This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/054a29dc-6807-31ad-8d8a-43f195d0d97e.roa File: 054a29dc-6807-31ad-8d8a-43f195d0d97e.roa (raw, json) Hash identifier: 1u3LdxM8JfWG1dSrEqrELDI6uhg/w7EcHkisPMt2aRM= Subject key identifier: 59:FF:42:2E:F9:D4:0C:04:5F:64:D6:D6:75:64:ED:8A:EF:D6:6B:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D18194B7711A9171D17D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/054a29dc-6807-31ad-8d8a-43f195d0d97e.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 209.113.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:81:94:b7:71:1a:91:71:d1:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=a964a632-ba68-4c10-83e8-8e6a8cfb7452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:17:69:11:71:d6:36:f9:67:04:9c:af:f4:ad: 5f:a1:c0:60:b9:26:fc:11:ea:4a:ae:eb:f3:bb:f8: 45:ab:ae:71:79:71:6a:b2:ce:40:70:59:be:b7:98: 2b:fb:ee:a5:dc:ef:63:26:79:56:29:70:90:aa:2c: 71:95:00:1c:da:fa:69:a0:66:53:25:54:c9:84:dc: 1e:33:07:dd:ff:2b:63:19:cb:d9:45:78:19:9a:f6: 21:3b:17:21:ac:dc:d5:dd:58:e9:04:2a:06:36:51: 51:26:06:df:79:cf:9e:e9:df:a3:b5:35:ae:1e:dc: 96:b5:25:dd:fb:bb:e4:03:20:1e:85:18:85:7b:9d: 5b:eb:04:0c:17:bb:71:d0:25:07:5a:1b:b7:af:7f: 99:92:8c:1e:ec:da:7d:4e:6c:f2:df:a5:b0:14:ab: 26:a8:92:64:78:89:7c:c2:7b:1f:2f:52:24:1a:bc: b3:5a:0c:c1:46:43:01:45:52:67:a5:f6:1d:02:97: d0:c3:08:57:42:86:5e:61:44:b3:1a:1f:7f:78:b4: f8:f5:0f:7c:87:5c:c0:b4:56:4e:90:2a:83:5a:d1: 7d:00:49:b7:e6:5e:a0:97:f1:92:4f:d2:b2:3e:41: 7a:b8:a5:42:f3:e4:75:3e:bd:cd:d2:ed:28:97:77: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:42:2E:F9:D4:0C:04:5F:64:D6:D6:75:64:ED:8A:EF:D6:6B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/054a29dc-6807-31ad-8d8a-43f195d0d97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.113.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:65:94:61:c8:75:eb:25:64:ac:7b:c8:32:0b:c2:31:bf:c5: fc:42:e7:f6:ad:13:fd:81:bf:81:05:ea:a4:87:18:ea:a4:bf: 09:bf:13:29:5b:78:19:46:20:8d:f1:14:f6:f6:9d:08:48:a3: c1:cf:70:ca:bd:27:b6:a9:77:85:94:8c:57:ba:ba:d5:95:d5: b1:d8:08:cf:e6:b8:84:46:c7:24:e0:ee:a1:71:e0:00:af:d7: 05:79:38:54:6e:89:14:93:4d:d6:0d:b4:82:25:d0:ae:3f:75: 14:6a:ba:14:58:94:2b:af:04:0b:08:0b:51:8b:25:50:97:9c: 96:c4:02:4a:4b:a8:e7:a0:b1:b7:ca:cc:ec:5d:06:a5:9c:cc: 68:cb:8e:b4:d4:d6:f5:4b:ee:97:95:d7:be:dc:19:1f:46:03: 71:3d:ad:b1:92:8f:a5:43:ae:35:29:ff:d2:30:a3:3c:13:a5: de:57:75:68:34:5a:3a:47:65:1c:e0:04:c3:42:20:94:10:6a: 0c:66:86:86:58:a2:6e:87:02:65:81:64:05:60:a3:89:00:e3: de:97:f2:b5:80:b3:11:96:a2:ef:46:3c:35:ad:8f:4f:24:dd: c8:53:9a:83:89:18:a4:c7:5f:b9:ed:00:94:00:48:ec:d2:c3: db:26:db:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0YGUt3EakXHRfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YTk2NGE2MzItYmE2OC00YzEwLTgzZTgtOGU2YThjZmI3NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xdpEXHWNvlnBJyv9K1focBguSb8EepKruvz u/hFq65xeXFqss5AcFm+t5gr++6l3O9jJnlWKXCQqixxlQAc2vppoGZTJVTJhNwe Mwfd/ytjGcvZRXgZmvYhOxchrNzV3VjpBCoGNlFRJgbfec+e6d+jtTWuHtyWtSXd +7vkAyAehRiFe51b6wQMF7tx0CUHWhu3r3+Zkowe7Np9Tmzy36WwFKsmqJJkeIl8 wnsfL1IkGryzWgzBRkMBRVJnpfYdApfQwwhXQoZeYUSzGh9/eLT49Q98h1zAtFZO kCqDWtF9AEm35l6gl/GST9KyPkF6uKVC8+R1Pr3N0u0ol3e2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn/Qi751AwEX2TW1nVk7Yrv1mt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDU0YTI5ZGMtNjgwNy0z MWFkLThkOGEtNDNmMTk1ZDBkOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0XGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFllGHIdeslZKx7yDILwjG/xfxC5/atE/2Bv4EF6qSHGOqkvwm/Eylb eBlGII3xFPb2nQhIo8HPcMq9J7apd4WUjFe6utWV1bHYCM/muIRGxyTg7qFx4ACv 1wV5OFRuiRSTTdYNtIIl0K4/dRRquhRYlCuvBAsIC1GLJVCXnJbEAkpLqOegsbfK zOxdBqWczGjLjrTU1vVL7peV177cGR9GA3E9rbGSj6VDrjUp/9IwozwTpd5XdWg0 WjpHZRzgBMNCIJQQagxmhoZYom6HAmWBZAVgo4kA496X8rWAsxGWou9GPDWtj08k 3chTmoOJGKTHX7ntAJQASOzSw9sm2w0= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:13 2026 by rpki-client