This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa File: 08ab4aa8-25bc-3a21-b234-327defea1e21.roa (raw, json) Hash identifier: KlVDhmWEv4mpGhfubGqecBOlJ4FpOFaG2R6Gng9zQaI= Subject key identifier: 68:F0:F4:C5:A8:1E:4B:6A:AF:CB:55:B8:85:17:E0:1C:D2:8B:30:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C59315CAD213F5BB2066E1D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 67.141.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:5c:ad:21:3f:5b:b2:06:6e:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=fbafde07-a4c6-410d-9c18-a62a16a08482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:6c:71:61:a2:88:fb:c6:91:ff:d4:90:58: 02:d3:9e:ff:bb:12:06:14:0a:d2:54:33:6b:68:82: fb:39:7e:22:dd:23:69:91:a6:52:52:08:39:b1:80: b0:35:76:18:31:d8:74:a3:db:2c:fb:b0:17:a3:2a: 26:62:ff:69:b6:7c:63:5b:5f:b2:43:3c:1c:a4:8f: ec:91:1d:92:59:a9:9e:f4:5c:8b:0c:ef:c6:a5:ab: 86:5c:c2:e5:1f:e9:aa:6f:1a:db:38:e4:0d:2f:e6: d6:c9:12:16:0e:89:e1:a7:56:88:c8:62:71:35:de: 9d:fa:b8:c3:17:d7:47:bf:ab:58:a3:d5:e8:15:d5: f0:a0:62:5d:de:7a:35:2b:80:27:07:fa:c0:fa:99: 6c:6f:35:3a:02:4c:b2:d0:14:be:28:72:e0:19:d5: 68:6c:d6:48:ce:9d:fe:f1:42:b3:b9:80:09:63:33: 01:f4:24:42:34:19:58:3f:e7:31:5c:ea:1f:13:4c: ba:4c:c0:a2:6f:1b:ab:81:a4:d0:29:da:5b:e3:4b: be:3e:c4:72:e4:5b:0f:07:41:00:7b:0b:b8:50:e5: 8c:59:af:32:df:85:b4:7b:62:5c:8d:1e:0f:f9:eb: e5:2c:69:9b:36:30:cd:52:f8:7d:4b:b0:97:87:e4: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:F4:C5:A8:1E:4B:6A:AF:CB:55:B8:85:17:E0:1C:D2:8B:30:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:45:91:d7:e2:fe:a7:b9:da:05:05:2f:ea:fd:e0:f2:09:37: 22:4b:53:0c:9a:bb:11:45:8b:7a:31:24:0b:c9:8a:b7:83:45: 21:33:43:16:c7:54:d1:f4:98:12:65:75:6d:ca:62:df:09:8a: 65:cd:c4:aa:7f:28:05:3b:c6:ec:cc:c2:75:ad:3c:6c:94:fc: e8:26:e0:68:6c:d0:06:8a:64:b8:b7:06:db:6f:e9:89:a8:d3: f9:f6:1e:c5:6f:62:aa:4a:42:a1:da:63:95:d4:42:31:dd:ea: 01:e3:45:35:52:88:40:14:b4:47:2d:a1:51:96:e5:ed:ce:74: 29:da:bb:c4:d2:50:ad:e4:73:e4:19:e1:e2:0b:04:89:85:0a: 64:c0:fc:1b:90:20:94:4f:5c:cf:e2:c4:72:cb:90:7d:f1:ef: 56:72:03:47:27:a0:30:a6:3f:63:d5:26:eb:c7:4e:2e:63:48: b6:06:1d:36:a9:cb:d5:f0:c3:19:ed:50:a9:80:db:61:83:6e: 28:a2:99:2f:e4:70:c8:55:8c:39:e0:13:70:7f:43:17:70:60: 65:ab:99:93:9c:52:bb:08:2a:b1:43:68:f7:14:f0:9b:cb:8c: 27:5b:1f:cb:81:c3:d0:ef:8e:cc:ee:dc:4f:f0:2a:01:70:2c: 15:3e:fe:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMVytIT9bsgZuHWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk ZmJhZmRlMDctYTRjNi00MTBkLTljMTgtYTYyYTE2YTA4NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3plscWGiiPvGkf/UkFgC057/uxIGFArSVDNr aIL7OX4i3SNpkaZSUgg5sYCwNXYYMdh0o9ss+7AXoyomYv9ptnxjW1+yQzwcpI/s kR2SWame9FyLDO/GpauGXMLlH+mqbxrbOOQNL+bWyRIWDonhp1aIyGJxNd6d+rjD F9dHv6tYo9XoFdXwoGJd3no1K4AnB/rA+plsbzU6Akyy0BS+KHLgGdVobNZIzp3+ 8UKzuYAJYzMB9CRCNBlYP+cxXOofE0y6TMCibxurgaTQKdpb40u+PsRy5FsPB0EA ewu4UOWMWa8y34W0e2JcjR4P+evlLGmbNjDNUvh9S7CXh+RceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjw9MWoHktqr8tVuIUX4BzSizBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhhYjRhYTgtMjViYy0z YTIxLWIyMzQtMzI3ZGVmZWExZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNFkdfi/qe52gUFL+r94PIJNyJLUwyauxFFi3oxJAvJireDRSEzQxbH VNH0mBJldW3KYt8JimXNxKp/KAU7xuzMwnWtPGyU/Ogm4Ghs0AaKZLi3Bttv6Ymo 0/n2HsVvYqpKQqHaY5XUQjHd6gHjRTVSiEAUtEctoVGW5e3OdCnau8TSUK3kc+QZ 4eILBImFCmTA/BuQIJRPXM/ixHLLkH3x71ZyA0cnoDCmP2PVJuvHTi5jSLYGHTap y9XwwxntUKmA22GDbiiimS/kcMhVjDngE3B/QxdwYGWrmZOcUrsIKrFDaPcU8JvL jCdbH8uBw9Dvjszu3E/wKgFwLBU+/iQ= -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:25 2026 by rpki-client