This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa File: f0d0f913-7559-3d06-ac30-36057e4c69cc.roa (raw, json) Hash identifier: +CJs8kGNZjP7YZSztua411TpzULt+PoivA2zbrymU4g= Subject key identifier: 3B:82:1C:A6:46:48:15:29:2A:60:96:2B:45:15:D1:6D:43:E9:F0:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E068FEF27314522A7CE2580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.20.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:8f:ef:27:31:45:22:a7:ce:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=ab869888-4990-41e7-9a0b-6f6fdaf39d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:b0:0f:03:e2:e4:dc:bf:2e:11:21:c8:fb: 4f:82:d6:b4:fc:b6:ee:fd:06:16:d0:e1:28:23:89: a3:8a:7e:fb:20:4d:4f:5d:b8:d7:d5:8f:e1:dd:80: 5a:77:3b:a0:db:bb:e5:e8:53:d6:8b:fe:10:d0:f2: ae:70:18:de:e7:8e:05:6a:74:f7:a2:9d:83:ed:8d: d3:0e:a1:c4:58:c8:cc:9a:e7:8b:d3:d6:a7:6e:5f: 8c:60:be:c5:a9:01:b6:6a:fb:37:6b:62:df:20:bb: 98:55:79:eb:5e:7b:67:2a:72:46:70:2a:a8:70:2a: 96:8d:60:11:f6:e0:e5:04:88:f6:0c:04:ec:12:35: 93:ad:79:fb:ca:5a:39:f5:c2:6e:11:90:79:2b:59: e9:7f:5b:ee:92:77:6e:a8:45:4e:d5:40:2d:c0:70: da:3c:19:83:f9:a3:a4:1d:6b:a4:a4:24:6e:48:85: fc:59:a7:7a:76:64:fd:ae:73:14:f4:2c:e0:79:6a: 1f:cc:47:89:cf:03:77:73:02:55:88:63:cf:59:18: 08:ff:c9:eb:83:94:ca:14:5f:a5:30:65:1b:d4:49: 32:00:62:60:1b:77:16:71:d3:1d:fc:32:8b:8d:af: a2:b2:1b:f4:24:a9:20:ba:5c:db:00:49:8c:a7:83: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:1C:A6:46:48:15:29:2A:60:96:2B:45:15:D1:6D:43:E9:F0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:80:83:36:36:85:e7:3e:20:17:3b:16:bb:c8:6d:0b:a9:7a: d6:5a:f9:bd:e5:90:9e:6c:77:77:23:40:22:66:22:eb:47:19: 31:ec:4b:e6:b9:4c:4d:6f:2f:63:54:c6:23:23:84:52:90:41: 8d:49:86:24:07:53:b1:ce:ee:df:1c:57:73:e8:b4:25:50:ae: 25:ab:dc:07:58:11:2e:fd:91:80:18:24:ee:cc:0b:96:af:a9: a6:0d:ee:f9:0a:5d:1b:9d:3b:8f:d2:37:63:29:48:44:8b:9a: 4b:bf:4d:ab:26:28:5c:3c:5d:4e:be:e2:c8:34:be:a8:64:c2: 53:b9:63:0d:28:9e:c3:e7:ed:dc:d1:aa:eb:55:02:3a:91:cb: 8f:66:40:84:f5:4b:a5:ad:40:2c:41:fe:15:6c:a7:ad:30:ff: c3:74:bb:e7:21:9f:47:15:20:27:4e:41:24:f7:9b:5f:33:7a: 1f:ee:f0:08:93:d9:9a:a2:c9:0f:3f:1c:3f:26:2c:eb:51:94: 7c:6a:d3:68:0d:32:05:25:f6:da:3d:78:93:7a:8d:04:03:c0: 30:22:b9:bf:5d:bf:43:3d:3e:c7:5b:6a:9e:1e:ea:1f:7b:2d: 2c:c0:71:1e:21:eb:41:fc:74:5d:c5:56:b4:60:52:0f:9d:7d: 9f:7e:9a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBo/vJzFFIqfOJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk YWI4Njk4ODgtNDk5MC00MWU3LTlhMGItNmY2ZmRhZjM5ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIawDwPi5Ny/LhEhyPtPgta0/Lbu/QYW0OEo I4mjin77IE1PXbjX1Y/h3YBadzug27vl6FPWi/4Q0PKucBje544FanT3op2D7Y3T DqHEWMjMmueL09anbl+MYL7FqQG2avs3a2LfILuYVXnrXntnKnJGcCqocCqWjWAR 9uDlBIj2DATsEjWTrXn7ylo59cJuEZB5K1npf1vuknduqEVO1UAtwHDaPBmD+aOk HWukpCRuSIX8Wad6dmT9rnMU9CzgeWofzEeJzwN3cwJViGPPWRgI/8nrg5TKFF+l MGUb1EkyAGJgG3cWcdMd/DKLja+ishv0JKkgulzbAEmMp4McTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuCHKZGSBUpKmCWK0UV0W1D6fDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjBkMGY5MTMtNzU1OS0z ZDA2LWFjMzAtMzYwNTdlNGM2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2AgzY2hec+IBc7FrvIbQupetZa+b3lkJ5sd3cjQCJmIutHGTHsS+a5 TE1vL2NUxiMjhFKQQY1JhiQHU7HO7t8cV3PotCVQriWr3AdYES79kYAYJO7MC5av qaYN7vkKXRudO4/SN2MpSESLmku/TasmKFw8XU6+4sg0vqhkwlO5Yw0onsPn7dzR qutVAjqRy49mQIT1S6WtQCxB/hVsp60w/8N0u+chn0cVICdOQST3m18zeh/u8AiT 2ZqiyQ8/HD8mLOtRlHxq02gNMgUl9to9eJN6jQQDwDAiub9dv0M9Psdbap4e6h97 LSzAcR4h60H8dF3FVrRgUg+dfZ9+mgM= -----END CERTIFICATE-----Generated at Sat Jan 10 20:56:07 2026 by rpki-client