This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa File: 06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json) Hash identifier: mrtBSqHVpNPx1DAFzNrTcqSLfIyoJr1BMqDxflPqEGw= Subject key identifier: D4:89:88:34:50:85:4E:42:97:93:7A:89:D2:66:47:7A:BB:7F:D9:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C5EC6C37ABEF7D42C0A488A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.20.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:c3:7a:be:f7:d4:2c:0a:48:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=5dbeef3f-1b24-43cd-bc5b-2e6884e4cdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:b6:90:8c:1e:79:14:35:f7:50:3d:3b:08: d2:ea:de:63:18:62:a0:00:29:91:97:d9:a2:79:3b: d2:f5:68:86:1c:2b:94:f5:b6:8f:32:f5:7c:bd:d0: 22:4f:92:8c:e0:6b:23:08:c0:13:01:3e:11:c0:0e: b0:27:ac:20:ff:31:d9:15:bb:d4:d3:48:0a:75:bd: 15:ab:f7:c4:02:7c:9d:93:c3:d8:5f:f3:45:e9:13: ff:87:8b:4a:46:fc:f5:96:ca:86:aa:cd:06:cd:b7: ce:92:93:f6:0a:e2:37:76:da:87:bc:ac:bc:d7:fb: dd:13:d8:32:22:10:e0:d4:16:33:7a:0a:ff:49:67: 03:87:13:03:4d:7d:be:d0:49:c9:54:d2:01:83:a2: 57:ab:43:27:17:e7:9c:be:fe:51:e3:40:9c:78:48: 30:97:b1:03:c8:86:6e:03:cf:8e:74:c3:85:62:c4: 66:51:84:84:05:0d:15:04:df:5c:20:72:fb:5d:89: af:ad:c4:0e:c4:e5:1c:c7:46:65:f0:0a:f2:bf:d5: f4:35:b7:43:20:99:19:e5:47:56:33:8d:af:b9:40: fc:a4:03:63:f5:0f:60:93:c0:09:8a:8a:5e:30:b9: 51:cf:b7:01:13:5f:ff:4f:4c:b8:89:e1:74:29:9c: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:89:88:34:50:85:4E:42:97:93:7A:89:D2:66:47:7A:BB:7F:D9:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a0:34:6f:8e:f9:59:71:a4:0e:73:94:db:3f:b0:72:ef:94: 45:cc:a9:39:65:35:fb:d4:79:04:24:e2:88:21:f1:48:be:d0: 56:07:a5:85:e5:5f:8a:cf:05:99:76:64:d9:58:cf:74:f6:ad: 95:04:55:da:a1:b2:1c:fc:e7:ff:88:b0:3a:50:ea:4b:93:97: ac:1f:73:e5:e1:e6:4e:15:e6:25:5b:a3:56:c3:07:f8:94:e6: 9c:36:3f:83:e1:d4:c4:6b:36:85:55:89:cf:f5:a5:b5:71:7a: 08:9d:d4:69:99:e2:ae:16:35:13:77:c3:58:dc:26:e6:cb:5e: d4:15:45:34:d9:4d:c4:1b:f8:a6:c0:88:10:2f:cb:b8:d3:6e: 65:3a:e6:c7:bc:a2:10:88:11:93:7b:c0:8d:eb:0d:a0:9f:f6: fc:e5:24:8a:b3:b6:84:e9:c8:6f:4f:41:7a:18:0f:1a:3b:40: a0:f5:55:d6:93:d3:6d:53:8e:db:17:78:83:7a:7f:c6:08:a0: ee:00:1f:87:9b:53:82:04:7f:ed:6c:d5:59:b9:4e:ff:34:3e: 48:4b:8c:ea:44:9d:86:cf:95:ef:1a:3b:13:74:72:55:47:31: cc:96:62:4a:c7:5d:71:b2:4d:42:f4:76:1f:d8:81:00:14:51: b6:bf:b1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexsN6vvfULApIigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NWRiZWVmM2YtMWIyNC00M2NkLWJjNWItMmU2ODg0ZTRjZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwG2kIweeRQ191A9OwjS6t5jGGKgACmRl9mi eTvS9WiGHCuU9baPMvV8vdAiT5KM4GsjCMATAT4RwA6wJ6wg/zHZFbvU00gKdb0V q/fEAnydk8PYX/NF6RP/h4tKRvz1lsqGqs0GzbfOkpP2CuI3dtqHvKy81/vdE9gy IhDg1BYzegr/SWcDhxMDTX2+0EnJVNIBg6JXq0MnF+ecvv5R40CceEgwl7EDyIZu A8+OdMOFYsRmUYSEBQ0VBN9cIHL7XYmvrcQOxOUcx0Zl8Aryv9X0NbdDIJkZ5UdW M42vuUD8pANj9Q9gk8AJiopeMLlRz7cBE1//T0y4ieF0KZzhzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSJiDRQhU5Cl5N6idJmR3q7f9mCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYzOTdlNGEtNTk0NC0z Y2Y2LTljZDYtMjAyY2UyNDgwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqgNG+O+VlxpA5zlNs/sHLvlEXMqTllNfvUeQQk4ogh8Ui+0FYHpYXl X4rPBZl2ZNlYz3T2rZUEVdqhshz85/+IsDpQ6kuTl6wfc+Xh5k4V5iVbo1bDB/iU 5pw2P4Ph1MRrNoVVic/1pbVxegid1GmZ4q4WNRN3w1jcJubLXtQVRTTZTcQb+KbA iBAvy7jTbmU65se8ohCIEZN7wI3rDaCf9vzlJIqztoTpyG9PQXoYDxo7QKD1VdaT 021TjtsXeIN6f8YIoO4AH4ebU4IEf+1s1Vm5Tv80PkhLjOpEnYbPle8aOxN0clVH McyWYkrHXXGyTUL0dh/YgQAUUba/sdk= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:16 2026 by rpki-client