This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1623e645-594a-39b8-b004-fe03189f412a.roa File: 1623e645-594a-39b8-b004-fe03189f412a.roa (raw, json) Hash identifier: ZChP6dLH5Fd1dI+Jo3f+7BBOHa0iOghFBcWiFUwSUdM= Subject key identifier: 66:7F:6F:B7:3D:4F:67:50:A4:1B:F5:F2:D4:1E:FC:2A:80:10:D9:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18D5084375A44B3400140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1623e645-594a-39b8-b004-fe03189f412a.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.21.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:8d:50:84:37:5a:44:b3:40:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=495cc935-273a-433c-bbf5-7011b36480e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:44:51:ce:f9:27:a2:c2:ef:f1:2b:a8:b9: 23:11:96:f2:80:2c:31:82:22:9b:b9:48:49:48:e6: f4:b6:38:84:c8:c4:04:1f:89:c5:5d:49:7f:6e:a3: dd:63:a5:6a:58:e2:38:17:c4:37:52:60:c6:b1:db: cf:c8:76:cf:cb:85:1c:87:aa:25:d2:ad:a0:02:c0: 5f:fe:c9:b2:5c:e7:a2:f6:94:20:52:6d:2a:3a:c4: d2:1e:34:c6:ea:e8:af:e9:e5:17:e6:03:5d:06:4b: fe:67:2f:90:03:08:59:6f:99:11:9a:06:2b:57:0e: b4:ee:23:42:09:b9:8e:e0:8c:7f:52:e9:f0:10:fe: 6e:ac:5c:80:12:71:18:45:f4:d6:f6:c1:f6:f5:26: 07:65:0f:16:00:ec:3b:ce:c2:7f:3b:72:ec:8d:06: 2e:8c:cc:43:7c:54:a9:48:ed:b9:37:9a:0c:67:91: 06:a1:f6:35:92:e6:6a:eb:b7:69:36:89:6c:21:b5: a5:95:38:69:e1:a8:7d:4f:8f:55:9f:18:2d:ac:3d: 5f:fb:99:65:3b:b5:cf:d4:c1:bd:49:f8:b9:14:fb: fe:15:9b:d8:4a:91:8b:d8:ed:08:1e:d4:18:36:93: c9:bf:14:f4:0b:c1:fb:99:a1:1b:7d:56:3d:9a:92: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7F:6F:B7:3D:4F:67:50:A4:1B:F5:F2:D4:1E:FC:2A:80:10:D9:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1623e645-594a-39b8-b004-fe03189f412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2c:14:b7:ec:38:49:43:56:52:be:23:fb:54:02:f8:16:34: d9:e7:99:fc:3e:11:90:a3:99:12:cd:53:ae:4d:43:60:b6:18: 7f:52:eb:f5:ff:5c:21:67:39:e9:6a:69:50:09:97:2d:ac:0e: e7:67:a6:d4:9f:08:2c:05:4d:ce:f5:fc:cf:39:9e:82:a4:e6: 8a:3e:02:9b:3a:ce:b9:8b:cd:8a:1e:23:08:34:14:61:b7:2d: 92:6f:6e:cd:6a:91:71:8a:53:9b:cd:d6:41:95:2d:b8:a6:9f: c6:33:c1:d7:f3:a6:be:2f:d6:9d:26:1d:31:2f:da:8d:d6:ff: be:c0:a4:92:ae:5a:58:b4:17:ea:da:99:a4:2b:e5:e8:26:da: ef:35:e1:3a:4f:89:e1:40:b9:f6:e4:2c:fe:1b:7d:88:49:a7: 35:44:03:a2:17:f8:36:c3:21:fa:6b:86:08:c1:6c:8f:2d:2f: 29:50:1b:71:2b:fe:45:b7:cb:5d:95:3c:d3:e2:79:48:d0:af: 5c:64:34:de:13:56:fc:2b:af:44:8b:a9:f2:7e:68:a3:25:f5: d4:e3:a4:80:32:1a:27:22:2d:e4:8e:ea:b1:3b:ab:d6:47:dd: 8d:bc:f1:c3:86:5c:eb:7c:38:90:70:60:f3:e4:52:d2:aa:4a: 23:59:ec:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0Y1QhDdaRLNAAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NDk1Y2M5MzUtMjczYS00MzNjLWJiZjUtNzAxMWIzNjQ4MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYREUc75J6LC7/ErqLkjEZbygCwxgiKbuUhJ SOb0tjiEyMQEH4nFXUl/bqPdY6VqWOI4F8Q3UmDGsdvPyHbPy4Uch6ol0q2gAsBf /smyXOei9pQgUm0qOsTSHjTG6uiv6eUX5gNdBkv+Zy+QAwhZb5kRmgYrVw607iNC CbmO4Ix/UunwEP5urFyAEnEYRfTW9sH29SYHZQ8WAOw7zsJ/O3LsjQYujMxDfFSp SO25N5oMZ5EGofY1kuZq67dpNolsIbWllThp4ah9T49VnxgtrD1f+5llO7XP1MG9 Sfi5FPv+FZvYSpGL2O0IHtQYNpPJvxT0C8H7maEbfVY9mpJm5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ/b7c9T2dQpBv18tQe/CqAENlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTYyM2U2NDUtNTk0YS0z OWI4LWIwMDQtZmUwMzE4OWY0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8sFLfsOElDVlK+I/tUAvgWNNnnmfw+EZCjmRLNU65NQ2C2GH9S6/X/ XCFnOelqaVAJly2sDudnptSfCCwFTc71/M85noKk5oo+Aps6zrmLzYoeIwg0FGG3 LZJvbs1qkXGKU5vN1kGVLbimn8Yzwdfzpr4v1p0mHTEv2o3W/77ApJKuWli0F+ra maQr5egm2u814TpPieFAufbkLP4bfYhJpzVEA6IX+DbDIfprhgjBbI8tLylQG3Er /kW3y12VPNPieUjQr1xkNN4TVvwrr0SLqfJ+aKMl9dTjpIAyGiciLeSO6rE7q9ZH 3Y288cOGXOt8OJBwYPPkUtKqSiNZ7CA= -----END CERTIFICATE-----Generated at Sun Jan 25 15:59:47 2026 by rpki-client