This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa
File: 38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa (raw, json)
Hash identifier: OuyheIr4b2lDsmFwktpy3NuWJ/58ry8wVofwSSh3KA0=
Subject key identifier: 6F:D9:01:AE:3E:F1:5C:8A:54:CB:FC:A5:BB:AE:44:3F:15:5B:00:62
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C0B06367FED682E9035E91D88
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 7029
IP address blocks: 98.21.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:36:7f:ed:68:2e:90:35:e9:1d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=b33dadf4-0a5b-44ab-8cb2-f3696a18e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:1e:83:8a:06:13:0f:d3:d6:9a:0b:50:7a:
70:a6:62:ab:f8:02:79:ea:b9:60:11:69:e9:c0:86:
72:a6:c5:98:75:c4:b1:24:9e:73:57:1d:08:dd:13:
67:5e:82:b6:bd:c5:e7:ae:09:5d:4b:86:bb:01:6c:
ad:65:fd:bf:52:a9:22:69:1e:5c:be:dd:b0:74:c1:
ba:be:04:a9:4d:56:7a:c1:18:c1:1d:06:d9:a1:08:
f6:a7:aa:03:ab:d4:f8:e7:d6:a6:a4:e2:5a:37:74:
ec:bd:74:e5:a6:37:92:03:4a:ac:e9:41:54:9c:d3:
21:c4:af:f6:01:eb:4c:3e:49:f5:b7:43:bf:fb:68:
53:71:a9:13:bf:74:f1:7b:cc:2d:22:bd:9d:41:e3:
82:de:a0:77:38:8b:be:12:05:f4:c0:a6:53:ad:0e:
e5:a0:e4:9a:1a:ae:8d:4e:e6:3c:44:6d:a9:d0:6f:
f9:31:12:dc:f6:b2:6c:0b:1c:82:e8:04:4c:e4:e4:
71:2f:d7:8e:db:b2:6b:60:bb:7c:a6:bc:6e:b5:d6:
cf:7c:3f:4a:82:3a:1a:3a:22:43:6a:9e:83:e7:68:
83:e3:53:ff:38:24:97:b6:bd:13:a0:91:e9:ee:9c:
dd:36:10:62:25:ed:c3:20:1c:c7:d7:07:d6:4e:b2:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:01:AE:3E:F1:5C:8A:54:CB:FC:A5:BB:AE:44:3F:15:5B:00:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:7f:08:5e:ee:70:d8:56:99:96:c4:90:10:6b:cd:c2:b9:ba:
ae:3c:2a:1b:0f:b5:ce:76:dd:8e:19:b1:5a:3a:40:ab:92:15:
aa:f8:30:e4:50:15:20:36:08:60:80:20:09:cb:8c:3b:49:a6:
97:60:6e:e8:58:b9:d5:80:e2:b9:3f:a1:ab:ac:87:bc:e6:30:
ab:d5:a1:71:b1:60:f3:6b:d7:68:67:46:9d:bf:cd:8c:e0:23:
36:ea:e4:49:84:2c:ee:61:7c:32:d9:24:eb:45:ef:f9:06:ba:
63:8a:8f:b4:09:64:e2:37:ff:f1:f3:81:fd:c3:1a:a2:49:ba:
58:9c:53:b9:e8:d1:42:5b:86:1d:bc:70:52:42:42:c3:d7:b3:
23:dd:54:92:45:37:6b:2b:64:8a:36:c7:80:a3:fa:13:7e:1f:
19:02:3c:15:12:c3:a6:12:55:5b:49:ce:a5:43:d1:ac:df:32:
33:36:ae:8e:5d:56:b6:e5:32:7a:44:6a:76:31:2b:f9:22:af:
75:ce:b2:a2:18:e1:f8:61:cf:6a:ee:63:ac:15:be:f2:23:a1:
97:99:96:f5:6e:77:82:15:b4:3a:db:87:03:02:b2:44:12:62:
e8:2e:22:71:0d:28:72:46:c6:ce:40:54:68:30:25:bb:ed:e3:
1e:fe:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:09:50 2025 by rpki-client