This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b5d45ec-e270-3098-ae87-e39864120fd6.roa File: 0b5d45ec-e270-3098-ae87-e39864120fd6.roa (raw, json) Hash identifier: T8V34zokj2wlQa3NibmT2BeY/FSLn4cDKdQWjBNuRRE= Subject key identifier: F0:13:BC:B7:C0:5E:2B:A7:6D:8E:D0:BB:82:06:BE:39:1F:39:94:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D1831FF0A1971D9B3A8780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b5d45ec-e270-3098-ae87-e39864120fd6.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:83:1f:f0:a1:97:1d:9b:3a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=f5d848b9-86f3-4358-abe3-6a634131a21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7f:45:f3:57:72:4c:43:1e:ad:a5:38:84:0b: 41:77:af:5c:e6:a9:93:0e:ff:47:fc:b4:02:83:a9: 4c:f0:d3:86:47:dc:93:9d:cc:42:34:f2:4c:5f:90: 36:87:0d:6d:ba:fe:c5:82:bf:06:40:cd:41:90:a9: d2:01:de:6d:fb:22:85:af:ed:bd:d1:87:cb:31:bd: a3:1f:a0:f6:95:8a:b7:e2:cc:76:59:af:7a:06:32: 6d:a8:03:8d:b2:e9:65:78:26:54:11:c2:6f:ca:75: 1e:e1:e6:cc:cf:01:40:a9:ad:46:87:42:75:15:b8: bc:5a:58:b1:45:75:fd:ff:58:77:63:31:14:5e:57: 97:01:8f:fb:84:8d:54:5e:b2:98:a3:ad:17:67:54: f8:30:db:cd:20:c5:d0:1d:8f:0a:2a:ef:2c:33:51: 1b:3a:8f:21:19:10:63:a2:b9:67:19:0a:1e:74:a2: 8e:8a:ab:e6:d9:a3:ab:6c:a1:f3:41:36:94:c9:f6: 3c:f1:8d:33:49:77:b1:4b:69:76:ff:7b:2a:61:64: 75:c9:cd:63:e6:b3:57:0b:f3:4d:1b:2b:ae:75:b0: f3:4b:ed:61:54:c1:ee:45:36:08:dd:e0:1f:7c:30: 5b:c8:c3:82:7f:c9:72:46:12:fa:cf:79:c6:df:27: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:13:BC:B7:C0:5E:2B:A7:6D:8E:D0:BB:82:06:BE:39:1F:39:94:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b5d45ec-e270-3098-ae87-e39864120fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:69:db:9f:43:87:c1:e5:6b:7b:54:a2:49:0e:6e:ad:44: dd:b5:97:a2:a5:02:1c:58:ce:8a:2a:e8:71:fe:90:a2:25:c7: 59:74:be:1f:65:0e:26:77:19:42:69:81:5c:05:36:26:0b:2b: ff:3b:aa:5b:20:d4:cd:a1:81:21:cb:5f:3f:38:16:02:72:c0: df:69:fd:72:1d:08:c2:1a:0d:00:31:3d:d2:1d:05:3e:2b:a9: 17:5f:4b:11:ab:ed:e2:82:f2:95:48:38:22:9e:90:07:f2:b7: 33:31:36:e9:2b:c4:48:70:97:45:a3:09:b0:c1:46:98:e8:eb: 3a:21:1c:58:c8:17:25:e0:30:13:41:91:71:91:7e:ee:ed:3c: 2e:d0:75:ea:9d:5a:a4:b4:bb:83:71:35:b3:95:59:8e:aa:27: 5c:e7:cc:c3:86:93:be:97:a3:f2:12:e6:bd:45:0c:f5:e6:f9: dd:2b:68:84:0d:5d:22:64:85:80:d5:30:bf:31:ee:1d:ac:21: 96:77:9b:fd:ca:0c:c9:9c:60:f6:5b:3c:88:01:cb:a0:a6:01: 46:80:fd:d3:02:ff:14:9e:71:70:68:50:14:ff:53:66:ad:f2: 59:39:59:7e:cd:4f:69:fa:8a:cb:88:ef:48:40:bf:85:1c:6c: 51:b5:3e:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0YMf8KGXHZs6h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZjVkODQ4YjktODZmMy00MzU4LWFiZTMtNmE2MzQxMzFhMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH9F81dyTEMeraU4hAtBd69c5qmTDv9H/LQC g6lM8NOGR9yTncxCNPJMX5A2hw1tuv7Fgr8GQM1BkKnSAd5t+yKFr+290YfLMb2j H6D2lYq34sx2Wa96BjJtqAONsulleCZUEcJvynUe4ebMzwFAqa1Gh0J1Fbi8Wlix RXX9/1h3YzEUXleXAY/7hI1UXrKYo60XZ1T4MNvNIMXQHY8KKu8sM1EbOo8hGRBj orlnGQoedKKOiqvm2aOrbKHzQTaUyfY88Y0zSXexS2l2/3sqYWR1yc1j5rNXC/NN GyuudbDzS+1hVMHuRTYI3eAffDBbyMOCf8lyRhL6z3nG3yffdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPATvLfAXiunbY7Qu4IGvjkfOZQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI1ZDQ1ZWMtZTI3MC0z MDk4LWFlODctZTM5ODY0MTIwZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXNadufQ4fB5Wt7VKJJDm6tRN21l6KlAhxYzooq6HH+kKIlx1l0 vh9lDiZ3GUJpgVwFNiYLK/87qlsg1M2hgSHLXz84FgJywN9p/XIdCMIaDQAxPdId BT4rqRdfSxGr7eKC8pVIOCKekAfytzMxNukrxEhwl0WjCbDBRpjo6zohHFjIFyXg MBNBkXGRfu7tPC7QdeqdWqS0u4NxNbOVWY6qJ1znzMOGk76Xo/IS5r1FDPXm+d0r aIQNXSJkhYDVML8x7h2sIZZ3m/3KDMmcYPZbPIgBy6CmAUaA/dMC/xSecXBoUBT/ U2at8lk5WX7NT2n6isuI70hAv4UcbFG1Ps0= -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:45 2026 by rpki-client