4:28:4f:02:6c:af:e3:11:6f:8e:08:ba: bf:ac:61:c7:d5:ad:6f:0f:ee:28:d8:2e:ee:61:4e:e4:f8:18: db:1e:75:d3:78:58:9e:a5:43:36:76:fd:07:44:bd:05:69:1c: d4:91:3d:65:2c:b8:dd:1c:5a:95:b1:c4:df:7b:23:b2:f9:23: b3:2f:c9:54:56:3c:34:61:70:0d:a8:17:e6:13:7e:92:40:58: 1e:ce:63:88:e9:70:3c:e1:dd:9f:99:a5:24:fb:ac:51:42:99: 21:24:9f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9iq+CPvQnvBIxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk MTE0YWQyMzYtZjk5Yy00OWYyLTlhZmUtZGVmN2E2NmM0YWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLDSrKNwEKa8aqJ+zfebiQeiHult2UsofPuk zxgmwhYCFeX4uPjActjocxxIiKFZUu1qs1hvyaGaQ6SDgQDbH0Ss2ItTk5UmVHmH +RNtjIhZOyAw/dELKpRe1nWDlqZXDkx5CqgwZHavbv3N78TnfHF6ND3Ex2H3LHVR nKAHHgdmtI2GFNI3qNEn0VDo65Zdq/Xgxx2bX7c/yuzaFjQHU4w/bi5nzYlFcgvy WWe6M9sjz2EYHRXr/PGPGp6tqNhrxvZAGjyc9KkHbUramkI6EBlJAZV/CRmwz4Uh dLBaNpuiIoxDAEigRIu2Gfrelz9U8bhOFSRY7M3JJH8PKG4qcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkk7NUuJQP1mAc47O15dsN1thpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTgwMzViOWYtNzYzNC0z NWQ0LTllYzYtMWNlN2ZhZTVmOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKYfXtj7Vu9NKk7jh39BeyTgOnyDHF5kkCZW8SdyFhReTe49oxFpS6l Zd7LhCBH053/oUx0/eCquY9OHgPFqugLT6wRgGWPWNh+xAvBQfK0lGvNRfGBPK68 CQ6PH9JbXl0aBkhyhfFFXoFGPn/XJOmxJcl3MYlijV+oXcBMedLa24LiU6dtbnxV GMTY9ddzV0J2gMyICKQoTwJsr+MRb44Iur+sYcfVrW8P7ijYLu5hTuT4GNseddN4 WJ6lQzZ2/QdEvQVpHNSRPWUsuN0cWpWxxN97I7L5I7MvyVRWPDRhcA2oF+YTfpJA WB7OY4jpcDzh3Z+ZpST7rFFCmSEknys= -----END CERTIFICATE-----Generated at Sat Dec 20 18:07:22 2025 by rpki-client