This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa File: 23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa (raw, json) Hash identifier: IyDFjY5DFLBCFkv90uLRqiidTxk08srg7mOGGQNF6Xo= Subject key identifier: 50:EB:9D:D5:73:A6:AF:E1:F3:FE:A4:66:71:05:EB:8E:9E:CC:41:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E0695746F34734C6F09E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.20.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:95:74:6f:34:73:4c:6f:09:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=de3ffd0f-85e4-46d5-b062-27dff976302d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:89:9c:eb:00:ed:01:90:18:f4:4d:03:c7: a5:6f:ce:44:6c:4a:17:06:d9:0a:58:cc:b6:77:f9: db:ac:81:9d:97:d0:3b:16:d4:6e:b0:a6:6c:9d:78: f0:27:4f:e2:c9:ef:8c:ef:0c:0f:2a:67:a8:db:52: 14:7e:7f:d3:cd:29:ff:7e:8f:6b:0c:09:08:00:df: 37:6f:a2:e4:fb:7a:b3:8b:53:7c:07:72:a5:e9:23: 10:74:db:67:45:74:2b:a9:d5:6b:a6:db:31:35:b6: 86:e2:69:3e:2b:64:e7:89:97:a6:e0:3e:e9:da:23: f5:ce:53:4e:b0:93:9d:95:9c:6e:88:9c:86:74:75: 24:de:e5:b3:18:40:fa:71:1c:1f:80:19:9e:69:0c: 18:d8:1d:7b:85:0d:b7:14:c8:30:7e:76:03:4b:35: 0c:7a:18:d4:8a:bc:90:f3:13:83:a1:d9:19:04:5c: d9:c7:2c:6d:ab:47:9c:ae:eb:0c:1e:2c:6d:45:0a: 81:18:18:df:fc:78:43:29:85:2f:19:19:8e:ba:37: 30:af:a3:9e:a6:0d:37:58:be:cc:7e:fb:ea:7c:bb: a1:d3:29:f2:35:26:b2:a9:51:5e:9c:09:de:b3:7d: 17:50:1a:e1:45:ba:36:0d:60:dd:18:48:37:36:48: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EB:9D:D5:73:A6:AF:E1:F3:FE:A4:66:71:05:EB:8E:9E:CC:41:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:60:9d:e8:27:f0:4a:7b:cf:91:9c:7a:f0:83:16:a2:36:f2: ff:03:06:0e:50:98:e5:fb:9a:e7:9d:90:34:3e:1c:fa:21:1e: fd:48:15:3a:80:43:98:c5:ff:7e:92:d4:d0:a6:62:4f:d5:b8: 96:d3:0d:e2:72:7c:70:da:09:77:2a:f0:bf:66:f6:8e:6e:86: 2d:83:bd:b8:40:cd:6f:69:b9:2b:0f:02:4f:62:e9:01:24:27: 61:25:7a:00:51:1b:ec:0c:dc:9d:ad:61:b3:9f:ad:6a:b3:7f: 0d:fd:04:0e:82:41:5c:f2:08:09:64:e6:3a:77:77:1f:59:6f: b7:f3:3e:f4:28:0f:cf:51:0f:46:d0:21:cb:fd:97:3a:1d:a5: bc:18:ec:88:01:3a:84:2b:02:b7:41:96:45:de:7d:8a:a8:a9: fa:c9:7a:9e:d7:8c:87:8b:ae:2d:74:02:93:9e:b6:c5:c5:36: 17:21:72:53:c3:a0:6d:29:7b:15:20:02:82:46:8f:66:fe:11: bb:eb:f8:d5:ad:d1:c2:23:3b:f7:45:d3:ff:b0:d9:06:6e:58: 1a:a7:e7:b5:d1:60:c9:5d:2b:5a:51:fb:02:e2:7e:3a:ce:6b: 8b:2f:72:42:e5:11:af:33:f1:cd:f8:46:12:41:22:62:9f:84: 6e:18:f7:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpV0bzRzTG8J4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZGUzZmZkMGYtODVlNC00NmQ1LWIwNjItMjdkZmY5NzYzMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KKJnOsA7QGQGPRNA8elb85EbEoXBtkKWMy2 d/nbrIGdl9A7FtRusKZsnXjwJ0/iye+M7wwPKmeo21IUfn/TzSn/fo9rDAkIAN83 b6Lk+3qzi1N8B3Kl6SMQdNtnRXQrqdVrptsxNbaG4mk+K2TniZem4D7p2iP1zlNO sJOdlZxuiJyGdHUk3uWzGED6cRwfgBmeaQwY2B17hQ23FMgwfnYDSzUMehjUiryQ 8xODodkZBFzZxyxtq0ecrusMHixtRQqBGBjf/HhDKYUvGRmOujcwr6Oepg03WL7M fvvqfLuh0ynyNSayqVFenAnes30XUBrhRbo2DWDdGEg3NkixzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDrndVzpq/h8/6kZnEF646ezEEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNmNWI3ZTctMWU2NC0z Nzk0LTlhZTEtOWQ3N2YzMTVhZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJgnegn8Ep7z5GcevCDFqI28v8DBg5QmOX7muedkDQ+HPohHv1IFTqA Q5jF/36S1NCmYk/VuJbTDeJyfHDaCXcq8L9m9o5uhi2DvbhAzW9puSsPAk9i6QEk J2ElegBRG+wM3J2tYbOfrWqzfw39BA6CQVzyCAlk5jp3dx9Zb7fzPvQoD89RD0bQ Icv9lzodpbwY7IgBOoQrArdBlkXefYqoqfrJep7XjIeLri10ApOetsXFNhchclPD oG0pexUgAoJGj2b+Ebvr+NWt0cIjO/dF0/+w2QZuWBqn57XRYMldK1pR+wLifjrO a4svckLlEa8z8c34RhJBImKfhG4Y9ws= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:01 2026 by rpki-client