This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa File: 2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa (raw, json) Hash identifier: j+vxBpaL1zZKj8FnjNvFgQBcfnMmTMM+0wes9HvHQkQ= Subject key identifier: FB:4C:AF:F0:AE:65:93:E6:72:0C:46:F1:00:CA:D1:3A:E9:AC:CB:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D14DEFF456E587621AA270 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.140.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:4d:ef:f4:56:e5:87:62:1a:a2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=895b03b2-fa75-4655-83cf-4634a7c81f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:b7:a0:44:d4:b2:00:fd:e5:a0:b5:e5:c8: 32:65:6a:fe:cb:9c:65:c8:39:5a:dc:8b:db:ad:11: 83:db:23:f7:7a:bd:c3:4b:38:ff:94:60:1d:70:f5: e5:a3:e9:bb:b8:f2:04:0d:80:ea:d2:53:1d:aa:8b: 4e:9f:35:c1:18:49:fb:46:82:22:76:88:f6:93:f5: fc:8d:6b:cb:1d:86:d4:fd:df:cc:2a:d2:94:82:b3: 5d:5c:93:9a:42:aa:68:00:a2:0b:d9:02:ae:93:f8: 9d:d4:2b:c5:41:3b:43:1f:de:31:58:96:c5:af:69: e7:3f:58:19:5b:b1:7f:72:22:77:94:2b:a2:fb:9e: d9:83:60:27:5f:ce:dd:44:e3:83:e3:da:f9:2f:1e: 7f:18:23:25:d0:58:ca:f8:d8:2e:93:2a:75:34:a2: 49:e3:2d:74:30:92:85:4a:5a:c0:9d:a9:6d:45:4f: 28:76:85:4f:ff:c6:f0:b1:ee:73:b3:3b:dd:9b:36: df:42:65:76:52:ee:b3:59:c5:61:c8:2d:a3:24:ef: 2a:68:87:5e:02:9c:b5:70:94:5c:7e:c9:cb:8e:89: 19:d2:ca:5a:3b:48:c8:23:20:1a:75:39:3d:a1:69: 45:60:2b:ac:aa:20:14:39:d7:0e:66:49:bc:66:46: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4C:AF:F0:AE:65:93:E6:72:0C:46:F1:00:CA:D1:3A:E9:AC:CB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.140.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:71:38:f0:39:80:f9:a7:21:f7:97:68:6c:23:fb:5e:ca:fc: e8:57:0d:f4:d5:03:49:2b:74:61:6b:58:98:8b:5f:47:81:c2: 79:43:a1:cf:59:91:6d:76:4a:6d:d2:56:0c:4b:2a:bf:62:59: 7d:18:9b:1a:c3:7a:16:00:63:0c:db:b2:1e:e1:02:11:cf:e3: 61:3d:d4:7f:c7:ed:5e:a5:5a:3f:ae:04:8f:8a:6f:63:e8:b1: 5c:1d:7f:de:a4:92:1e:f5:7a:27:14:61:32:09:bc:f1:57:4c: d3:48:c0:75:3c:e2:48:fc:08:66:80:d6:73:10:e8:9d:c2:c7: 5d:67:1f:bc:62:65:ce:69:40:92:1d:33:5e:dc:11:9d:6d:53: ab:50:6f:21:1f:4e:7b:f7:c6:cf:13:2a:5e:7b:46:4a:3d:7d: 78:b3:d7:30:bb:89:d3:d6:68:1c:a2:b6:4d:00:15:0a:85:1b: c8:35:44:e4:bf:67:bd:a6:d2:21:df:41:f5:37:a4:a3:57:37: ae:e6:84:01:0e:62:ee:b6:c9:be:d3:58:ac:de:78:73:5c:c4: 2c:7d:1a:df:ac:31:ca:ca:ef:c2:79:7a:0f:a1:f6:c8:fc:9f: 1b:b7:f5:59:8f:73:35:ab:11:e6:fd:65:df:ac:bd:2a:fe:b2: f5:e9:3f:39 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExQ0U3v9Fblh2IaonAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODk1YjAzYjItZmE3NS00NjU1LTgzY2YtNDYzNGE3YzgxZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWG3oETUsgD95aC15cgyZWr+y5xlyDla3Ivb rRGD2yP3er3DSzj/lGAdcPXlo+m7uPIEDYDq0lMdqotOnzXBGEn7RoIidoj2k/X8 jWvLHYbU/d/MKtKUgrNdXJOaQqpoAKIL2QKuk/id1CvFQTtDH94xWJbFr2nnP1gZ W7F/ciJ3lCui+57Zg2AnX87dROOD49r5Lx5/GCMl0FjK+Ngukyp1NKJJ4y10MJKF SlrAnaltRU8odoVP/8bwse5zszvdmzbfQmV2Uu6zWcVhyC2jJO8qaIdeApy1cJRc fsnLjokZ0spaO0jIIyAadTk9oWlFYCusqiAUOdcOZkm8ZkZ0fQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPtMr/CuZZPmcgxG8QDK0TrprMvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjk5OWRkMjktZjJlYS0z M2RhLTlkNzgtM2Y0YmExYmM5MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYowwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlnE48DmA+ach95dobCP7Xsr86FcN9NUDSSt0YWtYmItfR4HCeUOhz1mR bXZKbdJWDEsqv2JZfRibGsN6FgBjDNuyHuECEc/jYT3Uf8ftXqVaP64Ej4pvY+ix XB1/3qSSHvV6JxRhMgm88VdM00jAdTziSPwIZoDWcxDoncLHXWcfvGJlzmlAkh0z XtwRnW1Tq1BvIR9Oe/fGzxMqXntGSj19eLPXMLuJ09ZoHKK2TQAVCoUbyDVE5L9n vabSId9B9Teko1c3ruaEAQ5i7rbJvtNYrN54c1zELH0a36wxysrvwnl6D6H2yPyf G7f1WY9zNasR5v1l36y9Kv6y9ek/OQ== -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:30 2026 by rpki-client