This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa File: aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa (raw, json) Hash identifier: M0pACluydCQVMITij97481oN1tanhqGEPLZLFUqoVVQ= Subject key identifier: 24:EB:0B:6B:EF:43:60:47:5F:FA:8F:D6:91:2E:D5:E0:5D:C8:40:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C401132E848EE7D9F52DC2FA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:32:e8:48:ee:7d:9f:52:dc:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=ce255139-1a13-4536-ae5f-6e550d137680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:b1:01:4e:22:ee:f5:97:fe:97:19:20:1e: ee:80:5b:11:f6:2b:9a:4a:54:b1:e5:ed:da:b1:87: e4:3a:18:2d:d6:a1:04:97:3e:e7:4a:d0:d6:8e:46: 8b:99:65:08:b3:16:00:bd:78:dd:50:62:f0:d3:14: 89:37:d4:f0:cf:8d:c8:06:b6:52:cf:5d:fe:8f:21: cb:cb:8d:33:f1:83:07:6a:a3:83:ed:7a:4d:76:b5: 2f:5c:fd:d2:4b:ce:a4:93:30:35:25:0e:ce:aa:b8: 12:4e:c9:02:51:82:49:e8:31:52:18:06:cf:ef:dc: a2:1c:48:06:00:07:eb:57:20:d1:4c:55:1d:0f:d0: ca:2c:cb:d5:1f:ba:bc:ad:fe:86:ed:a3:4b:4a:af: 04:6e:ce:f6:18:03:5b:83:d6:a1:43:29:d9:98:10: b8:ce:0c:ee:60:4b:26:fe:92:e7:88:ed:49:22:31: f7:53:60:66:33:d5:0d:6b:9c:d2:01:a1:f9:07:e2: 1f:c5:0b:73:c5:af:70:e5:5e:d3:54:1c:a7:8f:f4: 97:e4:f4:8f:bb:2c:3e:f3:ad:e0:b7:2d:65:4d:74: e9:c0:33:fe:85:08:1e:6a:0d:88:d9:72:5d:e5:13: 24:34:05:5e:df:06:9f:5c:40:be:93:0b:7e:a5:25: 59:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EB:0B:6B:EF:43:60:47:5F:FA:8F:D6:91:2E:D5:E0:5D:C8:40:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:23:df:78:e0:6c:19:02:e0:55:ff:94:41:4d:4b:b2:71:62: c6:c6:2f:c0:56:bc:7d:8b:2f:73:b3:48:03:f1:11:4b:ab:12: 5a:3f:63:0f:70:d7:06:6b:13:92:98:0d:ab:08:9f:25:e5:c5: 78:81:14:06:7c:15:6f:87:28:db:87:65:d2:41:a9:e4:db:2d: 7c:8b:2d:6c:2a:b5:49:b2:35:f3:7e:0f:84:e3:08:c0:6f:8b: 60:9b:57:ae:d9:48:17:ef:a8:eb:d5:f7:ea:d4:5b:6b:7b:ee: 70:32:00:00:ca:4f:d8:84:c8:0b:dd:96:0f:1d:04:b9:07:1d: 92:45:6d:f4:43:e9:54:c7:ae:a4:e9:bc:00:0f:8b:c4:6e:45: a0:44:b7:a8:37:ff:6f:9c:5f:37:26:33:0e:d4:18:cb:4e:8e: bc:b6:69:a2:a8:e6:9c:e3:87:77:28:b5:33:cc:47:c0:b5:3f: cd:0a:db:9e:70:3a:4f:37:b1:8a:37:aa:cd:93:b9:6f:67:92: 27:07:0b:37:93:1e:d0:aa:e4:4a:85:52:04:18:1c:a6:67:5a: 5f:aa:ca:6a:50:00:64:67:fb:9a:f6:e7:44:96:a4:e9:fb:b4: 0b:91:b4:96:6a:ae:0f:73:b2:10:a5:32:03:d0:11:f0:54:a8: 03:f2:3e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAETLoSO59n1LcL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk Y2UyNTUxMzktMWExMy00NTM2LWFlNWYtNmU1NTBkMTM3NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eexAU4i7vWX/pcZIB7ugFsR9iuaSlSx5e3a sYfkOhgt1qEElz7nStDWjkaLmWUIsxYAvXjdUGLw0xSJN9Twz43IBrZSz13+jyHL y40z8YMHaqOD7XpNdrUvXP3SS86kkzA1JQ7OqrgSTskCUYJJ6DFSGAbP79yiHEgG AAfrVyDRTFUdD9DKLMvVH7q8rf6G7aNLSq8Ebs72GANbg9ahQynZmBC4zgzuYEsm /pLniO1JIjH3U2BmM9UNa5zSAaH5B+IfxQtzxa9w5V7TVBynj/SX5PSPuyw+863g ty1lTXTpwDP+hQgeag2I2XJd5RMkNAVe3wafXEC+kwt+pSVZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTrC2vvQ2BHX/qP1pEu1eBdyEDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWFjYzNmMjMtZGRjZC0z NjhlLTg5YTgtY2Q0ODMxZmQxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcj33jgbBkC4FX/lEFNS7JxYsbGL8BWvH2LL3OzSAPxEUurElo/Yw9w 1wZrE5KYDasInyXlxXiBFAZ8FW+HKNuHZdJBqeTbLXyLLWwqtUmyNfN+D4TjCMBv i2CbV67ZSBfvqOvV9+rUW2t77nAyAADKT9iEyAvdlg8dBLkHHZJFbfRD6VTHrqTp vAAPi8RuRaBEt6g3/2+cXzcmMw7UGMtOjry2aaKo5pzjh3cotTPMR8C1P80K255w Ok83sYo3qs2TuW9nkicHCzeTHtCq5EqFUgQYHKZnWl+qympQAGRn+5r250SWpOn7 tAuRtJZqrg9zshClMgPQEfBUqAPyPjk= -----END CERTIFICATE-----Generated at Sat Dec 20 18:06:25 2025 by rpki-client