This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa File: 0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa (raw, json) Hash identifier: XQnR0bgRLTkRiTK8Vhe+hlfAnCm+UY5vXBNUPxFvjA8= Subject key identifier: 14:BB:0A:1D:3D:2D:70:D0:7B:7C:35:D7:8D:14:18:A8:F0:F9:24:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C751C135E02923D2061D3F480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.189.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:13:5e:02:92:3d:20:61:d3:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=47ba9c10-5c8d-4056-b1d0-8cb0333aac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:04:6c:b9:9b:e9:1a:0b:3b:a4:de:23:c8: 31:7f:08:c2:af:5c:84:33:53:6f:ed:28:40:d4:0c: f4:fc:69:7d:0a:d6:ac:40:6b:e5:3f:df:68:29:f6: dc:39:2a:72:d6:84:d1:16:55:5d:87:01:fb:34:ff: 86:b9:61:f0:3e:20:ab:0a:f2:66:4b:78:23:4f:c6: c4:06:4e:0f:3d:76:36:f0:e0:ab:08:89:16:9f:97: 8b:f3:87:9c:53:7c:08:f2:32:18:b9:75:9f:a1:80: 8d:aa:90:bc:4d:45:cd:5b:52:e5:af:1f:ae:61:e9: 3c:bc:11:6e:0e:0b:f3:ba:12:a9:40:25:d4:ac:2f: b5:3b:51:fe:ab:8d:ad:95:48:3b:e0:0a:16:5e:f1: ef:0a:06:d4:5e:0a:65:dd:47:94:e5:a3:5d:f4:23: da:43:5d:13:d9:7a:5a:fe:90:f5:14:ec:12:00:63: b5:39:29:80:c6:20:e4:a0:91:e0:17:b7:7d:48:74: ba:45:af:37:0b:0a:cf:a9:e6:49:d6:ac:7e:a7:1e: 27:93:29:e9:53:5e:0b:48:b0:cf:88:22:f3:75:bb: 9e:0d:fc:f6:f0:00:42:af:18:a0:05:67:aa:3a:12: c5:2b:47:d5:01:96:86:da:08:96:39:d3:43:23:22: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BB:0A:1D:3D:2D:70:D0:7B:7C:35:D7:8D:14:18:A8:F0:F9:24:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8e:18:6e:fa:9f:a2:c8:e3:54:2d:d4:4d:5e:64:b1:6e:f1: 23:72:5a:63:14:7d:76:14:de:e7:6c:1b:4f:df:a6:1f:b4:bd: fe:65:4f:bb:98:55:b5:af:2c:e8:b5:bf:fe:0e:c0:3e:b3:df: 76:cf:75:f0:b9:14:a9:9d:0d:bf:a7:db:47:93:96:4a:17:20: a3:c7:14:9c:d6:b1:75:2e:b1:86:ee:57:d7:c8:23:c2:f9:26: 77:f5:b9:58:91:bf:fc:a9:6c:5a:25:b9:9c:5a:5f:03:b6:71: 5e:b3:b5:22:09:e3:0f:17:43:30:b0:a3:6b:ad:fd:05:04:6f: 51:f0:27:07:2c:1d:2d:89:35:c8:8d:8d:34:b6:22:e9:a3:4f: f9:cf:1e:0f:21:02:73:29:6e:1c:c7:de:e0:14:77:57:78:74: 83:91:1e:b7:c2:19:b8:76:5e:10:d4:37:1b:33:02:db:48:72: bd:89:55:26:ea:29:5e:d1:0d:f1:7c:63:c0:a6:3c:33:e1:e7: 3e:73:42:de:2a:3d:e9:70:5c:8f:1d:80:c4:7c:07:e6:6c:61: f4:6b:e5:36:55:d3:36:15:53:93:28:a6:1d:be:10:9e:fc:a1: 47:5b:3f:3a:82:d3:60:84:8c:e0:9b:12:20:0a:28:4b:af:9b: 6b:b9:e3:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HBNeApI9IGHT9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk NDdiYTljMTAtNWM4ZC00MDU2LWIxZDAtOGNiMDMzM2FhYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD8EbLmb6RoLO6TeI8gxfwjCr1yEM1Nv7ShA 1Az0/Gl9CtasQGvlP99oKfbcOSpy1oTRFlVdhwH7NP+GuWHwPiCrCvJmS3gjT8bE Bk4PPXY28OCrCIkWn5eL84ecU3wI8jIYuXWfoYCNqpC8TUXNW1Llrx+uYek8vBFu DgvzuhKpQCXUrC+1O1H+q42tlUg74AoWXvHvCgbUXgpl3UeU5aNd9CPaQ10T2Xpa /pD1FOwSAGO1OSmAxiDkoJHgF7d9SHS6Ra83CwrPqeZJ1qx+px4nkynpU14LSLDP iCLzdbueDfz28ABCrxigBWeqOhLFK0fVAZaG2giWOdNDIyI0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS7Ch09LXDQe3w1140UGKjw+SRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQzMmYzZmMtODM4OC0z M2I3LTlmMjktMWYwZjRmNWIwNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqOGG76n6LI41Qt1E1eZLFu8SNyWmMUfXYU3udsG0/fph+0vf5lT7uY VbWvLOi1v/4OwD6z33bPdfC5FKmdDb+n20eTlkoXIKPHFJzWsXUusYbuV9fII8L5 Jnf1uViRv/ypbFoluZxaXwO2cV6ztSIJ4w8XQzCwo2ut/QUEb1HwJwcsHS2JNciN jTS2IumjT/nPHg8hAnMpbhzH3uAUd1d4dIORHrfCGbh2XhDUNxszAttIcr2JVSbq KV7RDfF8Y8CmPDPh5z5zQt4qPelwXI8dgMR8B+ZsYfRr5TZV0zYVU5Moph2+EJ78 oUdbPzqC02CEjOCbEiAKKEuvm2u54xc= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:17 2026 by rpki-client