This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: 0IJJI8FOurHKaQ7Udu5z2luOEc1dwmISTN/EFRqOBT4= Subject key identifier: 1D:4B:BE:96:3E:B8:70:46:BA:4F:9B:C3:16:0A:DC:ED:D9:64:C6:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C1FF61A846FB5EC53EB4791C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:1a:84:6f:b5:ec:53:eb:47:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=ec8f0ea9-964c-4dfb-a239-9036c0dde643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:71:df:41:d4:6e:ee:67:18:17:6b:97:e7: 36:68:7f:d8:47:cc:4b:af:51:09:23:e8:c5:5b:c2: 57:c2:18:46:89:46:3e:47:b5:70:d7:b7:37:d4:f4: 22:a2:dc:64:c3:f8:cd:e7:5c:b8:19:6e:77:7b:07: ce:a0:f2:1b:8e:e9:74:80:7c:08:33:99:05:62:4b: 7b:5f:63:8c:a4:11:76:b7:7c:d3:63:13:c4:ff:fa: 68:1b:52:ae:fe:65:ad:0d:49:9b:de:4a:e6:cb:2c: 0d:6e:d9:48:59:b7:85:4f:51:dd:0a:2a:6b:4b:c9: f4:2a:91:41:df:9c:15:07:eb:a4:39:06:0c:94:6f: 79:c3:5e:8a:08:c8:2c:29:44:0c:29:4b:c7:46:ca: 95:f7:b8:2f:5b:e3:aa:a6:f1:bf:98:43:9b:d2:ae: f3:00:7b:2d:fb:81:d6:b5:7f:31:e4:6f:f7:1b:6a: 9b:8a:f9:ce:7e:67:87:e5:8e:c4:4e:43:72:b6:df: f5:bb:bc:b3:44:1c:7b:8a:03:bd:e6:d1:55:b9:e3: e7:e7:f7:1e:d3:86:0f:c1:ca:5c:7e:f8:58:f2:a3: 94:8e:e2:5e:2d:67:55:ff:83:7f:8a:9a:e0:ed:98: f0:f5:45:b4:a3:ed:8b:57:28:27:e1:fc:98:c2:01: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4B:BE:96:3E:B8:70:46:BA:4F:9B:C3:16:0A:DC:ED:D9:64:C6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b7:df:93:16:a1:16:6e:27:70:07:56:a0:bb:ec:03:65:df: bf:08:13:44:08:b0:67:2a:b8:c5:fe:12:10:d3:e5:0c:f2:aa: 6d:6a:03:d1:d0:ff:94:5d:9b:c7:31:ea:7f:06:e2:3e:a4:d2: 56:89:34:8c:55:00:9c:6b:8c:80:7b:fd:14:e5:02:68:46:e1: 8e:27:06:d1:1b:01:d0:f5:04:1f:8b:fb:4b:7d:95:48:41:5b: a5:3d:e7:6d:c2:29:22:18:1c:1b:f6:88:af:05:e8:e0:49:b2: 8d:81:65:b1:8c:7d:55:9c:b1:53:08:c2:e5:12:ed:de:0c:cd: 0c:cf:2f:96:e3:5f:bc:74:64:b5:73:24:42:83:35:b2:85:00: bd:1a:49:f6:3a:79:32:fb:45:22:01:7f:f7:a2:8b:9e:9a:d7: be:76:2b:7f:33:08:58:c9:c9:d6:50:72:c7:7a:33:d3:8a:9e: 21:5d:73:64:83:21:c7:b4:7a:d4:d6:f5:ac:a2:54:70:fb:ab: 6d:ec:d8:01:98:94:61:da:42:56:42:2b:5e:6f:09:b9:28:e6: 90:fe:1c:e0:7f:17:33:54:f4:9d:4a:9c:a3:61:81:c0:9b:2f: cc:bb:c4:0f:12:34:94:cd:5f:55:55:4d:7a:2c:7a:42:20:cd: 65:c3:f1:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9hqEb7XsU+tHkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZWM4ZjBlYTktOTY0Yy00ZGZiLWEyMzktOTAzNmMwZGRlNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAVx30HUbu5nGBdrl+c2aH/YR8xLr1EJI+jF W8JXwhhGiUY+R7Vw17c31PQiotxkw/jN51y4GW53ewfOoPIbjul0gHwIM5kFYkt7 X2OMpBF2t3zTYxPE//poG1Ku/mWtDUmb3krmyywNbtlIWbeFT1HdCiprS8n0KpFB 35wVB+ukOQYMlG95w16KCMgsKUQMKUvHRsqV97gvW+OqpvG/mEOb0q7zAHst+4HW tX8x5G/3G2qbivnOfmeH5Y7ETkNytt/1u7yzRBx7igO95tFVuePn5/ce04YPwcpc fvhY8qOUjuJeLWdV/4N/iprg7Zjw9UW0o+2LVygn4fyYwgGS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1LvpY+uHBGuk+bwxYK3O3ZZMadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6335MWoRZuJ3AHVqC77ANl378IE0QIsGcquMX+EhDT5Qzyqm1qA9HQ /5Rdm8cx6n8G4j6k0laJNIxVAJxrjIB7/RTlAmhG4Y4nBtEbAdD1BB+L+0t9lUhB W6U9523CKSIYHBv2iK8F6OBJso2BZbGMfVWcsVMIwuUS7d4MzQzPL5bjX7x0ZLVz JEKDNbKFAL0aSfY6eTL7RSIBf/eii56a1752K38zCFjJydZQcsd6M9OKniFdc2SD Ice0etTW9ayiVHD7q23s2AGYlGHaQlZCK15vCbko5pD+HOB/FzNU9J1KnKNhgcCb L8y7xA8SNJTNX1VVTXosekIgzWXD8TY= -----END CERTIFICATE-----Generated at Sat Dec 20 19:55:42 2025 by rpki-client