This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa File: 3291ce7e-1c70-365c-8047-a30a9edf18a4.roa (raw, json) Hash identifier: v6csxlr292TiineQSWZAhfZRqUGhemOUbAZ/LTpopvs= Subject key identifier: 53:4D:6D:A5:4E:25:30:42:EF:59:A4:9B:AB:C5:86:B7:87:C8:7F:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C1FF629FC830E3B9B541FF680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 98.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:29:fc:83:0e:3b:9b:54:1f:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=3bcd1082-c7bf-417b-b43f-7ffced4d821d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:c6:93:ca:b4:c3:a0:4b:81:c2:dd:21:93: 84:f5:39:14:1a:58:da:b0:b7:42:56:ff:e3:03:d2: 80:e8:96:f2:ff:b9:64:6b:50:64:fc:71:cd:2f:90: b2:f0:a8:26:99:07:2b:5b:03:5c:dc:a3:98:51:b8: d5:77:b0:41:30:9c:a6:21:0d:51:43:77:03:b7:00: de:29:45:8c:3e:ba:93:e3:4a:e2:13:36:32:9b:38: b2:bf:9a:7f:fd:79:3b:12:87:e7:13:32:06:4b:eb: 1f:9e:46:93:20:54:9a:e5:2e:08:55:f4:e1:18:90: 1b:90:bc:02:28:33:10:50:5b:95:10:40:4f:74:29: 7f:ce:40:26:85:a4:7f:eb:f6:6b:63:5e:08:2f:7f: e0:1c:98:47:32:fd:83:8b:ed:00:de:e0:0d:b5:1a: 96:c8:7b:d9:80:aa:c6:66:3c:e5:71:a8:fd:77:2b: 97:84:88:70:67:da:57:0f:55:e8:a7:66:b0:09:5f: d5:6c:2e:3f:bb:a6:e1:08:b1:39:e1:71:a3:58:29: 3d:8d:fb:ad:77:7a:d2:5a:a3:d4:b4:55:79:57:9e: 5a:3f:0d:0e:a4:82:7b:30:55:ea:38:4d:81:96:ef: 22:0f:92:27:8c:8f:d2:36:bc:51:9d:7f:93:d8:65: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:6D:A5:4E:25:30:42:EF:59:A4:9B:AB:C5:86:B7:87:C8:7F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b2:a0:53:d1:86:2d:38:b7:59:c3:15:a3:39:8c:60:0c:e2: 45:ff:0c:95:0d:67:0f:2a:16:04:18:17:54:7b:25:a9:dc:2a: b1:8d:9c:a5:75:30:cf:7d:5b:30:d6:3e:34:bf:b1:74:a5:d9: 42:91:51:26:f9:b1:0d:e9:95:65:be:21:99:e8:e5:3a:15:53: e5:ba:9d:1d:18:3e:fe:92:df:c6:19:1e:7d:31:2c:97:37:c2: 41:56:77:8b:0e:e1:18:bb:78:c0:63:65:98:35:6e:77:f4:e2: 07:68:9a:29:a2:45:b7:01:56:a6:20:e4:33:0e:d3:f7:62:2b: 36:85:10:ff:b2:eb:3d:40:df:b0:c4:e4:11:0a:e1:9f:45:99: 49:53:80:20:77:3c:d8:f2:e2:7f:3a:a6:0b:07:4f:f2:68:e0: ac:ec:ab:a6:95:67:9f:ac:3a:45:1e:b0:a9:ca:26:d6:d0:1f: 36:d6:33:ac:9d:96:74:78:8c:3e:36:3d:4f:73:31:d8:92:aa: fa:3a:81:b5:63:7d:75:a3:7f:45:ff:21:e9:bc:bf:18:a7:52: bf:78:a9:8f:c4:ab:2f:ba:ec:14:95:d1:78:97:06:9e:61:a1: cc:cd:5d:33:f7:70:26:75:60:3a:df:3e:37:80:8d:16:c8:27: 08:60:8f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9in8gw47m1Qf9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk M2JjZDEwODItYzdiZi00MTdiLWI0M2YtN2ZmY2VkNGQ4MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIDGk8q0w6BLgcLdIZOE9TkUGljasLdCVv/j A9KA6Jby/7lka1Bk/HHNL5Cy8KgmmQcrWwNc3KOYUbjVd7BBMJymIQ1RQ3cDtwDe KUWMPrqT40riEzYymziyv5p//Xk7EofnEzIGS+sfnkaTIFSa5S4IVfThGJAbkLwC KDMQUFuVEEBPdCl/zkAmhaR/6/ZrY14IL3/gHJhHMv2Di+0A3uANtRqWyHvZgKrG Zjzlcaj9dyuXhIhwZ9pXD1Xop2awCV/VbC4/u6bhCLE54XGjWCk9jfutd3rSWqPU tFV5V55aPw0OpIJ7MFXqOE2Blu8iD5InjI/SNrxRnX+T2GWRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNNbaVOJTBC71mkm6vFhreHyH+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5MWNlN2UtMWM3MC0z NjVjLTgwNDctYTMwYTllZGYxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOyoFPRhi04t1nDFaM5jGAM4kX/DJUNZw8qFgQYF1R7JancKrGNnKV1 MM99WzDWPjS/sXSl2UKRUSb5sQ3plWW+IZno5ToVU+W6nR0YPv6S38YZHn0xLJc3 wkFWd4sO4Ri7eMBjZZg1bnf04gdomimiRbcBVqYg5DMO0/diKzaFEP+y6z1A37DE 5BEK4Z9FmUlTgCB3PNjy4n86pgsHT/Jo4Kzsq6aVZ5+sOkUesKnKJtbQHzbWM6yd lnR4jD42PU9zMdiSqvo6gbVjfXWjf0X/Iem8vxinUr94qY/Eqy+67BSV0XiXBp5h oczNXTP3cCZ1YDrfPjeAjRbIJwhgj3w= -----END CERTIFICATE-----Generated at Thu Dec 18 07:16:10 2025 by rpki-client