This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa File: 9e584fb4-55e6-349d-a4a2-854550eeff65.roa (raw, json) Hash identifier: XSKn5t9eZiDzKR1tjnZsPI3HRUIR8FqFNvGBCKxQ0gA= Subject key identifier: 5C:6E:EF:B8:69:60:77:05:01:BE:D6:0B:C7:AD:BF:6C:53:C5:3F:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C4E069710EC9B658D4A6F6BD9 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:97:10:ec:9b:65:8d:4a:6f:6b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=c4291c57-3b9d-4b15-a69f-5fb1196d44d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:1f:d0:16:6d:2e:55:55:2b:ab:84:55:47: 03:c7:cc:59:af:35:40:4e:be:fb:c9:c2:e5:c7:6d: 94:fd:9b:f3:b9:8a:c8:01:e8:77:b4:4a:7c:83:5d: 71:a0:ca:f2:32:a3:4a:68:84:4c:f5:90:4c:be:a9: a8:db:f9:e2:f6:c3:57:5d:9b:2d:e6:e7:45:1b:75: 8e:97:77:d9:ec:fb:a3:c3:2e:f2:36:06:ad:56:b4: 55:f8:c0:fd:9c:68:7b:74:0a:5b:0a:9c:bb:19:2a: 64:aa:38:41:ca:ec:d9:16:04:66:a2:c9:6c:52:18: 5d:a6:36:91:ef:4f:50:f7:25:fb:48:50:49:25:97: 07:9f:33:ee:df:0b:4e:a6:91:3b:57:9d:a8:0a:04: 3a:7c:f8:98:70:fb:6a:e8:f3:4c:bc:ac:17:52:4e: 20:15:bf:a5:6f:e4:51:66:26:41:5e:7e:da:11:f8: 18:c1:05:39:c2:80:00:f4:e7:56:a6:39:37:14:6a: e9:1d:66:c3:65:02:e2:b3:3a:e9:2c:27:a9:4e:ac: 5c:fb:3e:34:7b:69:ee:26:d2:50:47:7b:0b:77:97: bb:9e:bf:a9:a4:ae:92:e3:0d:64:48:a1:b4:98:62: 6e:0c:8b:51:0a:2e:07:8b:10:3a:f9:26:7f:62:97: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6E:EF:B8:69:60:77:05:01:BE:D6:0B:C7:AD:BF:6C:53:C5:3F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:90:fb:8b:8c:52:ed:d9:0c:f8:63:c1:dc:1b:5d:d3:4f:ec: 37:11:36:1b:e7:6f:95:31:b9:e9:5b:d5:70:6e:1e:99:45:ec: 34:c5:a5:cf:b3:0d:1c:02:d4:31:cd:4a:b5:2a:de:4c:bc:3c: ff:3e:65:31:1f:a6:3b:0b:76:a3:2e:a8:9b:72:a6:87:ae:48: cd:39:82:3c:0f:74:ac:8f:66:d1:0d:13:b1:b1:7f:6e:ff:5a: 3a:67:f4:ee:72:ed:11:ef:30:8c:ec:53:63:fa:50:8b:47:87: b1:e7:7e:14:64:d3:e3:0b:90:9d:e6:bf:7d:44:c4:7d:7c:f2: 0b:21:fb:cf:9f:12:68:d3:ac:9d:74:ae:b3:c5:6c:49:ee:c6: 3e:48:6f:88:14:40:9b:07:31:73:a2:e9:0c:f8:e3:47:44:03: 91:5d:0c:65:b7:65:c1:8d:45:a9:0e:77:fc:1d:68:78:cd:46: af:72:0b:2a:63:0c:55:21:aa:46:97:5c:42:0b:b2:7b:d5:45: 06:d9:31:e9:98:fd:35:cc:fe:33:3f:75:25:1c:69:2f:c3:6c: d0:2c:c7:5c:33:7c:d9:41:31:e4:85:8f:70:be:64:33:74:78: c7:44:35:71:c8:a1:21:a8:4a:c0:af:29:bb:ad:e5:a3:90:06: 99:b3:22:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBpcQ7JtljUpva9kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk YzQyOTFjNTctM2I5ZC00YjE1LWE2OWYtNWZiMTE5NmQ0NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOMf0BZtLlVVK6uEVUcDx8xZrzVATr77ycLl x22U/ZvzuYrIAeh3tEp8g11xoMryMqNKaIRM9ZBMvqmo2/ni9sNXXZst5udFG3WO l3fZ7Pujwy7yNgatVrRV+MD9nGh7dApbCpy7GSpkqjhByuzZFgRmoslsUhhdpjaR 709Q9yX7SFBJJZcHnzPu3wtOppE7V52oCgQ6fPiYcPtq6PNMvKwXUk4gFb+lb+RR ZiZBXn7aEfgYwQU5woAA9OdWpjk3FGrpHWbDZQLiszrpLCepTqxc+z40e2nuJtJQ R3sLd5e7nr+ppK6S4w1kSKG0mGJuDItRCi4HixA6+SZ/Ypc1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxu77hpYHcFAb7WC8etv2xTxT9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWU1ODRmYjQtNTVlNi0z NDlkLWE0YTItODU0NTUwZWVmZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqQ+4uMUu3ZDPhjwdwbXdNP7DcRNhvnb5Uxuelb1XBuHplF7DTFpc+z DRwC1DHNSrUq3ky8PP8+ZTEfpjsLdqMuqJtypoeuSM05gjwPdKyPZtENE7Gxf27/ Wjpn9O5y7RHvMIzsU2P6UItHh7HnfhRk0+MLkJ3mv31ExH188gsh+8+fEmjTrJ10 rrPFbEnuxj5Ib4gUQJsHMXOi6Qz440dEA5FdDGW3ZcGNRakOd/wdaHjNRq9yCypj DFUhqkaXXEILsnvVRQbZMemY/TXM/jM/dSUcaS/DbNAsx1wzfNlBMeSFj3C+ZDN0 eMdENXHIoSGoSsCvKbut5aOQBpmzIlk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:36:21 2026 by rpki-client