This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa File: ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa (raw, json) Hash identifier: Tcx9dB10IBQ+JEvspXAL5pRVFV9QdI++gEG7XpfaSq0= Subject key identifier: AF:86:3B:ED:A7:10:B2:82:AC:61:AD:40:E4:5E:CA:DD:20:E1:08:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C619140B0DE27F20A1C300550 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.23.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:40:b0:de:27:f2:0a:1c:30:05:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=69e2a60e-8ab0-4c82-a7e9-90534fd80ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:14:8d:33:40:54:50:64:5f:c0:58:5b:39: ec:95:01:fb:6e:3b:bd:f5:40:e6:61:40:e3:cb:c8: c6:f4:ca:fb:fc:d6:93:13:47:6e:d7:ef:b5:38:d2: 14:96:5b:74:b7:86:b1:fa:ad:15:ba:15:7a:b2:36: 6d:8a:04:49:a7:37:87:9f:9a:03:00:dc:ff:14:00: 7a:4a:44:e2:ab:36:5b:7c:7c:b1:f6:6e:cb:bd:f4: 2f:c0:8f:7f:3e:6f:53:09:20:1a:cc:09:fb:bd:db: 38:ee:97:ff:44:bf:5e:48:d9:a6:dd:ea:b4:3a:5a: 16:f4:75:8b:6b:11:d3:71:04:95:b1:fe:7e:c0:f4: 64:c6:0b:26:21:c8:33:e1:11:96:b8:e4:6e:ab:f9: b2:6a:a2:fd:6b:08:60:9a:c3:53:41:46:5e:25:b0: 14:27:fb:2a:a9:c2:a2:00:27:9b:29:dc:c1:1e:7d: 21:5c:8a:28:ff:d8:36:cf:8e:63:14:d3:07:f5:df: 04:db:c8:35:89:10:cd:06:51:28:28:a9:80:63:7d: 70:a1:e7:0d:8b:4c:41:37:e4:40:53:17:a0:a0:ed: 3d:2d:4c:3a:fb:16:ed:06:b7:55:8f:d9:2d:c2:6a: 35:45:d4:09:a7:27:f7:34:8f:6d:d4:2a:05:3b:e1: 64:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:86:3B:ED:A7:10:B2:82:AC:61:AD:40:E4:5E:CA:DD:20:E1:08:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d6:cf:fc:3c:01:92:c3:5d:50:3f:56:e6:49:bb:e2:87:64: ae:05:9f:ce:24:89:1d:a7:28:b3:bd:b0:9c:bf:c3:e5:de:8c: bb:7f:13:93:10:ee:d0:51:84:45:78:1c:80:6a:fd:8f:db:54: d1:d9:80:dc:be:9c:02:b7:b3:ea:0e:d8:e0:76:c4:97:02:97: 64:70:a9:38:07:39:3d:8f:56:1d:6c:d1:b9:e0:e5:d5:34:7b: 3e:51:e0:1e:96:ae:7d:c4:63:81:5c:bb:4e:3d:95:da:b8:fe: 7a:20:ad:3c:13:31:37:15:82:d9:18:64:71:69:3c:e3:d6:b9: 77:e1:2a:e6:ca:5f:f8:6f:24:3e:f0:dc:38:e9:d1:9b:10:3a: 9a:36:53:0e:29:18:1f:c5:08:7d:5c:9c:0a:fe:2b:7d:3a:f1: 64:c4:26:e6:2d:59:a4:f4:e6:bf:18:a2:57:d8:99:fd:80:16: 95:c3:17:ca:8b:a4:07:7d:aa:c6:51:26:dd:9b:42:ff:28:36: 05:fa:2d:3e:4e:02:ac:09:e2:af:a6:71:f2:08:0c:0b:22:d6: 27:10:f0:08:bd:c1:22:9b:69:dd:f9:f6:e7:62:fb:d9:a7:80: bf:d4:14:a6:20:80:7d:0c:dc:36:46:3a:ca:fa:1b:2b:4f:c3: 91:e7:c8:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkUCw3ifyChwwBVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk NjllMmE2MGUtOGFiMC00YzgyLWE3ZTktOTA1MzRmZDgwYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQYUjTNAVFBkX8BYWznslQH7bju99UDmYUDj y8jG9Mr7/NaTE0du1++1ONIUllt0t4ax+q0VuhV6sjZtigRJpzeHn5oDANz/FAB6 SkTiqzZbfHyx9m7LvfQvwI9/Pm9TCSAazAn7vds47pf/RL9eSNmm3eq0OloW9HWL axHTcQSVsf5+wPRkxgsmIcgz4RGWuORuq/myaqL9awhgmsNTQUZeJbAUJ/sqqcKi ACebKdzBHn0hXIoo/9g2z45jFNMH9d8E28g1iRDNBlEoKKmAY31woecNi0xBN+RA UxegoO09LUw6+xbtBrdVj9ktwmo1RdQJpyf3NI9t1CoFO+Fk3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+GO+2nELKCrGGtQOReyt0g4QiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY3ZTgzMTEtMWUyMC0z YjRhLTg4MzQtZTljM2VhMjZkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXWz/w8AZLDXVA/VuZJu+KHZK4Fn84kiR2nKLO9sJy/w+XejLt/E5MQ 7tBRhEV4HIBq/Y/bVNHZgNy+nAK3s+oO2OB2xJcCl2RwqTgHOT2PVh1s0bng5dU0 ez5R4B6Wrn3EY4Fcu049ldq4/nogrTwTMTcVgtkYZHFpPOPWuXfhKubKX/hvJD7w 3Djp0ZsQOpo2Uw4pGB/FCH1cnAr+K3068WTEJuYtWaT05r8YolfYmf2AFpXDF8qL pAd9qsZRJt2bQv8oNgX6LT5OAqwJ4q+mcfIIDAsi1icQ8Ai9wSKbad359udi+9mn gL/UFKYggH0M3DZGOsr6GytPw5HnyEo= -----END CERTIFICATE-----Generated at Sat Jan 10 20:52:55 2026 by rpki-client