This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa File: 2a4a1f38-23a1-3489-ac54-76169819c152.roa (raw, json) Hash identifier: cE/N6ZOK/Bprqq4bktPtkYziaui92blMJDXhw7gNDYA= Subject key identifier: 25:D9:63:0D:9D:55:7C:C7:E9:F5:03:A7:AE:1C:75:A0:56:37:C8:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C0B06372DF99B36BB1EC9C400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.23.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:37:2d:f9:9b:36:bb:1e:c9:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=d3371d2f-b1fc-414d-94c7-6cc88d82480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:c8:3f:26:09:b5:fa:7a:7f:20:df:14:e7: 7b:21:2d:b8:00:49:47:03:e0:35:07:1f:9d:3d:78: 9c:f4:af:a0:49:9e:36:a6:49:45:33:70:e2:38:61: cd:7d:17:00:91:c9:5e:d6:c8:ed:c5:b8:78:85:ae: 71:07:c4:d1:0a:46:8b:fd:52:77:bf:85:f0:66:9a: 4d:e8:0c:5f:68:b3:09:d4:ce:ec:0e:77:a6:b4:2b: bd:22:95:f6:37:26:1a:65:6c:d9:47:96:88:6e:34: d1:32:aa:52:62:d3:eb:95:2a:8a:c2:4f:93:7c:ac: 17:e2:65:16:f8:0c:6a:49:8e:77:da:0a:d2:89:05: f6:b1:5e:ac:59:4a:e6:8d:1f:0f:e4:0c:a6:4c:59: 64:7d:ea:42:51:4d:86:d0:2e:52:55:51:42:f6:16: 37:90:e5:c2:99:a1:eb:7c:6f:03:65:12:d4:3e:38: 24:32:44:09:ee:76:1f:3b:41:9c:ce:ff:df:58:30: 19:72:d8:3b:35:72:c2:90:c3:4a:da:1d:03:6a:32: a9:0b:b1:a0:ac:cc:8b:1a:51:36:d5:f6:1f:f8:bc: bf:75:57:b4:62:b9:e0:e3:99:54:c5:85:60:b6:08: 3a:e8:4e:3a:78:a5:3e:99:90:13:94:d5:48:84:ce: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:63:0D:9D:55:7C:C7:E9:F5:03:A7:AE:1C:75:A0:56:37:C8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:99:94:ec:1c:db:6c:fe:5e:44:dc:42:10:30:37:a9:c2:ca: 9d:0b:d5:5f:67:c8:c9:e7:51:92:26:89:ca:ee:20:40:69:d3: 4b:6e:ea:bb:05:ac:60:7d:cb:a2:17:0c:23:54:d4:ae:9b:7b: 43:e0:90:09:99:61:bb:19:6f:1d:c2:8d:a7:ba:fb:d7:5f:d7: 85:fa:b7:30:7b:62:1d:11:0d:a6:8d:ca:45:f4:9e:e4:74:f8: 3e:ca:69:26:04:83:a9:30:59:68:55:e0:5c:27:77:28:55:c6: 62:c3:47:c7:27:5d:9e:f5:89:2c:6a:37:e6:79:4b:99:2e:29: 2c:ac:bf:c3:69:38:81:95:3e:e4:ba:37:48:56:b1:72:b0:d4: 0b:cc:4d:d3:a0:0e:db:4c:74:9b:a4:ae:29:36:47:26:96:a0: e2:e2:bc:03:3c:ad:34:4c:c8:e6:b6:6d:41:5a:f4:3e:10:48: 48:32:23:0e:b3:b2:c1:72:f7:a2:ee:13:97:d1:78:47:94:1a: e2:d5:25:82:91:92:f7:cd:94:69:d2:ae:d5:4d:e2:0a:f8:cf: 40:99:73:4c:75:b8:51:4a:ec:55:41:17:a1:66:04:dd:28:6c: df:fc:b3:90:8c:66:6f:e2:57:d4:77:62:cd:eb:cf:43:45:bf: db:50:33:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjct+Zs2ux7JxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk ZDMzNzFkMmYtYjFmYy00MTRkLTk0YzctNmNjODhkODI0ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI/IPyYJtfp6fyDfFOd7IS24AElHA+A1Bx+d PXic9K+gSZ42pklFM3DiOGHNfRcAkcle1sjtxbh4ha5xB8TRCkaL/VJ3v4XwZppN 6AxfaLMJ1M7sDnemtCu9IpX2NyYaZWzZR5aIbjTRMqpSYtPrlSqKwk+TfKwX4mUW +AxqSY532grSiQX2sV6sWUrmjR8P5AymTFlkfepCUU2G0C5SVVFC9hY3kOXCmaHr fG8DZRLUPjgkMkQJ7nYfO0Gczv/fWDAZctg7NXLCkMNK2h0DajKpC7GgrMyLGlE2 1fYf+Ly/dVe0Yrng45lUxYVgtgg66E46eKU+mZATlNVIhM5PoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXZYw2dVXzH6fUDp64cdaBWN8h3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0YTFmMzgtMjNhMS0z NDg5LWFjNTQtNzYxNjk4MTljMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaZlOwc22z+XkTcQhAwN6nCyp0L1V9nyMnnUZImicruIEBp00tu6rsF rGB9y6IXDCNU1K6be0PgkAmZYbsZbx3Cjae6+9df14X6tzB7Yh0RDaaNykX0nuR0 +D7KaSYEg6kwWWhV4FwndyhVxmLDR8cnXZ71iSxqN+Z5S5kuKSysv8NpOIGVPuS6 N0hWsXKw1AvMTdOgDttMdJukrik2RyaWoOLivAM8rTRMyOa2bUFa9D4QSEgyIw6z ssFy96LuE5fReEeUGuLVJYKRkvfNlGnSrtVN4gr4z0CZc0x1uFFK7FVBF6FmBN0o bN/8s5CMZm/iV9R3Ys3rz0NFv9tQM6Y= -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:25 2025 by rpki-client