This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa File: aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa (raw, json) Hash identifier: gGhfNtbEuJq52TLGv4lBuUR1Vf34LGS6mcyIq93sSeU= Subject key identifier: 2F:53:7C:E9:1C:A1:5E:23:81:67:B2:8E:F7:31:4C:47:65:D4:46:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405467FBB415EF3F4A5E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.22.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:54:67:fb:b4:15:ef:3f:4a:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c92bd391-bb06-487a-877d-086a936705e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:71:d8:65:bd:10:d9:39:19:b1:e9:40:fb: d3:12:34:39:f5:56:28:be:1d:6f:22:27:05:73:09: 41:97:6c:76:72:03:51:e6:e9:52:72:95:e9:01:3d: ff:7e:8c:38:53:b7:b7:b8:bf:0c:a8:f4:e2:b8:d1: b5:d8:09:5b:59:38:3f:17:ad:c5:78:50:06:d7:f8: cc:7a:01:c4:81:3a:5f:e1:de:90:ca:3f:30:f9:0e: f8:9b:2b:eb:d9:0f:9b:dd:54:46:0e:e4:ff:86:b9: ce:04:95:6f:c9:cc:32:26:86:ab:5d:4f:79:24:f9: e2:7b:e2:f1:89:f3:57:81:5e:3c:65:e1:be:44:c0: d7:fd:10:bd:1d:29:ad:46:ef:35:6f:32:79:fb:ad: 88:c4:bf:1d:f2:d5:f6:dc:71:27:74:aa:4c:07:73: f2:11:d8:3d:c7:63:68:8c:67:6a:82:c3:21:5c:f3: b8:9b:48:b4:ab:d0:34:b6:8a:45:e3:6c:21:80:66: 68:fb:82:c6:8f:eb:f9:20:3d:d8:c4:28:ad:86:fe: a5:6d:ec:6f:40:20:a0:86:96:ad:74:b9:fb:82:f5: 83:f2:f6:65:b8:b8:d8:a3:44:d3:d1:32:59:36:c3: 3c:76:7b:e3:66:7e:d7:51:1f:66:85:c1:4a:04:c4: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:7C:E9:1C:A1:5E:23:81:67:B2:8E:F7:31:4C:47:65:D4:46:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9b:22:e7:60:2a:a6:b6:aa:c4:61:db:00:b7:52:51:82:98: c7:0e:a9:34:5a:73:e4:96:09:f1:35:8c:79:da:ac:65:d5:18: 1b:b6:08:d0:bc:26:67:2f:05:3e:e1:5b:3c:39:28:70:78:07: 16:e6:bb:53:dd:77:a4:15:10:1d:f2:0c:f2:84:61:48:70:08: 62:8f:5a:7c:a5:2c:b6:c8:f3:df:7a:fb:d1:81:b1:c6:6e:58: 84:81:c5:6d:8f:e5:be:a1:86:c2:a9:ae:68:32:5f:b4:0f:6b: 3d:86:0d:55:e3:4a:6b:8f:67:fb:fa:30:cb:5d:76:3f:2e:1e: 22:07:a9:67:a3:e4:6f:bd:15:c7:14:23:6b:8b:c3:e8:c0:8b: 54:c4:d4:1c:bd:fc:82:46:6c:97:51:40:39:fb:84:1d:90:be: 9e:01:e9:cf:56:08:db:30:ca:98:f4:ee:f7:c7:8b:95:ce:dd: 0d:4a:44:b3:ed:3b:dc:99:6d:7f:2e:7c:87:3f:21:87:f3:ae: a6:4c:12:2a:07:e6:c2:96:f3:d5:55:8a:69:fe:7b:b7:ea:36: 3f:fa:3e:71:6c:a0:47:de:3a:fa:07:18:25:e3:fa:cb:f5:39: 65:c4:b4:5e:42:55:72:35:9e:60:79:dc:23:d8:75:f8:3f:a2: c9:08:e3:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFRn+7QV7z9KXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzkyYmQzOTEtYmIwNi00ODdhLTg3N2QtMDg2YTkzNjcwNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJtx2GW9ENk5GbHpQPvTEjQ59VYovh1vIicF cwlBl2x2cgNR5ulScpXpAT3/fow4U7e3uL8MqPTiuNG12AlbWTg/F63FeFAG1/jM egHEgTpf4d6Qyj8w+Q74myvr2Q+b3VRGDuT/hrnOBJVvycwyJoarXU95JPnie+Lx ifNXgV48ZeG+RMDX/RC9HSmtRu81bzJ5+62IxL8d8tX23HEndKpMB3PyEdg9x2No jGdqgsMhXPO4m0i0q9A0topF42whgGZo+4LGj+v5ID3YxCithv6lbexvQCCghpat dLn7gvWD8vZluLjYo0TT0TJZNsM8dnvjZn7XUR9mhcFKBMTI4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9TfOkcoV4jgWeyjvcxTEdl1EarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEzZWYxMDEtNjdkMC0z ZDU0LTkwYWUtMmY5NGNmNmFjNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWbIudgKqa2qsRh2wC3UlGCmMcOqTRac+SWCfE1jHnarGXVGBu2CNC8 JmcvBT7hWzw5KHB4Bxbmu1Pdd6QVEB3yDPKEYUhwCGKPWnylLLbI8996+9GBscZu WISBxW2P5b6hhsKprmgyX7QPaz2GDVXjSmuPZ/v6MMtddj8uHiIHqWej5G+9FccU I2uLw+jAi1TE1By9/IJGbJdRQDn7hB2Qvp4B6c9WCNswypj07vfHi5XO3Q1KRLPt O9yZbX8ufIc/IYfzrqZMEioH5sKW89VVimn+e7fqNj/6PnFsoEfeOvoHGCXj+sv1 OWXEtF5CVXI1nmB53CPYdfg/oskI41A= -----END CERTIFICATE-----Generated at Tue Nov 25 06:33:59 2025 by rpki-client