This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa File: 0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa (raw, json) Hash identifier: U0s3GVulZtHHMLfw6+j6LIaLqsn17ATHpAUXEgOtXTo= Subject key identifier: A5:DF:1C:E2:8F:A6:58:7D:95:B2:ED:B5:B6:44:9E:F9:0D:98:17:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C7251C3A5D1C282CD7F489D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 7029 IP address blocks: 40.142.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:51:c3:a5:d1:c2:82:cd:7f:48:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=e70371fe-b23c-48ea-9197-9934692e6f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:75:1d:9d:46:97:4d:6f:cf:6e:a4:c6:68: 18:69:bb:7b:37:db:21:3e:58:71:77:00:84:a8:94: 01:84:d7:85:6e:7a:ba:99:a7:d9:67:e2:98:9d:df: 5e:01:14:f2:10:2e:f4:2f:bb:08:d1:9b:26:28:96: 24:7f:0a:87:e7:da:7c:26:0e:a1:e0:e2:58:dc:95: 94:8e:84:4f:ef:2c:71:1c:d6:f9:92:72:2c:73:dd: 77:c1:21:9e:fc:a3:06:de:21:2d:9f:7c:3e:d0:98: dd:b6:75:30:6e:47:13:bc:6a:31:48:e5:97:71:83: cf:d1:93:2e:d6:00:5e:d3:ad:be:13:77:e8:b2:c0: 81:15:bf:eb:ad:7f:5b:75:a1:fc:5d:af:75:34:b3: 04:0c:7d:c2:83:90:f0:5c:4a:7b:b9:37:42:83:2b: 7b:1d:1b:1b:5e:e2:f8:8a:31:29:2f:a6:87:a9:82: b1:37:7e:a5:78:1d:5c:37:e0:86:72:a8:7e:97:9e: e3:f0:82:23:c2:d0:d3:c6:4e:85:5f:19:75:a3:21: 7f:b4:9e:5a:b7:8c:dc:d1:ed:06:29:95:ff:d5:e5: 40:5f:e4:23:3f:12:cb:0c:ff:0c:e1:e1:4a:af:ce: ac:c7:a7:b9:fc:e0:6a:e4:1e:4b:b9:11:7e:c4:2a: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DF:1C:E2:8F:A6:58:7D:95:B2:ED:B5:B6:44:9E:F9:0D:98:17:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0e:f8:c8:bc:71:20:a5:e9:ab:d4:16:11:66:4f:87:41:45: cb:d9:2b:1f:42:34:54:27:db:45:da:62:ae:7d:55:a5:09:28: 84:35:9e:f2:9d:7d:7e:ac:a6:9c:0e:bd:50:39:a1:0f:51:b6: 90:09:22:49:05:39:71:8d:46:8e:a5:b4:1e:a7:ab:96:36:46: 7d:c7:b2:4e:3f:37:9b:36:16:22:43:d1:69:8e:d9:9b:8d:00: 81:79:3e:99:19:bd:11:95:b8:3c:f4:be:d4:a8:40:50:84:61: c2:b6:7c:a7:ca:1c:d4:21:4e:73:1f:a0:4c:b9:b9:ec:d2:01: 39:f5:11:aa:1c:b1:ea:f6:5f:ba:d4:17:77:04:0d:7a:9b:c9: d6:5e:97:ac:1e:e6:76:57:10:c6:91:f7:85:f8:7a:c5:3f:bd: 88:5d:66:c8:1b:e1:9a:be:bb:37:5c:7a:a7:35:b0:5a:fd:c5: 20:1c:14:3b:e6:c1:45:5c:b8:17:82:8d:f8:f5:b3:e8:c8:ad: f2:8a:c9:ba:63:4d:06:6b:88:d5:b2:15:51:d7:b8:41:e3:f3: bc:d7:bd:c7:19:b3:19:47:8f:37:57:69:ca:e6:f4:6f:49:f9: f4:e2:80:01:c4:2f:b1:ae:43:66:e8:85:07:e0:06:fa:c3:95: 5e:89:1b:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExyUcOl0cKCzX9InYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk ZTcwMzcxZmUtYjIzYy00OGVhLTkxOTctOTkzNDY5MmU2ZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDp1HZ1Gl01vz26kxmgYabt7N9shPlhxdwCE qJQBhNeFbnq6mafZZ+KYnd9eARTyEC70L7sI0ZsmKJYkfwqH59p8Jg6h4OJY3JWU joRP7yxxHNb5knIsc913wSGe/KMG3iEtn3w+0JjdtnUwbkcTvGoxSOWXcYPP0ZMu 1gBe062+E3fossCBFb/rrX9bdaH8Xa91NLMEDH3Cg5DwXEp7uTdCgyt7HRsbXuL4 ijEpL6aHqYKxN36leB1cN+CGcqh+l57j8IIjwtDTxk6FXxl1oyF/tJ5at4zc0e0G KZX/1eVAX+QjPxLLDP8M4eFKr86sx6e5/OBq5B5LuRF+xCqbKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXfHOKPplh9lbLttbZEnvkNmBdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJhMjMwZTEtZjIxZC0z OGZjLWJhM2YtN2U3MmM1NjQ0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoO+Mi8cSCl6avUFhFmT4dBRcvZKx9CNFQn20XaYq59VaUJKIQ1nvKd fX6sppwOvVA5oQ9RtpAJIkkFOXGNRo6ltB6nq5Y2Rn3Hsk4/N5s2FiJD0WmO2ZuN AIF5PpkZvRGVuDz0vtSoQFCEYcK2fKfKHNQhTnMfoEy5uezSATn1Eaocser2X7rU F3cEDXqbydZel6we5nZXEMaR94X4esU/vYhdZsgb4Zq+uzdceqc1sFr9xSAcFDvm wUVcuBeCjfj1s+jIrfKKybpjTQZriNWyFVHXuEHj87zXvccZsxlHjzdXacrm9G9J +fTigAHEL7GuQ2bohQfgBvrDlV6JGzw= -----END CERTIFICATE-----Generated at Sat Jan 10 04:25:40 2026 by rpki-client