This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa File: a2405e16-c99d-31e3-9565-9a6a7df814ed.roa (raw, json) Hash identifier: roRw1NiJWC0R6T7xkfCFhKwHbOQvoH1b9Ipjd0QgaVo= Subject key identifier: 54:7E:1C:81:60:E0:FB:79:D4:A5:83:00:15:45:76:43:9C:75:4C:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C0B0633864B040A79F315F440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.20.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:33:86:4b:04:0a:79:f3:15:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=fa5e2822-bb1c-4981-a0cf-03594af1f499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:30:78:25:53:f2:21:ca:25:6c:59:47:d8: 2d:d0:a1:67:79:ce:f0:b1:34:6a:be:ee:50:c5:89: 16:33:94:6f:ad:54:ca:fb:d3:c5:08:1e:c0:9b:df: 1e:0b:0e:15:80:36:2e:a0:d9:5d:3f:4c:54:b0:01: d6:f0:9a:66:43:7f:00:65:ab:61:d2:0a:0a:15:40: 93:a7:ae:64:ff:5b:6c:08:9c:d4:b9:e9:dc:ac:19: 78:0a:c3:68:9c:da:f0:84:55:88:90:61:f8:37:e3: 78:0d:bf:58:dc:15:5f:a9:f9:a0:24:4a:be:b6:ef: 3b:31:d8:8c:25:dc:90:22:e8:6c:06:a3:b8:9e:55: 31:ba:ea:b1:96:77:a6:b6:99:60:b3:80:c9:e9:f0: e5:68:27:88:17:13:80:3b:1b:cf:56:1f:80:08:6d: ae:16:32:9c:58:ea:d5:33:48:87:9e:20:f4:30:be: 57:ba:58:3c:fb:71:87:01:14:f4:08:a5:44:88:8e: 60:c1:b4:30:69:81:f4:57:58:05:e1:cf:0f:0e:2b: e1:cb:3d:f6:2c:4b:e7:65:c1:95:fc:c8:ba:28:7d: 46:dd:d2:ef:90:12:e6:88:6f:c6:68:89:a1:a9:12: 07:3c:80:f2:c0:57:a8:ab:c6:3c:57:ec:99:ea:d4: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7E:1C:81:60:E0:FB:79:D4:A5:83:00:15:45:76:43:9C:75:4C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:62:e4:bd:fc:b0:ec:3a:89:d9:11:f9:11:10:25:da:07:d7: 26:9d:f7:20:a0:ed:02:e6:3a:82:88:eb:55:3f:a2:97:f8:4d: 3f:5d:14:bc:c2:b1:ff:4a:8d:19:8e:5d:25:46:83:8c:f9:c6: f4:b1:9c:a2:b0:2e:2e:d4:5b:4f:5d:a5:32:7d:36:fe:03:e2: 9d:fc:cc:1a:48:46:5f:7a:79:e7:65:bd:9d:23:d4:a1:65:02: 5b:88:a7:98:19:83:f8:63:5c:bf:ad:31:3a:7e:dd:3e:55:f7: 94:15:bb:c8:97:02:98:88:2d:13:7f:87:bc:02:ff:6b:cf:4d: 89:19:36:0a:44:3d:75:80:01:27:75:d8:2e:ac:fc:97:e7:e4: 17:6a:04:51:57:6d:38:c5:3c:d2:03:f8:da:9e:a9:7d:0c:0a: 64:e6:3a:db:f7:91:f5:fc:84:97:67:03:8f:3d:d6:5b:c2:18: 47:16:d1:d6:4c:01:99:87:96:35:e9:91:8b:6e:ea:3a:e0:d2: 86:c9:82:fa:93:7e:a8:20:a4:44:97:9c:5d:17:3b:e6:c0:06: a7:b0:a5:57:92:45:6f:79:44:19:14:ba:97:c6:d0:50:9b:22: 20:31:77:03:b8:e7:f2:30:1a:95:97:6c:ba:9c:c8:a4:ba:99: 02:15:4c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjOGSwQKefMV9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk ZmE1ZTI4MjItYmIxYy00OTgxLWEwY2YtMDM1OTRhZjFmNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJcweCVT8iHKJWxZR9gt0KFnec7wsTRqvu5Q xYkWM5RvrVTK+9PFCB7Am98eCw4VgDYuoNldP0xUsAHW8JpmQ38AZath0goKFUCT p65k/1tsCJzUuencrBl4CsNonNrwhFWIkGH4N+N4Db9Y3BVfqfmgJEq+tu87MdiM JdyQIuhsBqO4nlUxuuqxlnemtplgs4DJ6fDlaCeIFxOAOxvPVh+ACG2uFjKcWOrV M0iHniD0ML5Xulg8+3GHART0CKVEiI5gwbQwaYH0V1gF4c8PDivhyz32LEvnZcGV /Mi6KH1G3dLvkBLmiG/GaImhqRIHPIDywFeoq8Y8V+yZ6tRtBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR+HIFg4Pt51KWDABVFdkOcdUy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI0MDVlMTYtYzk5ZC0z MWUzLTk1NjUtOWE2YTdkZjgxNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJi5L38sOw6idkR+REQJdoH1yad9yCg7QLmOoKI61U/opf4TT9dFLzC sf9KjRmOXSVGg4z5xvSxnKKwLi7UW09dpTJ9Nv4D4p38zBpIRl96eedlvZ0j1KFl AluIp5gZg/hjXL+tMTp+3T5V95QVu8iXApiILRN/h7wC/2vPTYkZNgpEPXWAASd1 2C6s/Jfn5BdqBFFXbTjFPNID+NqeqX0MCmTmOtv3kfX8hJdnA4891lvCGEcW0dZM AZmHljXpkYtu6jrg0obJgvqTfqggpESXnF0XO+bABqewpVeSRW95RBkUupfG0FCb IiAxdwO45/IwGpWXbLqcyKS6mQIVTEY= -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:33 2025 by rpki-client