This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a769fb3b-61a6-3cd3-b01d-325141f38c73.roa File: a769fb3b-61a6-3cd3-b01d-325141f38c73.roa (raw, json) Hash identifier: F3L6/pjhqxL0BWtQjlzyvY8mZqzwi4W3Ogt/piWi+e8= Subject key identifier: C1:54:5E:DA:D9:67:59:A4:30:27:FD:A8:62:AC:AC:43:2A:07:A6:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C401159E5FCDD2EC781A051A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a769fb3b-61a6-3cd3-b01d-325141f38c73.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.21.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:59:e5:fc:dd:2e:c7:81:a0:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=e8bb2270-f33d-4495-b6b4-16cf74cb22d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:14:d5:cf:57:7f:25:c4:e7:ad:21:c2:3f: 8e:e7:21:ac:d7:85:79:3e:61:67:cd:90:63:25:40: e0:e9:63:d8:3c:e9:2e:f7:f2:49:d8:37:61:8a:94: 9a:5b:79:8b:7d:86:6c:52:33:92:5f:93:03:96:9b: 13:07:18:42:9a:cc:90:31:b0:92:d9:47:67:3a:6c: bf:09:2f:32:93:d2:70:e8:19:6c:58:73:a8:de:97: 09:87:af:b5:3c:ba:d6:ff:d2:76:f5:5b:e0:2c:9c: 01:62:96:29:0b:ad:b9:bc:12:3f:e2:ae:ab:3a:42: cd:2b:b5:66:a2:7a:bf:04:2d:f4:a7:fd:8c:90:8e: 3a:7a:34:11:f6:bc:d4:9b:7d:ae:37:05:43:d1:fb: fe:80:b1:35:a7:a1:b8:ac:24:cf:66:96:51:86:0e: b0:af:a5:5e:18:ab:7a:0a:a8:f8:2b:d9:5e:73:b7: ef:55:20:65:b3:06:c8:06:ea:1c:ea:e2:ca:2a:f9: 35:f0:94:06:de:6d:b2:a8:39:59:68:74:f8:0b:96: e4:e5:1f:0f:6e:c1:fc:33:bb:81:62:c7:a1:b9:76: a6:f7:4b:62:64:e5:96:48:97:5f:74:49:3e:3b:fc: 36:d7:f0:2a:1c:8d:1f:e8:07:23:e2:69:7d:40:c0: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:5E:DA:D9:67:59:A4:30:27:FD:A8:62:AC:AC:43:2A:07:A6:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a769fb3b-61a6-3cd3-b01d-325141f38c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6c:1f:4f:2b:90:f9:ce:02:b3:c5:d7:cb:79:26:6b:dd:41: be:6a:f6:20:af:b0:28:f2:c6:66:6a:e8:28:02:e6:40:79:a1: 85:90:83:69:38:65:3a:a9:c9:e6:8e:33:bf:6a:8f:cc:c6:aa: 43:2e:fa:f8:d6:b2:01:db:cc:fe:81:10:0c:66:46:54:3a:c8: bb:50:1a:9a:27:43:05:fc:6f:97:e1:2b:82:54:35:f7:aa:e6: 9c:45:b5:a6:72:09:0c:d4:60:29:fe:79:6d:a2:48:bf:3e:0d: 8c:73:a8:2e:c4:59:8e:99:3a:88:09:c4:95:8c:99:97:b6:07: 6e:76:e6:0a:53:95:06:e2:c8:74:15:5a:84:ee:e3:0b:cb:79: b0:4f:f9:82:6b:75:1e:0b:05:5b:0c:a3:80:06:86:35:c0:47: 0e:8d:2e:78:46:e0:08:1f:67:8b:7f:2f:20:5d:c8:41:b2:4b: 06:fe:d8:68:bd:82:8a:9f:60:16:50:7f:b4:39:03:3c:04:7d: aa:f6:b5:e4:ef:f6:a8:e7:a9:5a:85:9d:3e:40:26:79:aa:6c: 7e:a0:56:4d:9c:8c:aa:c1:99:5e:1d:99:e6:e1:a0:75:7a:d0: af:fa:15:e3:ed:cc:b8:a9:a5:af:27:e6:f8:e1:6b:81:bc:3c: 49:f6:1f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEVnl/N0ux4GgUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZThiYjIyNzAtZjMzZC00NDk1LWI2YjQtMTZjZjc0Y2IyMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEAU1c9XfyXE560hwj+O5yGs14V5PmFnzZBj JUDg6WPYPOku9/JJ2DdhipSaW3mLfYZsUjOSX5MDlpsTBxhCmsyQMbCS2UdnOmy/ CS8yk9Jw6BlsWHOo3pcJh6+1PLrW/9J29VvgLJwBYpYpC625vBI/4q6rOkLNK7Vm onq/BC30p/2MkI46ejQR9rzUm32uNwVD0fv+gLE1p6G4rCTPZpZRhg6wr6VeGKt6 Cqj4K9lec7fvVSBlswbIBuoc6uLKKvk18JQG3m2yqDlZaHT4C5bk5R8PbsH8M7uB YsehuXam90tiZOWWSJdfdEk+O/w21/AqHI0f6Acj4ml9QMBVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFUXtrZZ1mkMCf9qGKsrEMqB6ZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2OWZiM2ItNjFhNi0z Y2QzLWIwMWQtMzI1MTQxZjM4YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9sH08rkPnOArPF18t5JmvdQb5q9iCvsCjyxmZq6CgC5kB5oYWQg2k4 ZTqpyeaOM79qj8zGqkMu+vjWsgHbzP6BEAxmRlQ6yLtQGponQwX8b5fhK4JUNfeq 5pxFtaZyCQzUYCn+eW2iSL8+DYxzqC7EWY6ZOogJxJWMmZe2B2525gpTlQbiyHQV WoTu4wvLebBP+YJrdR4LBVsMo4AGhjXARw6NLnhG4AgfZ4t/LyBdyEGySwb+2Gi9 goqfYBZQf7Q5AzwEfar2teTv9qjnqVqFnT5AJnmqbH6gVk2cjKrBmV4dmebhoHV6 0K/6FePtzLippa8n5vjha4G8PEn2H7M= -----END CERTIFICATE-----Generated at Sat Dec 20 18:08:57 2025 by rpki-client