This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa File: d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa (raw, json) Hash identifier: FTfiaM+5rTIEYHFlOJ5byc1Sh+4XrVZOtkk13YifRRQ= Subject key identifier: 83:5C:48:F2:05:07:CA:03:D3:94:D7:B5:A2:06:BB:88:1C:80:58:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C1FF61A5DFB936C90075ACC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 98.18.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:1a:5d:fb:93:6c:90:07:5a:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=9cf104ae-0dbc-4461-8056-e1a0f9395cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:6e:f2:29:a1:12:94:64:47:b4:41:2f:de: a1:1d:6d:91:ee:89:84:bd:25:99:46:ea:93:60:d6: 74:24:11:be:14:bc:d0:13:db:3b:54:39:37:cc:93: 29:e8:03:44:10:6b:34:ef:43:77:1b:61:eb:1e:e4: 43:bc:aa:c7:da:bb:2e:4c:4c:d7:68:8c:fe:e1:65: 7e:37:6f:9a:58:21:65:42:93:fa:cb:a9:cc:48:86: e0:a7:96:71:11:4a:15:10:1f:1b:40:f4:21:0e:44: 3f:8b:c0:0a:58:5c:92:af:54:ce:86:2a:0f:16:93: 85:47:2e:ce:f8:5f:05:34:89:f2:8b:d2:0b:ef:6f: 70:54:ad:d2:82:9d:6b:1f:b0:24:82:f5:e5:dc:06: 46:69:01:40:cd:69:be:d2:df:f0:8d:08:26:8a:c3: 4c:ce:30:47:39:04:84:a8:1e:6c:c2:bf:41:50:e3: 9c:8b:d6:e4:22:c1:ed:5a:bc:05:40:a3:67:29:f8: d9:cd:62:7a:8c:41:e6:e5:66:a1:8d:93:18:52:9f: a0:95:3a:97:75:3c:f7:d7:28:0b:68:8d:19:92:a3: 29:2f:a7:4d:ae:2a:20:4c:40:be:3b:c2:80:bb:f3: c8:c5:15:99:44:f3:63:77:34:91:a0:4f:0b:51:7a: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5C:48:F2:05:07:CA:03:D3:94:D7:B5:A2:06:BB:88:1C:80:58:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2f:9c:1c:93:96:03:d9:79:06:07:e5:a8:d9:98:38:ce:0f: 9c:4a:30:cb:77:77:eb:60:89:02:02:5b:1a:c5:95:6c:27:18: dc:53:13:c9:db:6f:fc:68:00:16:3a:d5:67:d8:ad:f1:d0:78: 03:db:95:66:0b:a3:3e:19:7d:62:f0:d8:27:42:53:98:35:e6: ea:22:ff:85:00:f0:a6:71:e2:f2:ec:27:f3:38:2d:fd:50:ed: 7a:10:31:cb:25:2c:f7:08:66:c9:4b:50:91:ca:17:9f:ce:f0: e9:06:e4:51:79:90:e0:67:17:81:30:70:9b:d5:61:66:7c:47: 24:0c:52:f6:e4:1a:bd:0d:e3:2f:30:99:e3:50:11:4f:cc:e5: 26:5e:74:e9:0e:b0:0f:39:c9:be:4e:72:24:ac:01:71:b2:d4: 36:30:63:0e:f5:a0:06:d5:59:19:bb:44:17:43:f4:e8:88:2d: 30:bf:f9:d8:ff:af:d9:e3:d7:37:65:00:18:80:7c:6f:92:7f: 2f:e1:10:21:9a:13:c5:d0:39:57:d5:b2:e6:8f:75:6f:d8:6f: e8:69:17:4c:30:6f:5a:73:c7:59:f1:5a:22:d0:2d:db:18:47: 96:6e:9d:0e:8c:ec:8a:1b:00:f2:5b:6f:66:d8:cc:0f:76:0f: 1a:01:28:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9hpd+5NskAdazAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk OWNmMTA0YWUtMGRiYy00NDYxLTgwNTYtZTFhMGY5Mzk1Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohJu8imhEpRkR7RBL96hHW2R7omEvSWZRuqT YNZ0JBG+FLzQE9s7VDk3zJMp6ANEEGs070N3G2HrHuRDvKrH2rsuTEzXaIz+4WV+ N2+aWCFlQpP6y6nMSIbgp5ZxEUoVEB8bQPQhDkQ/i8AKWFySr1TOhioPFpOFRy7O +F8FNInyi9IL729wVK3Sgp1rH7AkgvXl3AZGaQFAzWm+0t/wjQgmisNMzjBHOQSE qB5swr9BUOOci9bkIsHtWrwFQKNnKfjZzWJ6jEHm5WahjZMYUp+glTqXdTz31ygL aI0ZkqMpL6dNriogTEC+O8KAu/PIxRWZRPNjdzSRoE8LUXoVgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINcSPIFB8oD05TXtaIGu4gcgFjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRhMjBmMWEtZDVlZS0z ZjBhLTk0NDItNjM5ODA0ZTAzZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUvnByTlgPZeQYH5ajZmDjOD5xKMMt3d+tgiQICWxrFlWwnGNxTE8nb b/xoABY61WfYrfHQeAPblWYLoz4ZfWLw2CdCU5g15uoi/4UA8KZx4vLsJ/M4Lf1Q 7XoQMcslLPcIZslLUJHKF5/O8OkG5FF5kOBnF4EwcJvVYWZ8RyQMUvbkGr0N4y8w meNQEU/M5SZedOkOsA85yb5OciSsAXGy1DYwYw71oAbVWRm7RBdD9OiILTC/+dj/ r9nj1zdlABiAfG+Sfy/hECGaE8XQOVfVsuaPdW/Yb+hpF0wwb1pzx1nxWiLQLdsY R5ZunQ6M7IobAPJbb2bYzA92DxoBKAg= -----END CERTIFICATE-----Generated at Sat Dec 20 18:07:37 2025 by rpki-client