This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9da828cd-b132-36f6-9f61-caa482a5daa5.roa File: 9da828cd-b132-36f6-9f61-caa482a5daa5.roa (raw, json) Hash identifier: 9jq3ANmjHrfm9RDealWFHM+DkyEpIk3YOVT8hrFrXRs= Subject key identifier: EF:A4:A8:49:F0:19:B0:71:66:64:0E:5F:0B:BE:1E:9F:AD:BD:9F:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068E6C9E3154193BECF020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9da828cd-b132-36f6-9f61-caa482a5daa5.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.20.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8e:6c:9e:31:54:19:3b:ec:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=442cae94-64ba-4273-91f1-d48e24e43f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:9d:3f:59:e1:33:a9:4a:18:8b:8d:a9:79: 8c:41:e7:d7:b9:6c:4d:b7:18:a4:b8:92:61:af:c9: a4:d7:f4:b4:f5:bb:e0:12:6c:95:d6:fe:af:1c:d4: ec:d2:39:fc:f6:56:ee:8a:4d:5e:1c:c8:71:5d:2c: 08:e6:d2:a3:04:7b:79:9a:71:5c:f1:5e:a0:73:d9: 0e:a7:aa:b4:41:dd:d9:1c:8b:4a:da:f8:3a:96:27: 01:dc:e9:6c:14:3b:d1:ed:1d:ab:3a:1a:77:aa:30: 22:29:9b:19:2b:f5:fe:a2:54:c2:1e:8b:e4:07:1a: 08:31:9c:2d:f4:9b:54:78:3c:b7:2b:af:e0:61:50: 2c:46:62:8f:67:5d:7a:a0:95:53:95:a8:27:b1:eb: cd:ec:22:c4:01:6c:ff:fd:c3:35:67:05:e8:69:bd: 82:de:5e:53:2e:3c:e8:dd:7b:3a:a2:3f:8c:27:f1: fa:45:21:78:cf:8c:11:e5:c1:20:52:83:65:cf:30: 5e:35:98:6d:3f:b7:04:d8:9c:82:99:ba:fc:f7:e2: 66:e1:ed:1a:d7:72:24:bb:38:31:e5:bc:5a:d1:f9: e6:2e:c2:69:a6:1f:1a:e6:90:90:88:16:15:9c:a1: c7:e4:aa:15:34:2b:09:f7:5f:61:4b:bb:9d:f8:2d: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A4:A8:49:F0:19:B0:71:66:64:0E:5F:0B:BE:1E:9F:AD:BD:9F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9da828cd-b132-36f6-9f61-caa482a5daa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4a:63:30:a4:5b:3f:03:b1:7f:07:94:c3:bf:4c:60:c5:8d: e1:dd:2b:9f:34:f3:2c:ea:09:ee:10:cf:ea:ad:71:1a:38:24: cd:ae:85:30:d9:cf:a1:e1:64:63:7f:00:6b:f7:48:e5:f0:1c: 67:56:bb:69:b1:07:20:3a:d0:ec:5f:2a:fd:de:84:77:f1:a0: 5e:43:b6:11:d7:31:5b:62:96:19:6a:b3:29:f8:32:dd:a8:a9: 59:61:00:2f:c0:d2:7d:f9:85:2a:db:f8:8d:69:17:fa:d6:a9: 67:03:bb:d1:1d:ce:6b:fd:09:7c:89:63:bd:15:81:71:05:a5: 63:47:6d:01:c0:39:a5:3c:a1:53:aa:a1:eb:1d:21:2d:9e:2d: ad:ee:7a:5b:bf:c2:12:36:5c:6e:45:70:bf:ff:e4:84:9c:19: 24:c4:f9:2b:ff:1b:20:9e:76:65:20:08:25:22:ec:8f:a5:43: f0:71:04:d9:1d:3e:02:bc:7b:ac:e9:2d:13:0a:4f:0b:53:4b: 53:03:fc:66:a7:74:32:e5:7e:b9:ba:1d:5c:02:90:14:d3:5c: d5:d8:5b:65:5b:2c:91:e3:a5:ea:f6:11:c0:00:29:2d:51:e1: 40:97:ba:22:db:77:cd:91:95:b5:dd:0b:78:2d:66:c0:00:c4: 26:8f:b6:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo5snjFUGTvs8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk NDQyY2FlOTQtNjRiYS00MjczLTkxZjEtZDQ4ZTI0ZTQzZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlCdP1nhM6lKGIuNqXmMQefXuWxNtxikuJJh r8mk1/S09bvgEmyV1v6vHNTs0jn89lbuik1eHMhxXSwI5tKjBHt5mnFc8V6gc9kO p6q0Qd3ZHItK2vg6licB3OlsFDvR7R2rOhp3qjAiKZsZK/X+olTCHovkBxoIMZwt 9JtUeDy3K6/gYVAsRmKPZ116oJVTlagnsevN7CLEAWz//cM1ZwXoab2C3l5TLjzo 3Xs6oj+MJ/H6RSF4z4wR5cEgUoNlzzBeNZhtP7cE2JyCmbr89+Jm4e0a13Ikuzgx 5bxa0fnmLsJpph8a5pCQiBYVnKHH5KoVNCsJ919hS7ud+C3dQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+kqEnwGbBxZmQOXwu+Hp+tvZ/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWRhODI4Y2QtYjEzMi0z NmY2LTlmNjEtY2FhNDgyYTVkYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtKYzCkWz8DsX8HlMO/TGDFjeHdK5808yzqCe4Qz+qtcRo4JM2uhTDZ z6HhZGN/AGv3SOXwHGdWu2mxByA60OxfKv3ehHfxoF5DthHXMVtilhlqsyn4Mt2o qVlhAC/A0n35hSrb+I1pF/rWqWcDu9Edzmv9CXyJY70VgXEFpWNHbQHAOaU8oVOq oesdIS2eLa3uelu/whI2XG5FcL//5IScGSTE+Sv/GyCedmUgCCUi7I+lQ/BxBNkd PgK8e6zpLRMKTwtTS1MD/GandDLlfrm6HVwCkBTTXNXYW2VbLJHjper2EcAAKS1R 4UCXuiLbd82RlbXdC3gtZsAAxCaPtpQ= -----END CERTIFICATE-----Generated at Sat Jan 10 20:52:55 2026 by rpki-client