This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa File: 84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa (raw, json) Hash identifier: 4nStBjCze+iSxcchnxXOb0KVvUU8NWqtlT9X0gssPFA= Subject key identifier: 3D:AA:B5:64:BF:4B:59:F1:4F:1D:E4:7C:96:37:D2:C1:F8:DC:B4:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C0B063576E3E33174B1AA0C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.17.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:35:76:e3:e3:31:74:b1:aa:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=98b3d598-e133-4f7e-8456-e846b8855a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:75:26:13:aa:ad:6c:23:b2:01:ef:9f:4f: a8:17:7c:a9:81:f3:f6:6a:13:7f:52:c0:31:61:74: e0:80:af:76:cc:b2:9b:62:9f:bf:69:5b:fc:df:b4: 5c:1d:43:f8:3a:60:36:60:c6:01:41:32:6b:0d:68: 3b:bf:13:7b:77:30:f2:71:1c:be:59:ca:cd:df:46: db:64:9d:ac:3d:cf:ce:f2:5e:82:3a:fd:c7:44:81: 68:28:0c:69:3c:eb:4e:ed:71:60:24:46:82:57:69: e4:df:f6:b8:6c:2a:9b:fa:f8:c5:83:a1:e3:df:31: ec:42:bc:ff:2b:5e:1d:f2:88:d7:e0:eb:ba:6a:e3: 53:77:0b:61:17:20:47:13:46:5c:91:e4:b9:19:fe: b1:f6:b2:aa:c2:37:d4:f6:e1:6e:59:fa:0c:7b:9c: ec:3b:7f:3a:30:a0:6c:1a:68:ed:5a:41:ea:1e:d7: 44:7c:98:e2:cd:47:0a:e7:6a:1c:1f:a9:92:cf:07: ff:64:42:5e:53:d4:f1:fb:eb:d4:ce:5b:7e:12:09: a3:15:f5:f1:d1:a7:dc:4d:1b:9a:b2:2d:45:dd:f9: d8:65:db:c1:e4:06:2d:c9:12:58:90:ee:6b:27:75: d4:91:d6:a1:76:6b:c9:97:5d:26:8d:e9:2f:30:0c: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:B5:64:BF:4B:59:F1:4F:1D:E4:7C:96:37:D2:C1:F8:DC:B4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:dd:09:5b:23:9b:d0:b9:d9:c8:12:59:72:4f:dc:f9:69:14: fd:02:22:47:12:55:6a:e4:f9:42:3f:13:1c:45:2c:29:47:19: 5c:27:e4:a6:3f:10:85:3a:7d:b8:1b:0a:70:31:52:1f:68:86: d7:e6:54:e8:fb:64:9f:de:b7:b6:4f:ce:8e:50:c4:b0:f8:a5: d4:af:21:29:ff:9f:e7:96:34:aa:c9:98:bb:61:fe:f5:18:90: 5d:4b:d1:04:e1:09:ba:12:5d:eb:9c:0a:8a:16:a0:3f:fd:e0: 97:1f:3e:ed:fc:88:d6:d3:e7:32:f7:04:91:87:ff:b5:8d:3e: 46:90:02:9b:66:3f:a2:27:3b:d8:58:65:38:63:75:f3:90:ee: 0e:d0:17:e6:5c:ac:6f:76:27:a9:04:b4:4f:cc:86:e7:e4:25: 56:84:98:70:45:4d:3f:71:11:d6:1f:8c:bd:df:83:88:a5:14: 17:ab:36:bc:2f:e3:3a:8d:76:fb:4b:0a:32:ae:07:75:58:95: b4:01:ac:a6:31:a0:ba:82:0a:25:cc:ff:28:06:85:de:b3:32: 2b:b2:77:54:90:93:ce:80:d5:8f:84:86:6e:48:f6:12:42:00: 04:b8:e5:19:ce:1b:d5:cc:e7:ec:b7:fa:3b:52:c2:47:e4:32: d0:6c:c3:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjV24+MxdLGqDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk OThiM2Q1OTgtZTEzMy00ZjdlLTg0NTYtZTg0NmI4ODU1YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqJ1JhOqrWwjsgHvn0+oF3ypgfP2ahN/UsAx YXTggK92zLKbYp+/aVv837RcHUP4OmA2YMYBQTJrDWg7vxN7dzDycRy+WcrN30bb ZJ2sPc/O8l6COv3HRIFoKAxpPOtO7XFgJEaCV2nk3/a4bCqb+vjFg6Hj3zHsQrz/ K14d8ojX4Ou6auNTdwthFyBHE0ZckeS5Gf6x9rKqwjfU9uFuWfoMe5zsO386MKBs GmjtWkHqHtdEfJjizUcK52ocH6mSzwf/ZEJeU9Tx++vUzlt+EgmjFfXx0afcTRua si1F3fnYZdvB5AYtyRJYkO5rJ3XUkdahdmvJl10mjekvMAyClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2qtWS/S1nxTx3kfJY30sH43LR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRiOTM4YjAtMmIzYy0z OGQwLWJkMzAtOGU2Mjc3ZmQ1YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7dCVsjm9C52cgSWXJP3PlpFP0CIkcSVWrk+UI/ExxFLClHGVwn5KY/ EIU6fbgbCnAxUh9ohtfmVOj7ZJ/et7ZPzo5QxLD4pdSvISn/n+eWNKrJmLth/vUY kF1L0QThCboSXeucCooWoD/94JcfPu38iNbT5zL3BJGH/7WNPkaQAptmP6InO9hY ZThjdfOQ7g7QF+ZcrG92J6kEtE/MhufkJVaEmHBFTT9xEdYfjL3fg4ilFBerNrwv 4zqNdvtLCjKuB3VYlbQBrKYxoLqCCiXM/ygGhd6zMiuyd1SQk86A1Y+Ehm5I9hJC AAS45RnOG9XM5+y3+jtSwkfkMtBsw6w= -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:47 2025 by rpki-client