This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa
File: c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa (raw, json)
Hash identifier: hFCLFjk6z4gk8duKODt+ffiA78Lw75OHeLrdu8+/Zv8=
Subject key identifier: D9:44:84:F9:CE:9F:F6:91:84:6F:A1:D2:7F:78:3E:77:82:05:E8:89
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584C0B0636A18ACC7249FA79DB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 7029
IP address blocks: 98.22.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 09 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:36:a1:8a:cc:72:49:fa:79:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=83612670-33bb-4897-923a-6c1c5f34f191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:0f:31:c8:ab:22:af:e9:48:ce:74:ac:45:
62:14:79:2f:52:96:93:d5:ed:63:3a:a0:cb:41:84:
8d:b3:f0:2f:51:bd:7d:b3:85:49:3c:09:57:07:94:
be:4b:cd:ad:95:00:e7:07:5d:06:cd:f9:de:78:d9:
7e:77:01:cc:a2:f4:cc:de:83:08:09:59:05:88:52:
49:b7:72:b7:14:dd:eb:e1:9b:f4:e4:77:ab:50:56:
37:99:99:eb:1d:49:77:2a:f9:d2:12:40:12:59:a5:
4e:9a:b4:0b:10:da:83:71:72:b2:f6:ba:fb:0b:25:
3e:2a:8b:6f:31:e9:d5:a9:1e:5f:8a:99:3b:e4:69:
46:04:83:ba:3c:83:b8:e2:2f:e5:6e:bc:18:1e:8d:
0f:a2:9b:b2:6a:97:64:c5:0f:c9:b2:13:43:f5:b7:
bf:e0:98:10:6d:90:82:78:32:8a:53:20:c7:f3:26:
0c:c0:bc:d5:dd:b1:8a:fe:dd:1b:54:e9:47:8e:c7:
d4:d2:d1:b3:c3:45:7b:33:be:38:40:1c:b3:c7:df:
86:f9:78:be:09:a3:78:94:a9:00:74:f1:a1:3b:cf:
02:a6:38:dd:b8:a7:61:49:b2:90:4f:15:8b:8b:4a:
23:4f:ad:1f:39:28:7a:a1:ca:24:05:d3:aa:f7:b1:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:84:F9:CE:9F:F6:91:84:6F:A1:D2:7F:78:3E:77:82:05:E8:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fc:97:36:f3:54:cd:2b:4a:da:eb:e5:1c:38:bb:d3:b8:70:
b9:c8:ca:10:e7:d9:08:63:a0:df:7e:6f:2b:0a:12:bd:af:8c:
60:d9:50:6e:14:e0:14:1e:a5:bc:ba:d1:9d:56:de:88:26:24:
3a:9a:00:1b:be:18:69:11:66:54:8c:b0:6b:bf:6a:4b:42:14:
b8:34:75:83:49:66:ac:fb:62:77:46:94:99:05:48:80:71:e8:
ff:18:d7:db:99:74:6d:6d:0b:45:c0:40:f1:2a:91:79:aa:f1:
03:01:98:dc:f2:a5:96:38:d3:bd:cc:e8:da:83:d0:e9:e9:63:
57:9f:61:b0:9d:35:21:35:8f:a2:00:38:b0:d8:74:f0:88:f9:
83:aa:0a:e8:01:78:6d:94:48:13:a9:93:cd:4e:48:3b:a6:6f:
fb:14:64:b1:d7:e8:e0:8e:28:6b:bf:22:1e:a1:55:b6:11:1e:
5d:7e:ab:69:c2:78:00:82:0c:0a:0a:75:ff:c5:2f:73:e7:43:
8f:c0:d3:6a:19:99:c1:cc:8d:8e:82:e0:63:bc:1d:79:19:b0:
15:4d:a9:e3:e2:34:7d:83:96:38:74:b7:56:71:48:f1:22:b7:
72:08:fd:c9:fa:be:95:ad:98:6c:65:9b:38:1c:c5:6f:71:f8:
50:52:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:59:12 2025 by rpki-client